In short: we collect what you send us, and visit statistics only if you agree. We use it to answer you and run your project, we keep it in Québec, and you can ask us to see, correct or delete it at any time.
Who we are
This website is run by STUDIO WPLOOK INC., which works as WPlook Studio, a company incorporated in Québec in 2014. This policy explains what personal information we collect when you visit wplook.ca, fill in a form or write to us, why we collect it, how long we keep it, and what you can ask us to do with it. It follows Québec’s Act respecting the protection of personal information in the private sector (Law 25) and Canada’s PIPEDA.
We collect only what we need to reply to you and to plan and deliver your project. We do not sell personal information, and we do not use it for advertising.
We make no decision about you by automated processing alone, and we do not build profiles of visitors. This site is meant for organizations, not for children under 14, and we do not knowingly collect information about children.
The person responsible
Québec law requires every business to name the person responsible for protecting personal information. At WPlook Studio, that is:
Victor Tihai, Founder and lead developer
Email: wplook@wplook.com
Write to this address with any question about this policy, or to use any of the rights described below. We reply within 30 days, as the law requires.
What we collect
The table lists everything this site collects, when, and why.
| Information | When | Why |
|---|---|---|
| Your email address and your consent to be contacted | Step 1 of the project brief | To reply to you about your project |
| The date, time and IP address of your consent, and the page you sent the brief or message from | Step 1 of the project brief, or the contact form | To keep a record that you agreed to be contacted |
| Your organization, website, project details, budget range and timeline | Steps 2 to 4 of the project brief | To understand the project and prepare a written plan and quote |
| Your name, role and comments | Step 5 of the project brief | To know who we are writing to |
| Your name, email address, organization, message and your consent to be contacted back | The contact form | To answer your message |
| Everything you write in an email to us | When you write to us | To answer you and keep a written record of the project |
| A coded version of your IP address, which cannot be read back | When you send a form | To limit repeated submissions; it is deleted after one hour |
| The pages you visit, how you reached the site, your device, browser and approximate location | Only if you accept Statistics, through Google Analytics | To see which pages are useful and improve the site |
| Technical data such as your IP address, browser and the page requested | On every visit, in the web server’s logs | To keep the site secure and working |
How the project brief saves your answers
The brief has five steps. So that you do not lose your work, it saves your answers in two places:
- In your browser. Your answers are kept on your own device until you send the brief or choose “Start over”. We cannot see this copy. Clearing your browser data also removes it.
- On our server, after each step. Once you have given your email address and your consent in step 1, each completed step is saved, even if you do not finish. This lets us reply to a brief that was interrupted. A brief that is never sent is deleted automatically six months after its last step.
If you start a brief and change your mind, write to us and we will delete what was saved right away.
Cookies
Anything that could track you is off until you turn it on. The first time you visit, a banner lets you refuse or accept Google Analytics. Refusing is as easy as accepting, and the site works the same either way. You can change your choice at any time with the Cookies link at the bottom of every page, or here: change my cookie choices.
| Cookie | What it does | How long |
|---|---|---|
| Language | Remembers whether you read the site in English or in French. Always on. | 1 year |
| Cookie choice | Remembers your cookie choice, so the banner does not come back. Always on. | 12 months |
| Google Analytics | Tells one visit from another to count visits. Only if you accept Statistics. | 2 years |
Google Analytics is loaded through Google Tag Manager, and neither is loaded before you accept. If you withdraw your consent, the Google Analytics cookies are deleted and nothing more is sent. Google Analytics does not record your full IP address, and we keep its data for 14 months. The project brief also keeps your answers in your browser’s storage, as described above. Fonts are served from our own server.
Who sees your information
Only the people who need it to answer you or deliver your project:
- WPlook Studio.
- Specialists who join your project. Each one is named to you before they get access, and works under the same confidentiality rules.
- OVHcloud, which provides the server in Montréal where the site, its database and our email are kept, through WPL Hosting, our hosting service.
- Google, for Google Analytics, only if you accept Statistics.
We share information with no one else, unless the law requires it.
Where your information is kept
The site, its database, the forms you send and our email are kept on a server in Montréal, Québec. They do not leave Québec.
The one exception is Google Analytics, if you accept it: Google processes its data on its own servers, which may be outside Québec and Canada, mainly in the United States, under its data processing terms. If you refuse Statistics, nothing is sent to Google.
How long we keep it
| Information | Kept for |
|---|---|
| A project brief that was started but never sent | 6 months after its last step, then deleted automatically |
| Briefs, messages and emails that did not lead to a project | 2 years |
| The records of a project we delivered, including its emails | 7 years after the project ends, for tax and contract records |
| The coded IP address used to limit submissions | 1 hour |
| The web server’s logs | 2 years |
| Google Analytics data | 14 months |
When we no longer need information for the purpose it was collected for, we delete it or make it anonymous.
How we protect it
The site is served over an encrypted connection. Briefs and messages are stored as private records that only signed-in staff can open, and are never published. The server is kept up to date and backed up, and only the people who need access have it.
Your rights
You can ask us at any time to:
- see the personal information we hold about you;
- correct anything that is wrong or incomplete;
- delete it, or stop using it;
- stop publishing information about you, or remove a link to it, if publishing it breaks the law or seriously harms your reputation or privacy;
- withdraw a consent you gave;
- receive information you gave us in a commonly used format.
Write to the person responsible, named above. We first confirm your identity, so that no one else receives your information. If you are not satisfied with our answer, you can complain to the Commission d’accès à l’information du Québec or to the Office of the Privacy Commissioner of Canada.
If something goes wrong
If personal information we hold is lost, accessed or shared without permission, we assess the risk. If there is a risk of serious harm, we tell the people concerned and the Commission d’accès à l’information, and we record every incident.
Changes to this policy
When this policy changes, we update it on this page, and the date at the top changes with it. If a change affects how we use information you already gave us, we write to you first.