WQX

Privacy

This page says what personal information we hold, why, and for how long. It also says who is responsible and how to reach them.

Les Technologies WQX Inc. is a Quebec enterprise. It is subject to the Act respecting the protection of personal information in the private sector.

Person in charge

Person in charge of the protection of personal information
Les Technologies WQX Inc.
privacy@wqx.cx

Under section 3.1 of the Act, the person with the highest authority in the enterprise holds this role, and it has not been delegated.

Send written requests about your personal information to that address. If a request is unclear, we help you narrow it. We do not refuse it for being vague.

This website

The site sets no cookies. It runs no analytics, trackers or advertising. It loads no fonts or scripts from other companies. Our hosting provider keeps ordinary server logs for delivery and security. Our email runs on Google Workspace, and Google keeps that mail in the United States, outside Quebec; our hosting provider may keep its server logs outside Quebec as well. We assessed both arrangements under Quebec's privacy law before relying on them.

Sending your answers

The Start section of the home page asks four questions. There is no form on the page today: you send your answers by email, and they arrive in our own Google Workspace account and nowhere else. Google keeps that mail in the United States, outside Quebec. We assessed that arrangement in writing before relying on it, as the section above says. Please do not include anything sensitive; we only need to know about your software.

We may read email we receive with the help of an AI service, Anthropic, which processes it in the United States, outside Quebec. We assessed this before using it. It does not use our email to train its models, and it does not send email for us.

When the form is added, your answers will go to a spreadsheet for the quarter, in that same account, through a small Google Apps Script program. We will receive an email saying a new answer has arrived, and it will contain none of your information. The program keeps no log of what you send, and sends nothing outside our Google account.

Each quarter's spreadsheet will be deleted whole, and not kept in the trash, when its first answer reaches 24 months, so no answer is kept longer than that. Mail you send us meanwhile is kept in the same account and deleted on the same schedule. Write to contact@wqx.cx.

What we collect

Categories held
WhatWhyKept
Your name, company and contact detailsTo reply to you and to carry on a business conversationWhile the conversation is active, then up to 24 months
Outreach records and do-not-contact listsTo honour an unsubscribe or a request not to be contacted, and to prove compliance with anti-spam and telemarketing rulesAs long as those rules require, at least three years; an unsubscribe is kept for as long as we might otherwise contact you
Your answers to the Start formTo reply to you and to scope the workDeleted within 24 months, with the rest of their quarter
What you tell us about your systemsTo judge whether the work is possible, and to scope itWith the engagement record, or deleted if no engagement follows
Contract and billing recordsRequired by law once we do businessAs long as tax and corporate law require

We do not sell personal information. We do not share it for advertising. We do not use it to make automated decisions about you.

Client systems

A system we assess may hold personal information about a client's employees, customers or suppliers. That information belongs to the client, who stays responsible for it. We act for the client under a written mandate that sets the confidentiality measures.

Our access is read-only. The material is kept on encrypted storage, separate from everything else. At the end of the engagement it is destroyed, and we give the client a certificate stating what was destroyed and when.

If any of it would leave Quebec, including to a service provider outside Quebec, we assess that first and cover it with a written agreement. We tell the client before it happens.

If a person asks us about their data inside a client's system, we refer the request to the client's person in charge within one business day, and we record it.

Governance

The Act requires every enterprise to have policies and practices for personal information, and to publish information about them. This section is that information. It fits a one-person business and still applies if that changes.

Roles across the life of personal information
StageWhat happensResponsible
CollectionOnly what a working relationship needs, from you directly, for a purpose stated at the timePerson in charge
UseOnly for the purpose it was collected for, unless you consent to another or the law allows itPerson in charge
AccessOnly people who need it for the task at handPerson in charge decides who, and records it
CommunicationOnly with your consent or where the law allows. Outside Quebec, only after an assessment and a written agreementPerson in charge
KeepingFor the periods above, and no longerPerson in charge
DestructionAt the end of those periods. Client material at the end of the engagement, with a certificatePerson in charge

Today one person holds every role in this table. Anyone who later handles personal information here will sign a confidentiality commitment. Their access will be limited to what their task needs, and it ends when the task ends. The person in charge stays accountable.

The person in charge approves these policies and practices. The approval date is shown at the end of this page.

Your rights

  • Access: a copy of the personal information we hold about you, in a form you can understand. Access is free. If transcription or sending has a reasonable cost, we tell you the amount first.
  • Portability: the computerized information you gave us, in a structured, commonly used format. This covers what you provided. It does not cover conclusions we drew.
  • Rectification: correction of anything inaccurate, incomplete or ambiguous.
  • De-indexing: we stop disseminating the information, and de-index it where the law provides for it.
  • Withdrawal of consent: at any time, where we relied on your consent.

Write to privacy@wqx.cx with enough information to identify you. We reply in writing within thirty days. Under the Act, no reply within thirty days counts as a refusal.

Complaints

Send a complaint to privacy@wqx.cx. We acknowledge it and give you a decision with reasons within thirty days.

You can complain to the Commission d'accès à l'information du Québec at any time, including instead of complaining to us.

Confidentiality incidents

We keep a register of confidentiality incidents. If an incident presents a risk of serious injury, we promptly notify the Commission and the people affected. We take reasonable measures to reduce the risk of injury and to prevent it from happening again.

If an incident involves a client's information, we notify that client's person in charge without delay.

Version

Draft, pending legal review and approval by the person in charge. Not yet in force. When approved, this line will show the version number and the approval date.