PRIVACY POLICY

1. Data Controller and Data Protection Officer (DPO)

Webryk Studio (operated by Abdoullah Hajji) acts as Data Controller for personal information collected through this website.

Designated Officer / DPO: Abdoullah Hajji, Founder & Privacy Officer.

Official Contact Details: Studio Webryk / Webryk Studio, 5 - 890 rue Bertrand, Sherbrooke, Quebec J1H 2Z9, Canada. Phone: 873 888-1347. Quebec business number (NEQ) 2281803025, Registraire des entreprises du Québec.

Email address: contact@webryk.ca.

2. Categories of Personal Data Collected

We collect only personal information that is strictly necessary for specified purposes:

• Directly submitted data via contact form: Full name, email address, phone number (optional), company name (optional), website URL (optional), and message content.
• Technical and navigation data: Anonymized IP address, browser type, operating system, performance and traffic metrics via Vercel Analytics and Speed Insights (no persistent advertising cookies).
• Browser local storage: Cookie consent preference (webryk_cookie_consent), language preference (webryk_lang) and, if you open one of the two client-area doors, which one you opened last (webryk_client_door). Also stored: your dismissal of the scroll offer card (webryk_scroll_offer_dismissed_v2) and, in session storage only, the fact that the opening animation has already played (webryk_preloader_shown).

3. Legal Bases and Purposes of Processing

Under Law 25, every processing operation is anchored in clear purposes:

• Consent: Responding to requests submitted through the contact form and managing analytics consent preferences.
• Contractual Necessity: Preparing quotes, drafting business proposals, and executing web development and SEO service contracts.
• Legitimate interest: ensuring the security and performance of the website, and continuously improving the user experience.
• Legal Obligation: Retaining accounting and tax records required by Revenue Quebec and the Canada Revenue Agency.

4. Non-Sale and Non-Sharing of Personal Data

Webryk Studio does not sell, rent, trade, or share personal information with third parties for commercial prospecting, cross-context behavioral advertising, or marketing purposes.

5. Subprocessors and International Data Transfers

Your information may be processed by trusted subprocessors strictly within the scope of our business operations:

• Vercel Inc.: Website hosting, serverless edge infrastructure, Vercel Analytics, and Speed Insights (SOC 2 Type II certified, US servers).
• Supabase Inc.: Database behind the studio’s internal tools (mandate tracking, client area). The public website writes nothing to it: requests sent through the form go through Resend, not this database.
• Stripe Inc.: Secure payment processing, billing management, and Stripe Climate contributions (1% dedicated to carbon removal).
• Resend Inc.: Transactional email service for routing contact form inquiry messages (US servers).
• Microsoft Corporation: Reception and hosting of the studio mailbox (Microsoft 365 / Exchange Online). Messages you send to contact@webryk.ca, including those routed by the contact form, are delivered and stored there.
• Google LLC: Google Places API requests (proxy /api/google-reviews for fetching verified customer reviews).

Some providers used for hosting and email handle data outside Quebec, primarily in the United States. Article 17 of Law 25 governs those communications. Providers are chosen on their contractual commitments to personal-information protection, and the list is given to you on request.

6. Cookies and Local Storage

Webryk Studio utilizes essential local storage and privacy-respecting measurement tools:

• Essential local storage (webryk_cookie_consent, webryk_lang, webryk_client_door, webryk_scroll_offer_dismissed_v2, webryk_preloader_shown): Stores your consent preference, your language selection, the last client-area door you opened, your dismissal of the scroll offer card, and whether the opening animation has already played this session, locally and without cross-site tracking. None of these values is sent to a server.
• Anonymous performance measurement: Vercel Analytics and Speed Insights collect aggregate usage statistics without setting persistent tracking cookies.

7. Data Retention, Destruction, and Anonymization Protocol

Contact forms and prospect inquiries: Retained in our business systems for up to 24 months following the last communication.

Contractual and tax accounting records: Retained for up to 7 years in accordance with Quebec and Canadian tax laws.

End of retention protocol: Upon expiration of retention periods, personal information is subjected to secure digital destruction (digital shredding) or irreversible anonymization for statistical purposes.

8. Security Safeguards

Webryk Studio implements robust physical, technical, and organizational safeguards: SSL/TLS (HTTPS) encryption, strict least-privilege access controls, and isolated serverless cloud environments.

9. Rights of Individuals

Under applicable privacy legislation, you hold the following rights:

• Right of access: Request confirmation and copies of your personal information.
• Right of rectification: Request correction of inaccurate, incomplete, or ambiguous data.
• Right to erasure (right to be forgotten): Request deletion of your personal data.
• Right to withdraw consent: Withdraw your consent to data processing at any time.
• Right to portability: Receive computerized data in a structured, technology-standard format.
• Right to de-indexing (Art. 28.1 Law 25): Request that personal information cease to be disseminated or de-indexed from search engines where legal conditions are met.

To exercise any of these rights, write to contact@webryk.ca. We will respond within 30 days.

10. Non-Use of Automated Decision-Making and Profiling

No decision about you is made solely by automated processing, and no profiling is applied to the information collected through this site. If that changes, article 12.1 of Law 25 requires that you be told, and this policy would be updated to say so.

11. Privacy Incident Protocol

In the event of a security incident presenting a risk of serious injury, Webryk Studio will promptly notify affected individuals and the Commission d’accès à l’information du Québec (CAI), as required by Article 3.5 of Law 25.

12. Supervisory Authorities and Complaints

If you believe your privacy rights have been infringed, you have the right to lodge a complaint with the Commission d’accès à l’information du Québec (CAI - www.cai.gouv.qc.ca) or the Office of the Privacy Commissioner of Canada (OPC).

13. Privacy Policy Changes

This policy may be revised periodically to reflect technological or legal updates. The last updated date is shown at the top of the page.

14. Contact Information

For questions regarding this policy or to contact our Privacy Officer:

Webryk Studio · Email: contact@webryk.ca · Phone: 873 888-1347 · Sherbrooke, Quebec, Canada. The full postal address of the officer is given in section 1.