Privacy policy

Last updated:

This policy explains, in plain language, what personal information we collect, why, where it’s stored and how to exercise your rights, under Québec’s Act respecting the protection of personal information in the private sector (Law 25).

Who is responsible

This site is run by Kalman Control, in Laval, Québec. For any question or request to the person in charge of the protection of personal information: info@kalmancontrol.ca.

What we collect

  • Contact form: your name, company, email, phone (optional) and message.
  • Booking a call: your name, email and whatever you enter in the Google Calendar booking tool.
  • Emails: whatever you choose to write to us.

This site uses no tracking cookies, no analytics and no advertising. The hosting provider keeps technical logs (IP address, pages requested) to keep the site secure and working.

Why

Only to reply to you, schedule our conversations and, if you become a client, carry out the work. We don’t sell your information, share it for marketing, or add you to any mailing list.

Where it’s stored

  • Netlify, which hosts the site and receives the contact form: servers in the United States.
  • Google, for the calendar, call bookings and client folders (Google Drive): servers that may be outside Québec, including in the United States.
  • Microsoft 365, provided by GoDaddy, for the info@kalmancontrol.ca mailbox: Microsoft servers that may be outside Québec, including in the United States.

Your information may therefore be transferred outside Québec. Before doing so, we assessed that these providers offer adequate protection, including through their contractual confidentiality commitments and security measures.

How long

Inquiries received through the form or by email that don’t lead to an engagement are deleted after 24 months. Form submissions stored at Netlify are deleted regularly. Client records are kept as long as applicable tax and business laws require.

Your rights

You can ask to access, correct or delete your information, and withdraw your consent at any time, by writing to info@kalmancontrol.ca. We reply within 30 days.

During a Diagnostic or engagement

We prefer to review your documents on your screen rather than receive copies. Anything we do receive is kept in a shared folder reserved for your company, never on a personal device or in a public AI tool. We avoid or redact personal information, such as employee names or your customers’ contact details.

What’s said in interviews is reported as themes, not attributed to anyone, unless the person agrees. At the end, working copies are returned or deleted within 30 days of the presentation, unless the engagement continues, and we confirm it by email. We sign your NDA if needed.

If something goes wrong

If a confidentiality incident presents a risk of serious harm, we will notify you and the Commission d’accès à l’information, as the law requires.

Complaints

If you’re not satisfied with our answer, you can contact the Commission d’accès à l’information du Québec (www.cai.gouv.qc.ca).

Changes

This policy is updated as needed. The date at the top of the page shows the latest version.