Privacy Policy & Law 25

1. Privacy Officer

The Privacy Officer at Olimar is Olivier Lange. For any question, access request, or exercise of your rights, you may reach him at info@olimar.ca.

2. Information collected

Olimar collects only the information strictly necessary to respond to your request:

Contact form: name, email address, organization (optional), subject, and message. This information is routed directly to our inbox and is not stored in a database.
Technical server logs: IP address and timestamp, retained briefly for security and diagnostic purposes. These data are not cross-referenced with other personal information.

We apply the principle of data minimization: we collect only what we need, for as long as necessary.

3. Purposes

Information collected through the contact form is used solely to respond to your request. There is no other use, no behavioral profiling, and no sale or transfer of your data to third parties for commercial purposes.

The contact form includes an explicit consent checkbox, in line with Law 25 requirements. By checking it, you consent to Olimar using your information to respond to your request.

You may withdraw your consent at any time by writing to info@olimar.ca. Withdrawal does not affect the lawfulness of processing carried out before that point.

5. Retention

Contact request emails: retained for 24 months from receipt, then deleted or anonymized.
Server logs: retained for 90 days, then automatically purged.

No other personal data is persistently stored in our systems in V1.

6. Disclosure to third parties

Olimar uses two technical sub-processors:

Resend (email delivery) — a US company whose servers are located in the United States. Your contact details (name, email) pass through Resend when we send our reply to your request. This transfer outside Québec has been assessed through a privacy impact assessment. Resend is bound by contractual confidentiality obligations.
OVH (server hosting) — infrastructure physically located in Canada. Hosted data does not leave Canadian territory.

No other disclosure to third parties is made, except as required by law.

7. Cookies

olimar.ca uses no non-essential cookies. There are no tracking cookies, no advertising cookies, and no third-party analytics services.

Audience measurement is performed using Umami, a self-hosted tool on our own infrastructure that produces aggregated statistics without cookies or personal identifiers. This measurement does not constitute processing of personal information under Law 25 — no consent banner is therefore required.

8. Individual rights

Under Law 25, you have the following rights:

Access: obtain a copy of the personal information we hold about you.
Rectification: have inaccurate or incomplete information corrected.
Withdrawal of consent: end the processing of your information.
De-indexing: in cases provided by law, request that dissemination of information about you cease or that it be de-indexed.

To exercise any of these rights, write to info@olimar.ca describing your request. We will respond within the legally prescribed timeframe (30 days, extendable once).

9. Privacy incidents

In the event of a privacy incident (unauthorized access, communication, or use of personal information), Olimar undertakes to:

Maintain an incident register in accordance with legal requirements.
Notify the Commission d'accès à l'information (CAI) and the affected individuals if the incident presents a risk of serious harm.
Take appropriate corrective measures to limit impact and prevent recurrence.

10. Updates

This policy may be updated to reflect changes in our practices or legal requirements. The date of last revision is shown below. We encourage you to review it periodically.

Last updated: June 12, 2026.