Privacy policy

This policy explains how Web Impact Solutions collects, uses, stores, and protects personal information in compliance with Quebec Law 25 and Canadian privacy legislation.

We only collect the data required to provide our bilingual web agency services, perform diagnostics, and communicate with clients or prospects.

Contact forms: name, email, company, phone (optional), project details, and consent preferences.

Scheduling: preferred time slot, meeting agenda, and optional notes to prepare our consultation.

Chatbot: name, email, chat messages, and project information (collected only after explicit consent to enable chat).

Google Analytics 4: aggregated traffic metrics, page views, user interactions, and conversion events captured only when visitors accept analytics cookies. We use Google Analytics to measure website performance, understand user behavior, and improve our services.

Google Business Profile: profile views, search queries, actions (calls, directions, website clicks), and messaging interactions. These statistics are aggregated and used to improve our local presence and service delivery.

Google Search Console: search performance data including impressions, clicks, and indexing status. This helps us monitor and improve our website's visibility in search results.

Published content: blog posts, FAQ pages, and other public content may reference general industry practices or anonymized case studies. Personal information is never published without explicit consent.

We process personal information on the basis of consent, contractual necessity, and legitimate interest when assisting existing clients.

Data is used to schedule consultations, deliver proposals, execute projects, send agreed-upon communications, and maintain platform security.

Project records are retained for seven years to satisfy legal, tax, and audit obligations. Lead records without engagement are purged after eighteen months.

Consent logs are retained for at least one year as required by Law 25. After one year, logs may be anonymized or deleted unless required for legal purposes.

We apply encryption at rest, access controls, and least-privilege administration across our infrastructure and subcontractors.

You may request access, rectification, portability, or deletion of your personal information at any time. Contact us via privacy@solutionsimpactweb.com or by using the data request form below.

We respond to all formal data requests within 30 days as required by Law 25. Identity verification may be required to protect your information.

For Google Analytics data: You can request access to or deletion of your analytics data. We will process these requests within 30 days and coordinate with Google to ensure your data is handled according to your request.

For Google Business Profile data: Profile interaction data is generally aggregated, but you can request information about how your interactions are processed. We respond to these requests within 30 days.

For chatbot data (Crisp): You can request access or deletion of your chat history and contact information. We process these requests within 30 days and will coordinate with Crisp to ensure your data is removed from their systems as well.

For email marketing data (MailerLite): You can request access or deletion of your email subscription data at any time. We use double opt-in confirmation, and you can unsubscribe directly from any email using the unsubscribe link. We process deletion requests within 30 days and coordinate with MailerLite to ensure your data is removed.

For operational data (Supabase): Leads, bookings, payments, and consent logs are stored in our internal database. You can request access or deletion of your data at any time. We process these requests within 30 days and will remove your data from our systems. Consent logs are retained for at least one year as required by Law 25, but can be anonymized upon request.

For payment data (Stripe): Payment information is processed by Stripe in compliance with PCI-DSS standards. You can request information about your payment transactions. We process these requests within 30 days and coordinate with Stripe as needed.

Some subcontractors operate infrastructure in the United States or the European Union. Contracts include standard contractual clauses and security reviews to guarantee equivalent protection.

We maintain an updated assessment of vendors to confirm their compliance with Law 25, GDPR, and applicable data protection frameworks.

Privacy Officer: Daniel Germain, Founder.

Email: privacy@solutionsimpactweb.com

Postal address: 400 Rue Montfort, Suite 220, Montreal, QC, H3C 4J8, Canada.