What personal information this site collects, why, for how long, and how to exercise your rights.
Last updated:
In short
This site collects personal information only when you write to us, through the contact form or by email.
Analytics are off by default: they turn on only if you accept them. No advertising tool is installed on this site.
We do not sell or rent any personal information.
You can ask to access, correct or delete your information by writing to contact@cyberbay.ca.
This policy applies to the website www.cyberbay.ca. It is written in accordance with Québec’s Act respecting the protection of personal information in the private sector, as amended by Law 25, and Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).
1. Who is responsible for your information
The site is operated by CyberBay, a cybersecurity firm based in Boucherville, Québec (“CyberBay” or “we”).
You can reach the person in charge of the protection of personal information at:
the type of request you select and the content of your message;
the language of the page the form was sent from.
If you write to us by email, we receive your address, your signature and anything you choose to include in your message.
Please do not enter sensitive information in the form (passwords, financial data, health information, information about other people). If you are dealing with an incident, describe the situation in general terms: we will then agree on an appropriate channel.
Information collected automatically
Like any website, ours receives technical data on each visit: IP address, date and time, page requested, browser type. Our hosting provider may record this data in technical logs used to operate and secure the service.
When the form is submitted, your IP address is recorded with your message and in our technical logs. It is used to limit the number of submissions, block abuse and prevent fraud.
Information collected with your consent
If you accept analytics, we record, by our own means and with no third-party tool:
the pages you view, their language, the site you came from and, where applicable, the campaign that brought you here;
the links and buttons you click;
how far you scroll and the time spent on each page;
how forms are used (started, sent, successful or failed) and the type of request chosen, never the content of the fields;
quiz participation and the score obtained, never your answers;
errors encountered (page not found, technical error) and how fast pages load;
the type of device (mobile, tablet or computer);
your IP address, and the approximate city derived from it.
This information is tied to a random identifier and to your IP address. The content of forms is never recorded for this purpose.
What we do not collect
The site has no user accounts, no newsletter and no online payments. It does not collect your precise location: when you send the form or accept analytics, only an approximate city is derived from your IP address. The analytics described above, which recognize the same browser from one visit to the next, stay off until you accept them.
3. Why we use it
Your information is used only to:
answer your request and follow up on our exchanges;
prepare a service proposal, at your request;
protect the site against abuse, automated submissions and attacks;
measure how the site is used and improve it, if you consent;
meet our legal obligations.
By sending us the form or an email, you consent to this use. You can withdraw your consent at any time by writing to us; we will then stop using your information, subject to our legal obligations.
We do not use your information for marketing without your agreement, and we do not make any decision based exclusively on automated processing.
4. Cookies and similar technologies
A cookie is a small file that a website saves in your browser. Your browser’s local storage plays a similar role.
This site uses the cookies it needs to work and, only if you accept them, analytics cookies. It does not set any advertising or social media cookies.
Items saved in your browser
Name
Category
Purpose
Duration
cb-consent
Necessary
Remembers your cookie choice.
12 months
cb-loader
Necessary
Shows the loading screen only once per visit.
Session
cb-nav
Necessary
Handles the animated transition between two pages.
Session
cb-lang
Necessary
Remembers the language you chose (French or English).
12 months
cb-vid
Analytics
Random identifier that tells visitors apart.
12 months
cb-sid
Analytics
Groups the pages viewed during a single visit.
Session
None of these items contains your name, your email address or any other information that identifies you directly. Analytics cookies are created only after you agree and are deleted if you withdraw your consent.
The “Marketing” category in the consent window does not correspond to any tool at this time. If we add one, it will be off by default and the table above will be updated.
You can review your choice at any time:
You can also delete or block cookies in your browser settings.
5. Service providers and hosting
We do not sell, rent or trade any personal information. We rely on a small number of service providers, who process your information on our behalf:
our hosting provider, which hosts the site, stores usage statistics and delivers messages sent through the form to our mailbox;
our email provider, which stores the emails we receive and send.
These providers may process or store information outside Québec, including elsewhere in Canada and in the United States. That information is then subject to the laws of those jurisdictions. We select providers that offer recognized security and confidentiality safeguards.
The site contains links to external sites, such as LinkedIn. We are not responsible for their content or their privacy practices.
6. Retention and destruction
We keep your information only as long as needed for the purposes it was collected for:
Requests received through the form or by email: no more than 24 months after our last exchange, if no engagement follows;
Usage statistics and technical logs: no more than 90 days;
Information related to an engagement: for the period set out in the contract, then for the period required by law, in particular for tax and accounting purposes.
After that, the information is securely destroyed or anonymized.
7. Security
Security is our trade. We apply to our own systems the measures we recommend to our clients, including:
encryption of all exchanges with the site (HTTPS);
strict security headers that block content loaded from other sites;
access to information limited to the people who need it;
validation of the data received and protection of the form against automated submissions.
No measure offers an absolute guarantee. If a confidentiality incident presents a risk of serious injury, we will notify the Commission d’accès à l’information du Québec and the people concerned, and record it in our incident register, as the law requires.
8. Your rights
Subject to the exceptions provided by law, you can:
access the personal information we hold about you and obtain a copy;
have corrected any information that is inaccurate, incomplete or ambiguous;
withdraw your consent to the use or disclosure of your information;
ask for the deletion of information that is out of date or no longer justified, or ask that it no longer be disseminated;
obtain your computerized information in a structured, commonly used technological format (portability).
To exercise a right, write to contact@cyberbay.ca. We may ask you to confirm your identity. We answer in writing no later than 30 days after receiving your request. Exercising these rights is free; reasonable fees may apply to reproducing or sending documents, in which case we tell you in advance.
9. Questions and complaints
If you believe your information was not handled in accordance with this policy, please write first to the person in charge, to contact@cyberbay.ca. We acknowledge every complaint, review it and answer in writing within 30 days.
The site is intended for organizations and their representatives. We do not knowingly collect information from anyone under the age of 14.
10. Changes
We may update this policy, for example if we add a feature to the site or if the law changes. The effective date appears at the top of the page. If a change is significant, a notice will be posted on the site.
If the French and English versions of this policy differ, the French version prevails.