Effective Date: September 6, 2023

The website kffein.com (the “Site”) is owned and operated by David Guillemin.

At Kffein, we place great importance on protecting your personal information. This policy describes how we collect, use, disclose, and protect your personal data, in accordance with Quebec’s Law 25 and, where applicable, the General Data Protection Regulation (GDPR).

Purpose of the Policy

The purpose of this Privacy Policy (the “Policy”) is to inform users of our Site about the following:

The personal data we collect
How the collected data is used
Who has access to the data
The rights of Site users
The Site’s cookie policy
Consent and withdrawal mechanisms

This Policy applies in addition to our Terms of Use.

Explicit Consent

By using our Site, users agree that they have read and understood this Policy and explicitly consent to the collection, use, and retention of their personal data as described herein. They may withdraw their consent at any time by contacting us at the address provided below.

No non-essential cookies (statistical, marketing, third-party) are enabled without your prior consent. Your consent is collected and managed through the Axeptio platform, which allows you to modify or withdraw your choices at any time.

Learn more about Axeptio

Personal Data We Collect

We only collect data necessary to achieve the purposes described below. We will not collect any additional data without prior notice.

Data collected automatically during your visit:

Consent data (via Axeptio)
Device-related data (HTTP Agent, HTTP Referrer)
Visited URLs
Browser language
IP address
Approximate geolocation

Data collected via contact form:

Name
Email address
Organization (if applicable)
Information freely provided in the message

Use of Personal Data

The collected data is used for the following purposes:

Statistical analysis of site traffic
Management of contact forms
Improvement of user experience
Communication with individuals who submitted a form

We process your data only based on your explicit consent, or when processing is necessary to provide our services, ensure the Site’s security, or comply with legal obligations.

Sharing and Transfer of Personal Data

Internal access

Personal data is accessible only to members of our team who require it to perform their duties and who are bound by strict confidentiality obligations.

Service providers and international transfers

Google Analytics (traffic analysis tool) – Data hosted in the United States
Axeptio (cookie consent management tool) – Data hosted in the European Union

These transfers are made only to jurisdictions offering protection equivalent to that required by Law 25 and the GDPR.

Other disclosures

If required by law
When necessary in the context of legal proceedings
To establish or protect our legal rights
To potential buyers in the event of a business sale

Data Retention Period

Personal data is retained only as long as necessary to fulfill its purpose:

Statistical data (Google Analytics): according to Google’s default retention period (14 months)
Contact form data: 12 months from the last communication

After these periods, the data is deleted or anonymized.

Protection of Personal Data

We apply appropriate technical and organizational security measures, including SSL/TLS encryption, secure Canadian hosting servers, restricted access controls, and internal confidentiality agreements.

We also maintain a confidentiality incident log. In the event of an incident that may affect your rights, we will notify the Commission d’accès à l’information du Québec (CAI) and, if necessary, the affected individuals.

Despite these precautions, no system is completely immune to risks. The Internet always carries some level of uncertainty regarding data security.

User Rights

In accordance with Law 25 and the GDPR, you have the following rights:

Right of access
Right of rectification
Right to withdraw consent
Right to data portability (to receive your data in a structured format)
Right to erasure (“right to be forgotten”)
Right to file a complaint with the CAI

To exercise these rights, please contact our Privacy Officer:

David Guillemin
david@kffein.com
+1 514 897 2991 #1081
5-7737 Fabre Street, Montreal (QC) H2E 2C1

Children

We do not knowingly collect or use personal data from children under 13 years old. Any information collected inadvertently will be deleted as soon as possible. Parents or guardians may contact us for any deletion requests.

Cookie Policy

A cookie is a small file stored on the user’s hard drive by a website. It enables data collection about browsing habits.

Consent management

Our Site uses Axeptio to collect and manage your consent. You may accept, refuse, or modify your cookie preferences at any time through the consent banner.

Types of cookies used:

Necessary cookies: enable the basic functioning of the site (navigation, security, forms)
Preference cookies: store information such as language or region
Statistical cookies: used via Google Analytics to measure site traffic (maximum retention period: 14 months)
Marketing cookies: not currently used
Third-party cookies: created by external services, such as Google Analytics and Axeptio

You can disable non-essential cookies in your preferences or directly in your browser settings.

Policy Changes

This Policy may be updated to remain compliant with the law and our internal practices. Any changes will be reflected by updating the “Effective Date” at the top of this page. In the event of a major change, we may notify you by email or through a notice on the Site.

Contact

For any questions, concerns, or complaints regarding this Policy or your personal information, please contact our Privacy Officer: