Privacy policy

1. Who we are

MEDIA MTL is a web design and development studio based in Montréal, Québec. The business operating this website is [legal business name and enterprise number (NEQ)], [registered business address].

2. Person in charge of the protection of personal information

Under Law 25, the person with the highest authority in the business is responsible for protecting personal information, unless that role is delegated in writing. Our person in charge is [name and title of the person in charge].

Contact: info@mediamtl.com, subject “Privacy”. [optional mailing address for privacy requests]

3. What we collect

We only collect what we need to respond to you and run the site:

• Contact form: name, email, phone, company (optional), current website (optional), project type, budget range and your message.
• Website audit tool: the website address you enter and, if you ask for the full report or a manual audit, your email address.
• Booking (if offered): the information you give the scheduling provider when you book a call.
• Technical data: your IP address is processed briefly to protect our forms from spam and abuse (rate limiting); we do not store it in a database. Our hosting provider keeps standard server logs, which include IP addresses, for a limited time. [confirm hosting log retention period]
• Analytics (only with your consent): pages viewed, approximate location, device type and which buttons were used. We never send your name, email, phone number or message to analytics tools.

4. Why we use it

• To reply to your inquiry, prepare a proposal, and follow up on a project you asked about.
• To run the audit you requested and send you the results.
• To protect the site and our inbox against spam and abuse.
• With your consent only: to measure and improve the site (analytics) and to measure advertising performance (marketing).

5. Consent and cookies

Necessary storage (security, spam protection and remembering your privacy choice) is always on. Analytics and marketing tools are off by default and load only if you opt in through the privacy banner. Whenever these tools are in use, a “Cookie preferences” link at the bottom of every page lets you change your choice at any time.

6. Service providers and where data is processed

We use trusted providers to operate the site. Some of them process data outside Québec, including in the United States. Before communicating personal information outside Québec we assess the privacy implications as Law 25 requires. [confirm the list below, the location of each provider’s processing, and that a privacy impact assessment was completed]

• Vercel — website hosting and delivery.
• Resend — sending the emails generated by our contact and audit forms.
• Google PageSpeed Insights — the website address you submit to the audit tool is sent to Google to run the test.
• Google Analytics / Google Tag Manager — only if you consent to analytics or marketing.
• Cloudflare Turnstile — spam protection, only if enabled on the form.
• Cal.com or Calendly — only if you choose to book a call. [confirm which provider is used]
• [CRM provider, if lead data is forwarded to one]

7. How long we keep it

We keep personal information only as long as needed for the purposes above, then destroy or anonymize it. [retention period for inquiries that do not become clients]; [retention period for client records, e.g. as required by tax law].

8. Your rights

You can ask to access the personal information we hold about you, have it corrected, withdraw your consent, or ask us to stop disseminating it or to de-index it where the law allows. You may also request the data you provided in a structured, commonly used technological format. Write to info@mediamtl.com; we respond within 30 days.

If you are not satisfied with our response, you can contact the Commission d’accès à l’information du Québec.

9. Security and confidentiality incidents

Our forms use encrypted connections (HTTPS), strict input validation, spam protection and access-controlled email accounts. If a confidentiality incident presents a risk of serious injury, we will notify the Commission d’accès à l’information and the people affected, and record the incident in our register, as Law 25 requires.

10. Changes to this policy

We will post any update on this page with a new date.