Skip to content

Privacy policy

Your information, in plain terms.

This policy describes what the vestibuleweb.ca website actually collects, why, where it is kept and how to exercise your rights. It is written under Québec's Law 25 (the Act to modernize legislative provisions as regards the protection of personal information) and applies to this site and to the exchanges that follow from it.

Last updated: October 15, 2026

Who we are

Vestibule Web is a web and artificial intelligence studio established in Québec. Email: info@vestibuleweb.ca.

Person in charge of the protection of personal information: Marc Plamondon. You can reach them at info@vestibuleweb.ca or at 581 999-6456 with any question about this policy or your information.

What we collect, and when

The contact path (form). When you complete the contact path, we receive your name, your email and, if you provide them, your company or organization name and your phone number. We also receive your answers to the path's questions: what brings you here, the kind of project, your field, where you are at, your tools in place, your preferred timeline, your current website address and your message. This information is sent to our CRM (HubSpot) when you submit, along with the page you are writing from and, if HubSpot has already assigned you a cookie, its identifier.

Booking a call. When you book a time in our calendar (HubSpot Meetings), HubSpot collects your name, your email and the chosen slot, and records them in our CRM.

Email and phone. When you write to us or call us directly, we keep the information you choose to share so we can reply and follow up.

Browsing. Our host (Framer) keeps technical logs needed to run and secure the site (IP address, browser type, pages viewed, timestamps). Framer's traffic statistics are computed with no cookies and identify no one: visits are anonymized with a daily rotating salt. Fonts are served by Google Fonts, which receives your IP address when the page loads.

Why we use it

  • To reply to you and prepare the discovery call from your answers.
  • To write a proposal, then manage the client relationship if we work together.
  • To run the site, keep it secure and understand, in anonymous numbers, which pages are viewed.
  • To meet our legal, accounting and tax obligations.

We use your information for these purposes only. We do not sell it, and we do not pass it to third parties for advertising. We send no newsletter: every message from us answers your request.

Where it is kept

  • HubSpot (CRM, forms, calendar). Our client data is hosted by HubSpot in Québec, in its Montréal data centre (Canada). HubSpot acts as a service provider bound by its own security and privacy commitments.
  • Email. Our mailboxes are provided by Astral Internet and hosted in Québec.
  • Website hosting (Framer). Framer is a company established in the Netherlands whose infrastructure is located outside Québec (European Union and United States). Only technical logs and anonymous statistics pass through it.
  • Google Fonts. Google's servers, located outside Québec, receive your IP address to serve the fonts.

Where information is kept outside Québec, we have assessed that the provider offers adequate protection through its security measures and contractual commitments.

How long

  • Contact requests and path answers are kept during our exchanges, then for at most three years after the last contact, after which they are deleted.
  • Records of clients we have worked with are kept during the relationship, then for seven years after the end of the mandate, as our legal and accounting obligations require.
  • The host's technical logs are kept for Framer's own retention periods, for security purposes.

Cookies

The site itself sets no cookies: none for advertising, none for statistics. You can browse it freely.

Two HubSpot tools set cookies, only at the moment you use them: the booking calendar, when it is displayed, and the contact path form, when you send it. These cookies (hubspotutk, __hstc, __hssc, __hssrc, __cf_bm) link your request to your record and protect HubSpot's services against abuse. You can refuse or delete them in your browser settings; the form and the calendar still work.

Your rights

At any time, you can:

  • ask for access to the information we hold about you;
  • ask for it to be corrected if it is inaccurate or incomplete;
  • withdraw your consent and ask for its deletion, subject to our legal obligations;
  • receive a copy of the information you gave us, in a structured format.

Write to info@vestibuleweb.ca. We reply within 30 days. If you are not satisfied with our answer, you can contact the Commission d'accès à l'information du Québec.

Security

Access to your information is limited to the people who need it to reply to you. The site is served over HTTPS, and our providers (HubSpot, Framer) apply their own security measures. We keep a register of confidentiality incidents and, if an incident presents a risk of serious injury, we notify the Commission d'accès à l'information and the people concerned, as the law requires.

Updates

This policy evolves with the site and the tools we use. Every change is published here with its date. Any question: info@vestibuleweb.ca.