Privacy policy

Last updated: October 31, 2026

Studio Memphré respects your privacy and complies with Québec’s Act respecting the protection of personal information in the private sector, as amended by Law 25.

Person in charge of personal information

Alexandre Byers-Bonin, Owner
[email protected]

Information collected

Only what you send us through the form or by email: name, email address and message content, as well as the page language and confirmation of your consent. For security, your IP address is processed by Cloudflare. We collect no sensitive information.

Purposes

To answer your request, prepare a quote and, if you become a client, deliver and invoice the project. Your information is never sold or used for advertising.

Consent

We collect your information with your explicit consent (checkbox). You may withdraw it at any time by writing to us.

The Studio Memphré newsletter (web tips and news) has not launched yet. If you tick the box in the form (it is never pre-checked), your sign-up request is sent along with your message to [email protected] and kept in our inbox: we note it on our list (name and email). Nothing is sent until the newsletter launches. You can unsubscribe at any time by simply asking us by email: we then remove your name and email from the list. To send the newsletter, we plan to use Resend, a US-based provider, so your name and email will be hosted and processed outside Québec.

Retention

Inquiries that do not lead to a project are deleted after 12 months. Client records are kept as long as tax law requires (generally 6 years), then securely destroyed.

Providers and hosting

Our main provider is Cloudflare (hosting, Turnstile and Web Analytics), which may process technical data (e.g. IP address) outside Québec, including in the United States, for security and delivery. Form messages (name, email address and content) are delivered by email through Resend, a US-based provider, so they are processed outside Québec before being kept in our inbox. Resend keeps a copy of messages and sending logs in the United States for 30 days, then deletes them; its backups are kept for 7 days.

Bot protection (Cloudflare Turnstile)

The contact form uses Cloudflare Turnstile to block automated submissions. Turnstile analyzes your IP address and technical signals about your browser and device (e.g. browser type and configuration), with no advertising cookies or cross-site tracking, to confirm you are not a bot. Cloudflare also uses these signals, as a controller, to improve bot detection (see the Turnstile privacy addendum). It loads only on the Contact page.

Submission limit

To prevent abuse, the form accepts at most 5 submissions per IP address per 10-minute period. Your IP address is used for about 20 minutes to limit submissions (temporary storage in Cloudflare Workers KV), then deleted automatically.

Audience measurement (Cloudflare Web Analytics)

Only with your consent (the “Accept” button in the notice), we use Cloudflare Web Analytics for aggregate statistics (page views, referrers, performance). It uses no cookies, stores nothing in your browser, builds no profile and cannot track you across sites.

Cookies and local storage

No tracking cookies or ad tools are used. The site only stores, in your browser’s local storage, your choice (accept or refuse audience measurement). You can change it any time with the “Cookie preferences” link at the bottom of every page. Adding any cookie-based tool would require your prior consent.

Your rights

You may request access, correction, deletion, withdrawal of consent or portability of your information. We respond within 30 days. You may also file a complaint with the Commission d’accès à l’information du Québec.

Confidentiality incidents

Any incident posing a risk of serious harm will be recorded, reported to the Commission and communicated to the people concerned.

Contact

Questions: [email protected]. Quote requests: [email protected].