Privacy policy

Last updated: August 11, 2026.

HK Web Production Solution ("we", "us", "our") takes the protection of your personal information seriously. This policy explains what information we collect, why, how we use and protect it, who we share it with, and what your rights are. It is written in accordance with Quebec's Law 25 (Act to modernize legislative provisions as regards the protection of personal information) and the General Data Protection Regulation (GDPR, European Union).

1. Person responsible for personal information

In accordance with Law 25, a person is responsible for the protection of personal information within our organization. You may reach them for any question or to exercise your rights:

Dimitri Ho Kon Moy — HK Web Production Solution
Region: Québec, Canada
To exercise your rights or for any question, please use our contact form.

2. Information we collect

• Contact / quote form: name, email, phone (optional), requested service and the content of your message.
• Client account: name, email and login credentials, managed by our authentication provider.
• Subscriptions and billing: billing information processed by our payment provider. We never store your card number.
• Technical data: IP address, device and browser type, security logs, needed to operate and protect the site.
• Preferences: theme, language, currency and accessibility settings, stored locally on your device.

We do not collect sensitive personal information and we do not carry out any fully automated decision-making producing legal effects concerning you.

3. Purposes and legal basis

We only process your information for specific, legitimate purposes:

• Responding to your requests and preparing quotes — basis: pre-contractual measures / legitimate interest.
• Managing your account, subscriptions and invoices — basis: performance of the contract.
• Ensuring security, preventing fraud and keeping the site running — basis: legitimate interest.
• Meeting our legal and accounting obligations — basis: legal obligation.
• Measuring audience and improving our services — basis: your consent.

4. Consent

Your consent is obtained freely, on an informed basis and for specific purposes. For any non-essential cookie, your consent is requested before it is stored. Non-essential categories are off by default, and refusing is as easy as accepting. You can change or withdraw your consent at any time, with no impact on essential services, through the Préférences de confidentialité link in the footer.

5. Cookies and local storage

As of today, the site sets no advertising or tracking cookies and uses no third-party analytics tool. Only strictly necessary cookies and local storage are used:

If we ever add an analytics or marketing tool, it would only be activated after your explicit consent through the banner.

6. Sharing with third parties and processors

We do not sell or rent your information. We rely on trusted providers who act only on our instructions and in compliance with applicable regulations:

Our forms are protected by Cloudflare Turnstile, which invisibly verifies that a submission comes from a person rather than a bot, without subjecting you to a CAPTCHA or using tracking cookies. Use of this service is governed by Cloudflare's Turnstile Privacy Policy Addendum.

7. Transfers outside Quebec

Some of our providers host or process data outside Quebec (notably in the United States and the European Union). In accordance with Law 25, we carry out a privacy impact assessment before any transfer and ensure the information receives adequate protection through appropriate contractual commitments (for example the GDPR standard contractual clauses).

8. Retention period

• Contact / quote requests: up to 24 months after the last exchange.
• Client account and billing data: for the duration of the relationship, then as required by legal and accounting obligations (up to 7 years for accounting records).
• Consent choices: 13 months, then renewed.

Beyond these periods, your information is deleted or anonymized.

9. Security

We implement reasonable technical and organizational measures: encrypted connections (HTTPS), secure authentication, access control, regular backups and security logs. In the event of a confidentiality incident posing a risk of serious harm, we will notify you and the competent authorities, as required by Law 25.

10. Your rights

Depending on where you live, you have the following rights:

• Right to access your information;
• Right to correct inaccurate information;
• Right to withdraw your consent at any time;
• Right to erasure ("right to be forgotten");
• Right to data portability (Law 25 and GDPR);
• Right to have information de-indexed or its dissemination stopped (Law 25);
• Right to object to and restrict processing (GDPR).

To exercise a right, please use our contact form. We respond within 30 days. Proof of identity may be requested to protect your account.

11. Complaints and supervisory authorities

If you believe your rights are not being respected, you may file a complaint with the competent authority:

• Quebec / Canada: Commission d'accès à l'information du Québec (CAI).
• European Union: the data protection authority of your country (for example the CNIL in France).

12. Changes to this policy

We may update this policy to reflect legal or technical changes. In case of a material change, the update date is revised and, where applicable, your consent is requested again.

13. Contact us

For any question about this policy or your personal information, please use our contact form.