Privacy Policy

Under Law 25, the person exercising the highest authority within the enterprise is, by default, the person in charge of the protection of personal information (Responsable de la protection des renseignements personnels). At Studio Base3, this role is held by:

• Officer: Ahmed-Fateh Guezzane, Founder & CEO
• Email: [email protected]
• Location: Montreal, Quebec, Canada

We only collect the information you choose to submit through our project intake form or newsletter opt-in:

• Identification: your name and work email address.
• Company information: company name and team size range.
• Scoping notes: the description of your project, bottleneck, or workflow that you provide.
• Consent records: whether you opted in to receive studio updates, and the date of that consent.

• To review and scope your project inquiry.
• To contact you and schedule a discovery call.
• To send operations engineering insights, case studies, and studio updates — only if you explicitly opted in. You can withdraw this consent at any time.

Our guarantee: your personal information is never rented, traded, or sold to third parties or data brokers.

By submitting the intake form, you consent to the use of your information for the purposes described in section 3. Marketing communications require a separate, explicit opt-in: the checkbox is never pre-selected. You may withdraw your consent at any time by writing to [email protected] or by using the unsubscribe link included in every message.

We rely on a limited number of service providers to host and operate this website. Each is bound by contractual confidentiality and security obligations and may only process information on our instructions:

• Netlify — hosting and delivery of this website, including the servers that receive your contact form submission on its way to our mailbox. Technical logs (such as IP addresses and browser details) may be recorded for security and operation.
• Google Workspace (Gmail) — delivery of your inquiry to our mailbox, and our email replies to you.

This website and the email system that receives your inquiry are operated by providers whose servers are located outside Quebec and, in some cases, outside Canada (including in the United States). As a result, the information you submit through the contact form, along with technical data such as IP addresses and request logs, may be processed outside Quebec.

Before any personal information is communicated outside Quebec, we assess whether it will receive adequate protection, as required by section 17 of the Act, taking into account its sensitivity, the purposes of the processing, the protection measures in place, and the legal framework of the destination.

This applies to this marketing website only. The systems we build for clients are a separate matter: they are deployed as set out in each client's agreement, including in Canadian hosting regions such as AWS Montreal, and they are not processed through this website.

• Project inquiries are retained for up to 24 months after our last exchange, unless a contractual relationship requires longer retention.
• Newsletter consent records are retained until you withdraw your consent.
• When information is no longer required, it is securely destroyed or anonymized.

You may, at any time, request to:

• Access the personal information we hold about you.
• Rectify information that is inaccurate, incomplete, or ambiguous.
• Delete your information entirely or withdraw your consent.
• Receive a copy of your information in a structured, commonly used technological format (data portability).

Send your request to [email protected]. We will verify your identity and respond in writing within 30 days of receipt. If you are not satisfied with our response, you may file a complaint with the Commission d'accès à l'information du Québec (www.cai.gouv.qc.ca).

Information is encrypted in transit (TLS) and at rest, and access is restricted to authorized personnel on a need-to-know basis. In the event of a confidentiality incident presenting a risk of serious injury, we will notify the Commission d'accès à l'information and the affected individuals, and record the incident in our register, as required by law.

This website does not use advertising or cross-site tracking cookies. We only store your language and theme preferences in your browser's local storage so the site displays the way you chose. This data never leaves your device.

We may update this policy to reflect legal or operational changes. The "Last updated" date above indicates the latest revision. Material changes will be highlighted on this page.