Privacy policy

Last updated: May 25, 2026
Effective date: May 25, 2026

OptikInfo is a Verdun PC repair and custom-build shop. We take your privacy seriously, and we want this page to actually tell you what we do with your information — in plain language, not legalese. This policy explains what we collect, why, who else sees it, and the rights Quebec law gives you over it.

Who we are

OptikInfo
4329 rue Wellington
Verdun, QC H4G 1W3
Canada

Phone: 514-767-8778
Email: sebastien.lemay@optikinfo.ca

Privacy Officer (Person in charge of the protection of personal information)
Natacha Dow
Email: sebastien.lemay@optikinfo.ca
Phone: 514-767-8778

This designation is required by Quebec's Act respecting the protection of personal information in the private sector (commonly called Law 25 / Loi 25, formerly Bill 64). If you have a question, a request about your information, or a concern about how we handled it, Natacha is your first point of contact.

What personal information we collect

We only collect what we actually need to help you. Here is the full picture, broken down by where it comes from.

From our online store (optikinfo.ca, hosted on Shopify)

Browsing data your device shares with the site (IP address, browser type, pages viewed, referring page) — used by Shopify for site reliability and the analytics you allow through our cookie banner.
If you create a customer account: your name, email, password (which we never see in clear text), shipping/billing address, and order history.
If you place an order in the future: the items you purchased, the price, and payment confirmation. Card numbers are handled directly by Shopify Payments — we never see them.
Anything you type into a contact form on the site.

From our repair booking form

Your name, email address, and phone number.
The device you want repaired (type, brand, model).
The symptoms or problem you describe, including any free-text notes.
Photos you choose to upload.
The best time to call you back.
Your IP address and a hidden anti-spam field — kept short-term for security only (see retention below).

From our custom-build quote form

Your name, email address, and phone number.
What you want to use the PC for, your budget range, and your build priorities.
A list of any parts you already own.
Your timeline.
Photos you choose to upload.
Your IP address (security only).

From email and phone

If you write to us or call us, we keep what you sent us so we can answer and follow up.

Why we collect it

Each of those pieces has a single, narrow purpose. We do not collect anything "just in case."

Repair form — so we can call you back, prepare a quote, and book your repair.
Quote form — so we can design your custom build, send you a written quote, and follow up if you have questions.
Online store account / orders — so we can take your order, ship or hand off your items, send a receipt, and handle any warranty work.
Email / phone — so we can answer you.
IP address and anti-spam field — to block bots and abuse on our forms. We do not use these for marketing or profiling.
Cookies and analytics — to keep the site working (essential cookies) and, if you opt in, to understand which pages help our visitors most.

If we ever want to use your information for something else — like sending you a newsletter or a rebate offer — we ask you separately and you can say no. You can also withdraw that consent later, at any time (see "Your rights" below).

Who else sees your information

We keep your circle small. As of today, only three outside companies process your personal information on our behalf:

Shopify Inc. (Ottawa, Canada) — runs our storefront, customer accounts, future order processing, and stores the photos you upload through the forms (Shopify Files / Shopify CDN). Shopify processes data on infrastructure located in Canada and the United States.
Google LLC (Mountain View, California, USA) — delivers our outbound emails through Google Workspace / Gmail, since our shop email sebastien.lemay@optikinfo.ca is a Google Workspace mailbox. This means any email confirmation, callback, or quote we send you transits Google's servers in the United States.
OVHcloud Canada (Beauharnois, Quebec, Canada) — hosts the server and database that receive your form submissions. The repair and quote forms you fill in on our site, including any photos you attach, are stored on a server we operate at an OVHcloud data centre in Beauharnois, Quebec.

We do not sell your information. We do not rent it. We do not share marketing lists with anyone.

Information sent outside Quebec

Quebec law requires us to be clear when your information leaves the province. Two cases apply:

Emails we send you transit Google's infrastructure in the United States. Google participates in the EU-U.S. Data Privacy Framework, the closest publicly available adequacy mechanism for cross-border transfers, and is bound by its standard data protection terms.
Some Shopify hosting may be located in the United States as well as Canada. Shopify is a Canadian company headquartered in Ottawa and is contractually bound to protect your information.

Before relying on those providers we assessed the risk and concluded the protection they offer is adequate for the kind of information we handle. If you would like more details on those assessments, write to our Privacy Officer and we will share them with you.

How long we keep your data

We do not keep your information forever. These are our retention periods:

Repair form submissions — 2 years from submission, then deleted. Any photos you uploaded are deleted with the submission.
Quote form submissions that did not lead to a build — 1 year from submission, then deleted, photos included.
Quote form submissions that became a build — kept with the matching order record (see next line).
Order and customer account data — kept while your account is active, plus the period required by Quebec tax and accounting law (typically 6 years for transaction records).
Outbound email logs — rolling 90 days.
IP addresses captured by the forms — 30 days, used only for spam and abuse protection.

You can ask us to delete your information sooner — see "Your rights" below.

Cookies and tracking

Our storefront uses cookies in three categories:

Essential — needed for your cart, your session, and basic security. These cannot be turned off without breaking the site.
Analytics — Shopify's built-in analytics, used to count visits and understand which pages are useful. Anonymized where possible.
Marketing — only loaded if you opt in through the consent banner.

Honest status note: we are still configuring our consent banner. Until it is live, only essential and Shopify's default first-party analytics cookies are used — no third-party marketing tags. Once the banner is enabled, you will be able to grant or refuse the analytics and marketing categories at any time, and change your mind later from the same banner.

Your rights under Law 25

Quebec law gives you real, enforceable rights over your information. With OptikInfo, you can:

Access the personal information we hold about you, and ask for a copy.
Correct (rectify) anything that is inaccurate, incomplete, or out of date.
Delete information that is no longer needed for the purpose we collected it for.
Receive your information in a portable format (a structured, commonly used computer file you can take elsewhere).
Ask us to stop sharing or to de-index certain information when the conditions in the law are met.
Withdraw your consent at any time for anything that runs on consent (such as marketing emails). Withdrawal does not affect what we did before.

To use any of these rights, write to our Privacy Officer at sebastien.lemay@optikinfo.ca or call 514-767-8778. We will reply within 30 days. Our reply will either grant your request, or, if we cannot, explain why and tell you how to challenge that decision.

If you are not satisfied with how we handled your request, you can file a complaint with Quebec's Commission d'accès à l'information: https://www.cai.gouv.qc.ca/.

How we protect your information

We are a small shop and we are honest about what we do and do not have in place:

Form submissions travel over an encrypted HTTPS connection from your browser to our backend.
Our database is on a private server that does not expose itself to the public internet — only our application talks to it, and only with credentials.
Our forms include a hidden honeypot field and rate limiting to keep bots out.
Access is limited to the small team that needs it for repairs, quotes, and orders.
Shopify and Google handle the data they process on their own hardened infrastructure under their published security commitments.

What we do not claim: we are not ISO 27001 or SOC 2 certified. The database volume on our server is not encrypted at rest by default. We do not offer a real-time data dashboard. If any of those become true in the future, we will update this page.

If something goes wrong (breach notification)

If we discover a confidentiality incident — for example, an unauthorized access, loss, or disclosure of your information — and that incident creates a risk of serious harm to you, we will notify you and the Commission d'accès à l'information du Québec without delay, as required by law. We also keep an internal incident register, also as required by law.

Children

OptikInfo's services are aimed at adults. We do not knowingly collect personal information from a person under 14 years old without the consent of a parent or person having parental authority. If you believe we hold information about a child without that consent, write to our Privacy Officer and we will delete it.

Changes to this policy

If we change anything important in this policy, we update the "Last updated" date at the top. If a change actually affects information we already hold about you (for example, a new third party who processes it), we will email the people who are affected before the change takes effect.

Contact us

For any privacy question, request, or concern, the fastest way is:

Email: sebastien.lemay@optikinfo.ca
Phone: 514-767-8778
In person: 4329 rue Wellington, Verdun, QC H4G 1W3 (during shop hours)