This policy covers the client portal (portailclient.etiennehache.com) and my website (www.etiennehache.com). The portal lets my clients follow their projects, answer questionnaires, sign agreements and view their invoices. This is how your personal information is handled here, in accordance with Quebec's Act respecting the protection of personal information in the private sector (Law 25).
Étienne Haché. For any question, request or complaint: design@etiennehache.com.
I do not sell or rent your information, I use no advertising cookies, and no tracking or analytics tool is installed on this portal.
By using the portal and sending me your information for your project, you consent to this use. You may withdraw your consent at any time, subject to legal and contractual obligations, by writing to the address above.
The site is hosted by Framer. If you write to me through the “Me joindre” (Contact) form, I receive your first name, last name, email and message, which I use only to reply to you and, if you wish, to start a project.
The site uses Framer's built-in audience measurement to count visits in aggregate. I use no Google Analytics, no advertising pixel and no embedded social-network widget. Links to LinkedIn, Facebook, Instagram and Contra lead to third-party sites with their own policies. Fonts are loaded from Google's servers, which can see your IP address.
Purchases in the shop are processed by Lemon Squeezy, which acts as the seller and processes your payment information under its own policy: I neither receive nor keep your card number.
Framer and Lemon Squeezy are established abroad: your information may therefore be processed outside Quebec and be subject to the laws of those countries.
Only I have access, and you for your own file. Each client sees only their own information.
To run the portal I use service providers: Supabase (database and authentication), Vercel (site hosting), Resend (email delivery) and GitHub (encrypted storage of database backups for 90 days). They process information only to provide their service.
The database is hosted in Montréal (Canada), while the site is hosted by Vercel in the United States (Portland, Oregon): your information therefore passes through that server whenever you use the portal. Emails go through Resend, whose servers are in Virginia (United States): some information (your name, your email and the content of the messages sent or received) may therefore be communicated outside Quebec and be subject to that country's laws. Before this communication, I assessed that the information would receive adequate protection, in particular through this provider's contractual commitments. Emails sent by the portal contain no open or click tracking. If you reply to a conversation email, your reply is received by Resend and then added to the conversation in the portal.
Passwordless sign-in through a single-use, time-limited link, encrypted traffic (HTTPS), and data access restricted per client. No measure is perfect: in the event of an incident presenting a risk of serious injury, I notify the Commission d'accès à l'information and the people concerned.
I keep your information for as long as our working relationship is active, then for as long as the law requires (including 6 years for accounting and tax records). It is then destroyed or anonymized.
I respond to any request within 30 days.
This policy may be updated. The date of the last update is shown at the top of the page.