Privacy Policy

Business and privacy contact

The legal business name supplied by the owner is pardonpoint. Send privacy questions and requests for access, correction or deletion to Pardonpoint@gmail.com, or call 1-866-708-7486 (toll-free). The owner must confirm the name and title of the person responsible for protecting personal information, including any written delegation of that responsibility.

What we collect and why

• Contact details you submit (name, email and phone) to respond to inquiries and arrange consultations
• Eligibility responses and notes you choose to share for consultation intake; legal and immigration-related information may be sensitive
• Booking details (date, time, service and language preference) to manage appointments
• E-transfer sender details, payment reference and uploaded payment screenshot to verify payment
• Limited technical information, including short-lived hashed network-address counters, to protect forms against abuse

Sensitive information and consent

Provide only information needed for your inquiry. Do not upload detailed legal or immigration case documents through booking forms. Do not submit card numbers, CVVs, banking passwords or identity documents in payment screenshots; hide unnecessary account and transaction details. Where consent is required, it must be clear, free, informed and specific to the purpose; express consent is required for sensitive information under applicable Quebec law. The owner must review the collection notices and consent process before approval. A booking is not blanket consent to AI processing or unrelated disclosure.

Confirmed storage and access

Lovable Cloud stores consultation requests, eligibility responses and uploaded e-transfer payment screenshots. Booking and payment information is restricted to authorized staff in the private CRM. Public calendars show availability, not customer identities or payment information. Booking references do not provide public access to customer records. The complete service-provider inventory, provider access and data-storage locations have not been verified.

Forms, email and planned services

Website forms collect the information you submit. Information you send directly by email is also handled through email services. Automated booking email delivery is not currently configured; a saved request does not mean an email was sent. Optional AI processing and automated SMS notifications are disabled for new intake. RingCentral and Vapi are planned for a future AI receptionist integration that is not active. This policy does not describe those planned integrations as current recipients of website intake data.

Sharing and information outside Quebec

This policy does not authorize sale, marketing use or new disclosure of customer information. The owner must verify actual sharing practices, recipients, purposes, contractual safeguards and any legally required disclosure. Before communicating personal information outside Quebec or entrusting its collection, use, communication or storage to a person outside Quebec, the business must assess privacy impacts and meet applicable legal and written-agreement requirements. No provider location or completed assessment is claimed here.

Retention and disposal — procedures under review

Retain personal information only for as long as reasonably necessary to provide the requested services, manage consultations, maintain required business records, and comply with applicable legal and professional obligations. Different categories of information may have different retention periods. Information that is no longer required will be securely deleted or anonymized according to the business’s approved retention procedures. The category-specific schedule and procedures, including treatment of backups, emails and service-provider copies, still require verification and approval. This statement does not mean automatic deletion is active; no automatic-deletion process has been configured and tested as part of this policy update. Anonymization must meet applicable Quebec legal requirements.

Your privacy rights

Contact Pardonpoint@gmail.com to request access to or correction of your information, to request deletion, or to discuss withdrawal of consent. Identity must be verified before information is released or changed. Requests are subject to applicable law, including permitted exceptions and required retention; withdrawal may affect services needing that information. Quebec access and rectification requests generally require a response within 30 days. Where applicable, you may request computerized personal information collected from you in a structured, commonly used technological format. Other rights, including cessation of dissemination or de-indexing, depend on statutory conditions. You may raise a complaint with Quebec’s Commission d’accès à l’information.

Security, incidents and governance

Payment screenshots are stored privately and public booking screens do not expose customer records. No system can guarantee absolute security. The owner must confirm internal access controls, staff responsibilities, complaint handling and incident procedures. Applicable Quebec requirements include keeping a confidentiality-incident register and notifying the Commission d’accès à l’information and affected individuals when an incident presents a risk of serious injury. These governance and response procedures have not been verified by this policy review.

Browser storage and automated decisions

A private booking retry token may remain in your browser tab; eligibility carryover stays in memory. This is not a complete browser-storage or tracking inventory. The owner must verify any analytics, cookies, identification, location or profiling technologies and applicable notice and choice requirements. New intake AI processing is disabled. Any future decision based exclusively on automated processing requires review of applicable notice, explanation and human-review rights before activation; planned AI receptionist tools are not currently enabled.

Items requiring owner verification and approval

• Business address: not supplied; owner confirmation needed
• Privacy officer name, title and delegation: pending confirmation
• How long records are kept: purpose-based retention; category-specific schedule and approved disposal procedures: pending confirmation
• Complete service providers, storage locations, access and cross-border assessments/agreements: pending confirmation
• Actual data-sharing practices, collection/consent notices, tracking inventory and incident procedures: pending confirmation
• Owner approval of unresolved details and effective date: pending confirmation

Quebec legal review

This policy addresses matters relevant to Quebec’s Act respecting the protection of personal information in the private sector, as amended by Law 25, where applicable. It does not establish that the business complies with that law or any professional, immigration-service or records-retention obligations. Those obligations and both language versions require review before approval.