Privacy policy

This policy concerns visitors to the AGR informational website and people who submit a contact request. Services delivered under a client engagement are governed separately by the documents for that engagement.

The site provides no user accounts, online payments or document uploads. Its examples are not live systems processing your records.

For a privacy question, a request about your information or a report, use the email below. Describe your request and how to reach you, without attaching identification to this first message.

This website is operated by Roch Dubois-Gagnon. AGR is the name used to present his activity and is not a registered business. Roch Dubois-Gagnon is your contact at the email address below. The formal designation of the privacy officer remains to be confirmed before publication.

The form collects the information you enter so that we can understand your needs and reply.

• Required fields: name, professional email, preferred language and project description.
• Optional fields: organization and organization size.
• Follow-up exchanges: email content and information you choose to share.
• Form protection: IP address, attempt times and the anti-bot verification result.

Your request helps us assess your needs, prepare an initial conversation and follow up. Technical information helps limit automated submissions and abuse.

You can browse without submitting the form. Without contact details or sufficient context, we may be unable to reply. You can also contact us directly by email.

Do not enter passwords, access keys, medical information or confidential third-party records in the form. An appropriate channel can be agreed upon if an engagement requires it.

An accepted request is sent to AGR’s email system through Microsoft Graph. A copy is saved in the sending mailbox’s sent items. Microsoft therefore processes the content and contact information needed for delivery.

Cloudflare Turnstile checks form interactions using technical signals, including IP address and browser information. The site also sends the verification token to Cloudflare.

Vercel hosts the site, processes requests and may retain technical logs. Processing regions and log retention settings remain to be verified. Providers may process information outside Québec; no guarantee of exclusive hosting within Québec is made here.

The current site includes no advertising or audience analytics tool. Poppins and visual assets are served with the website; no font is loaded from Google Fonts.

Anti-bot protection uses Cloudflare Turnstile. Blocking it may prevent form submission; email remains another way to reach us. External websites linked from this site have their own practices.

Requests are delivered to email rather than stored in a website database. The submission limiter keeps temporary in-memory state. Its ten-minute calculation window is not an email or hosting-log deletion period.

AGR sets a maximum retention period of one month from receipt for form requests and their email copies. Those requests are to be deleted by that deadline. The website does not trigger deletion: implementation in mailboxes, copies and backup mechanisms must be validated before publication. Provider technical logs follow their own settings, which remain to be confirmed. Records created under a separate engagement are outside the scope of this form.

You may request access to information held about you and its correction. Subject to the conditions set by law, you may also request a computerized copy in a structured format, withdraw consent or request deletion.

Submit your request in writing. Proportionate identity verification may be necessary. In Québec, an access or correction request must receive a response within thirty days of receipt; statutory exceptions and remedies remain applicable.

If you believe information was sent to the wrong recipient or notice an exposure, contact us with useful facts without sending the exposed information again. Applicable incident obligations are outlined on the Personal information protection page.

The revision date identifies the text version. Changes in collection or processing practices require a policy update and applicable notices. You may also contact Québec’s Commission d’accès à l’information to learn about available remedies.