Privacy Policy

1. Data controller

The entity responsible for the personal information collected through this site and our services is:

• Company: Productions Kastallis inc., operating as UArt Studio
• Quebec Business Number (NEQ): 1180546971
• Address: 416 McGill Street, Ground Floor, Unit 1, Montreal, Quebec H2Y 2G1, Canada
• Founder: Wassim Kastalli
• Email: [email protected]

Privacy officer (Law 25)

In accordance with Law 25, the person holding the highest authority within the company acts as the person in charge of the protection of personal information. Any request may be sent to [email protected] with "Privacy" in the subject line.

2. Types of data we collect

The data UArt Studio collects, directly or through third parties, includes:

• Identification and contact data: first name, last name, email address, phone number, provided through our forms.
• Booking data: call or session date and time, selected package, preferences, deposit paid.
• Payment data: processed by our secure payment provider. We do not store full card numbers.
• Photographic images: the photos taken during your session, stored in a private gallery.
• Usage and browsing data: IP address, browser type, pages viewed, referral source, collected through cookies and tracking pixels.
• Advertising data: identifiers and conversion data when you arrive through a Meta or Google campaign.

Providing certain data is optional. However, declining to provide the data required for booking (name, email, phone) may make it impossible to deliver our services.

3. How and where data is processed

Processing methods

The controller takes appropriate security measures to prevent unauthorized access, disclosure, alteration or destruction of the data. Processing is carried out using computer-based tools, following procedures linked to the stated purposes. Only authorized staff and certain providers (marketing, hosting, IT systems) have access, to the extent necessary to perform their tasks.

Place of processing

Data is processed at the company's premises (Quebec, Canada) and at the premises of the providers involved. Some providers may store or process data outside Quebec and Canada, in particular in the United States. In such cases, contractual and technical measures are in place to ensure an adequate level of protection, in accordance with Law 25.

4. Purposes of processing

Data is collected to enable UArt Studio to:

• respond to your requests and schedule your free creative call;
• manage your bookings, deposits, sessions and the delivery of your private gallery;
• send you relationship and transactional communications (reminders, preparation guide, delivery);
• with your consent, send you marketing communications;
• measure site traffic and the effectiveness of our advertising;
• ensure security, prevent fraud and meet our legal obligations.

5. Processing details — third-party services

To operate our services, we rely on third-party providers. Each processes your data under its own privacy policy.

GoHighLevel (LeadConnector)

CRM, forms, calendar and email/SMS communications. Data processed: name, email, phone, booking data. Location: United States.

Meta Platforms (Facebook, Instagram)

Ad delivery, conversion measurement and remarketing through the Meta pixel. Data processed: usage data, identifiers, cookies. Location: United States.

Google (Ads, Analytics)

Audience measurement and ad delivery. Data processed: usage data, cookies. Location: United States.

Payment provider

Processing of deposits and payments in a secure, PCI-DSS compliant environment. Data processed: transaction data.

6. Cookies and similar technologies

Our site uses cookies and tracking technologies. We distinguish between:

• strictly necessary cookies, essential to the operation of the site and the booking process;
• analytics cookies, which help us understand how the site is used;
• advertising cookies, which let us measure our campaigns and show relevant ads.

You can refuse or withdraw your consent to non-essential cookies at any time through the consent banner or your browser settings.

7. Your rights

In accordance with Law 25 and PIPEDA, you have the following rights:

• access: confirm that we hold data about you and access it;
• correction: have inaccurate or incomplete information corrected;
• withdrawal of consent: withdraw your consent to marketing processing at any time;
• portability: receive your information in a structured, commonly used technological format;
• de-indexing or deletion: request that the dissemination cease or that certain information be deleted;
• complaint: file a complaint with the Commission d'accès à l'information du Québec.

To exercise a right, email [email protected]. We respond within a maximum of 30 days. Identity verification may be required. If you are not satisfied with our response, you may contact the Commission d'accès à l'information du Québec (cai.gouv.qc.ca).

8. Data retention

We keep your information only for as long as necessary for the stated purposes:

• prospect data (form without a booking): up to 24 months, or until consent is withdrawn;
• client and booking data: for the duration of the client relationship, then according to applicable legal and accounting timeframes;
• photographs and private gallery: according to the terms agreed at the time of your session;
• billing data: according to Canadian tax obligations.

At the end of these periods, data is securely deleted or anonymized.

9. Additional information

Data security

We implement reasonable technical and organizational measures (encryption, access controls, backups) to protect your data.

Privacy incident

In the event of an incident presenting a risk of serious harm, we will take the required measures, notify the individuals concerned and report the incident to the Commission d'accès à l'information, in accordance with Law 25.

Information about minors

Our services are intended for an adult clientele. We do not knowingly collect information from persons under 14 without the consent of a person with parental authority.

Changes

UArt Studio may amend this policy at any time. Any change is posted on this page with a revised update date.

10. Definitions and applicable laws

• Personal information: any information concerning a natural person that allows them to be identified.
• User: the person using this site.
• Individual concerned: the natural person to whom the information relates.
• Data controller: the person who determines the purposes and means of processing.
• Cookie: a small file placed on the user's device.

Legal framework: Quebec's Law 25; Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

11. Contact us

For any question about this policy or your personal information, email [email protected].