Information controller
The controller’s identity, privacy officer’s title, and contact address require approval. Collection of real inquiries remains disabled.
ARTORA ÉDUCATION
Privacy policy
Read about how information is used and your privacy choices.
Information requested
The form is designed to collect the parent, guardian, or adult student’s name, email, selected goal, school stage, requested subject, and an optional general academic goal. It does not request the child’s name, diagnosis, school records, birth date, or documents. Please avoid including these in the free-text message.
Purposes and choices
Information is used to understand the inquiry and follow up with the parent. It is not used to enrol you in advertising. Acknowledging this notice is not blanket consent for other purposes. You may choose not to submit the form. The applicable consent framework requires review before activation.
Providers and transfers
The architecture anticipates Next.js hosting, a PostgreSQL database, and Resend notifications. Actual providers, processing regions, agreements, and transfers outside Québec require documentation and assessment before collection. Google also provides optional analytics. Google Analytics retention settings and transfers relating to this provider still require documentation by the operator. No storage region is represented as confirmed.
Retention and deletion
Form content is stored encrypted in a private table. A notification contains information needed for follow-up. Retention periods, deletion of notifications and backups, authorized access, and destruction procedures require approval before activation. No fictional legal retention period is stated.
Access, correction and requests
Parents can ask about processing and exercise applicable access, correction, or withdrawal rights. The request channel, identity verification, and handling procedures must be confirmed with the privacy officer.
Security measures
The code includes server-side validation, origin checks, request limits, and encryption of stored content. Keys remain server-side. Access controls, backups, and incident response also require operational configuration and procedures. Absolute security is not promised.
Cookies and analytics
Google Analytics 4 loads only after your permission to measure visits, clicks, form progression and resource use. Site events exclude names, emails, messages, academic values and URL parameters. Google may process cookie identifiers and technical connection information, including the IP address during the network request. Advertising features are disabled; no session recording is installed. Your choice stays in your browser for up to 180 days and can be changed or withdrawn using “Cookie preferences” in the footer. Refusing does not block any page or the form. An essential signed cookie lasting 15 minutes verifies an accepted inquiry; it contains no name or email.
Children and updates
The parent or guardian is the contact for a minor. At cégep, a student can enquire after confirming they are at least 18; their information is not shared with a parent without agreement. Sensitive information about a child is unnecessary at this initial stage. This bilingual notice is a draft requiring review; an approved version and effective date must replace draft status before collection.