Privacy policy
We connect people looking for training with the organizations that deliver it. That means collecting information about you, and passing some of it on to the organization you choose. This page sets out what, why, and for how long.
What we collect, and when
When you browse
Nothing that identifies you. Public pages set no cookies and open no session — a technical constraint of this site, checked on every deployment, because a cookie would also prevent pages from being cached. We measure traffic in aggregate (see below).
When you register
The form does not ask for the same things from one organization to the next, because each sets what it needs to enrol you. Some ask only for your first name, last name, email and phone number. Others also require your date of birth and full address, because these appear on the certificate they issue. The organization’s name and the fields required are shown to you before you fill anything in.
Before payment even happens
Your registration is recorded on our side as soon as you leave the form for the payment page, before we know whether payment will go through. If you change your mind, that information stays in our systems for a while and is then deleted — the exact delay is in the retention table.
When you pay
Payment happens entirely at Stripe. Your card number never passes through our servers and we never see it. Stripe then returns the name, email and billing address associated with the payment.
After the session
We write to you once, inviting you to leave a review. You are under no obligation. If you do leave one, it is reviewed before publication and signed with your first name and the initial of your last name. Your email is never shown.
Why we need it
- To register you for the course you chose and send you the confirmation.
- To take payment and provide you with a receipt.
- To let the organization enrol you in its records and issue your certificate.
- To meet our accounting and tax obligations.
- To collect your feedback after the course, if you wish to give it.
What is shared with the training organization
This is the most important part of this page, and the one that most often comes as a surprise. We do not deliver the training: we sell it on behalf of independent organizations. It is the organization that enrols you, teaches you and issues your certificate.
Once your payment is confirmed — never before — we pass on the file it needs to do so: your contact details, and depending on its requirements your date of birth and address. It will then write to you directly, in particular to confirm the session.
From that point on, the organization is not acting on our behalf: it becomes responsible for its own side of the file. What it does with it, how long it keeps it and how you can reach it are governed by ITS privacy policy, not ours.
What this means for your requests
We can correct or erase what we hold. We cannot do so on the organization’s behalf: our systems have no technical means of cancelling a registration once it has been sent. A request concerning your file with them must be addressed to them. Write to us if you are unsure who to contact — we will point you to the right person.
The organizations we work with today
- Formations Laissi Its privacy policy
- Infini Soins Its privacy policy
Other services that receive information
Besides the training organization, two third-party services receive information about you. None receives it for advertising purposes, and none resells it to us.
Stripe
Our payment provider. Receives your email and the billing details you enter on their page, including your card. Stripe creates a customer record on every purchase.
Google Maps
Only if the form asks you for an address: the characters you type in that field are sent to Google to suggest addresses. This service loads at that step only, never on public pages.
These two services process information outside Quebec. We have not yet formalised the assessment the law requires for such transfers; it is under way.
How long we keep it
These periods are not an intention: an automated task applies them every night. They run from the date of registration.
- Registration started but never paid
- Deleted entirely
- Technical payment records received from Stripe
- Stripped of all personal information
- Review invitation never taken up
- Access link disabled
- Paid registration
- Anonymised: amounts remain, your identity is erased
A paid registration cannot be deleted sooner: it is an accounting record that tax law requires us to keep. After that period we remove your name, contact details, date of birth and address, leaving only amounts and dates. A registration subject to an ongoing dispute is set aside until the dispute is resolved.
Cookies and traffic measurement
The public pages of this site set no cookies. No banner to click, because there is nothing to accept.
One cookie exists, strictly technical: it opens when you fill in the registration form or the review form, secures the form submission, and expires after two hours. It is used for no tracking of any kind.
We measure traffic with Plausible, which we host ourselves on our own infrastructure: the measurements go to no advertising network. Plausible sets no cookie and builds no profile. One caveat, for honesty: when you use the site search, the term you typed is recorded in those statistics, with nothing that could trace it back to you.
Your rights
Regarding the information we hold, you may ask:
- to know what we have and to obtain a copy of it;
- to have it corrected if it is inaccurate or incomplete;
- to receive it in a machine-readable format, or to have it transferred elsewhere;
- to have it deleted, to the extent no legal obligation requires us to keep it;
- to withdraw your consent for anything not necessary to your registration.
Write to the person responsible, whose details appear below. We respond within thirty days. If our answer does not satisfy you, you may file a complaint with the Commission d’accès à l’information du Québec.
In the event of an incident
We keep a register of confidentiality incidents. If an incident affecting you presented a risk of serious injury, we would inform both you and the Commission d’accès à l’information promptly.
Who is responsible
For any question about this policy, or to exercise your rights:
Changes
This policy will evolve alongside the site. The date below is that of its most recent revision.
Last updated:
This text faithfully describes what the site does today. It has not yet been reviewed by a lawyer: if any wording seems ambiguous to you, write to us rather than assume.