Privacy Policy

1. Who is responsible

Person responsible for the protection of personal information: David Rivest, owner. That is me. Write to [email protected].

2. What I collect and why

When you complete the form

The form accepts no other fields: the server rejects a submission containing any.

I never ask you for sensitive information—health, origin, opinions, orientation or financial circumstances. Please do not include it in your message; it is not needed to answer a photography enquiry.

Information processed automatically

To prevent bots and mass submissions, the system processes your IP address, the country inferred from it, your browser and the time of submission.

The IP address is never stored as-is. It is immediately converted into a one-way cryptographic digest used only to count submissions from the same source over a short period. Like every web host, my host also collects technical delivery and error information.

Audience measurement

I use Umami, hosted on my own server. It counts page views. It places no cookie, assigns no identifier, follows nobody between sites and builds no profile. I can see how many people visited a page, never who they were.

3. What I do with your information

Two things, and nothing else:

1. Reply to you—that is the purpose of the form. I aim to reply personally within 24 hours.
2. Protect the site against spam and abuse.

What I do not do: no sale, rental, exchange, advertising list, profiling, targeted advertising or automated decision about you. If I ever wanted to write for a reason other than your enquiry, I would ask first and separately.

4. Your consent

You consent by writing to me: completing and submitting the form is a request for a reply. That consent covers this reply and nothing else.

You may withdraw it at any time by writing to me. If you do, I delete your information except what the law requires me to retain, such as an invoice.

5. Cookies, pixels and tracking technologies

The site itself uses no advertising cookies. The Studio page loads no Studio Ninja script, frame or storage. If you activate the booking link, a new tab opens Studio Ninja’s external portal, which then applies its own technologies needed for booking.

• Studio Ninja. No part of its portal loads before you explicitly click “Book now.”
• No advertising pixel added by David Rivest. This site installs no Meta, Google or other advertising tool.
• No email tracking. I do not know whether you opened my message or clicked a link.
• Anti-bot protection. The form uses Cloudflare Turnstile, which may require a temporary technical marker strictly necessary for security.

The portal is only for passport and visa appointments. For every other enquiry, you can use the contact form without using Studio Ninja.

6. Who else sees your information

Nobody other than me reads it. Providers do, however, transmit or host it, much as the postal service carries a letter:

Each is bound by a contract requiring it to protect your information, use it only to provide the service, refrain from selling it, and notify me of an incident.

Processing outside Quebec. Some providers process information outside Quebec. The law requires that I assess this situation before agreeing to it: I did so for every recipient, in an assessment dated July 29, 2026. It concludes that the protection is adequate given the nature of the information—contact details and a project description that you send so I can reply.

7. How long I retain it

If delivery fails, your message is not retained at all. A notice asks you to email [email protected] directly.

8. How it is protected

• The entire site is encrypted with HTTPS.
• The form limits submissions, blocks duplicates and refuses oversized submissions.
• Access to my inbox and tools is protected with two-factor authentication.
• Stored metadata contains neither your name, email nor message.
• No password or access key appears in the site’s source code.

No system is infallible. I retain the strict minimum for the shortest possible time; that is the strongest protection available.

9. Your rights

You may, at any time and without charge:

• Find out what information I hold about you and obtain a copy;
• Correct inaccurate or incomplete information;
• Delete your information or withdraw your consent;
• Receive your information in a usable technological format, or ask me to transmit it to someone else;
• Ask that information cease to be disseminated or that a link to it be de-indexed, where the law permits;
• Make a complaint if you are not satisfied with my response.

How: write to [email protected]. I reply within 30 days. I handle these requests personally; there is no department to contact.

If you are not satisfied with my response, you may contact Quebec’s Commission d’accès à l’information: cai.gouv.qc.ca, 1-888-528-7741.

10. If an incident occurs

If a privacy incident created a risk of serious injury, I would notify you and the Commission d’accès à l’information and take steps to limit the consequences. Incidents are recorded in a register as required by law.

11. Photographs

This policy covers information submitted through this site. The photographs I make for you and their use—in my portfolio, on social media or in delivery galleries—are governed by the contract we sign, which states what you authorize. No client photograph is published without consent.

12. Minors

My services are intended for adults. I do not knowingly solicit information about anyone under 14. If this occurs, write to me and I will delete it.

13. Changes

If this policy changes, the date at the top changes too. A significant change—a new tracking tool or purpose—would be announced before taking effect, and consent requested where required by law.

14. Contact me

15. Booking through Studio Ninja

The Studio page contains a link to the external Studio Ninja booking portal at app.studioninja.co. No Studio Ninja script or frame loads on my site. The portal opens in a new tab only when you activate “Book now.”

If you continue with a booking, Studio Ninja processes the information you enter, the selected time and the technical information needed to create and manage your appointment request. On its own portal, Studio Ninja may use cookies or local storage needed for booking security, continuity and submission. Data may also pass to the configured email and calendar services to confirm the appointment, send reminders and prevent scheduling conflicts.

The portal is used only for passport and visa appointments. It is not required to contact me: you may use the Studio form or write directly.