Entrazure
Who this policy is from
This policy covers entrazure.com and Entrazure Technologies, established in Canada, the United States and France. Our Canadian operations are subject to Quebec’s Act respecting the protection of personal information in the private sector, as amended by Law 25.
What we collect
When you use the contact form. On the contact page: your first name, last name, work email, organization, country or region, the subject you pick from a short list, the message you type, and the fact that you ticked the consent box. Phone number and job title sit on that form too, marked optional, and we hold them only if you fill them in. On the shorter form at the foot of a service page: your name, work email, message, and the organization we read off your email domain when it is not a personal address. Nothing more in either case: we do not append firmographic data, we do not enrich your record from a third-party database, and we do not score you.
When you email us directly. Whatever is in the message, plus the headers your mail client sends.
When you read a page. Our analytics counts the page, the referring source, the country, and the general device class. It does so without a cookie and without an identifier that follows you between visits or between sites. We cannot single you out from analytics data, and neither can anyone we share a page with.
That is the complete list. We set no advertising cookie. There is no marketing automation tracker, no session recorder, no heatmap, no embedded third-party form script, and no social network pixel on this site. Because nothing we run requires consent to be stored on your device, this site shows no cookie banner. That is not an oversight.
When you become a client. The engagement contract governs what we hold about your organization, and any personal information inside a client environment stays in that environment under your control, not ours.
Why we hold it, and on what legal basis
We hold contact form and email data to answer you and, if the work goes ahead, to run the engagement. In Quebec that is a legitimate and serious purpose declared at the point of collection. In the European Economic Area the basis is our legitimate interest in responding to someone who wrote to us, or steps taken before a contract at your request.
We do not sell personal information. We do not rent, trade or share it for anyone else’s marketing, and we do not use it to train a model.
Where it lives
The contact form posts to an Azure Function that writes the message into our own Odoo CRM. Both are infrastructure we operate. The function runs in Azure Canada East, near Quebec City. The Odoo instance that stores the message is hosted in Montreal. What you write in the form does not leave Quebec.
The pages you are reading are served by Azure Static Web Apps, whose origin sits in East US 2 and whose edge caches are worldwide. Those files are public marketing content and carry nothing about you.
We run no third party analytics. There is no measurement script on this site, no advertising pixel and no cookie beyond what the platform needs to serve the page, which is why you were not asked to consent to anything.
If holding your information outside Quebec is a constraint for your organization, say so in your first message and we will tell you plainly whether we can meet it.
How long we keep it
An enquiry that does not become an engagement is deleted after twenty-four months. Records tied to an engagement are kept for seven years after the engagement ends, which is what tax and professional liability rules require of us. Ask for deletion earlier and we will do it, unless a legal obligation says otherwise, in which case we will tell you which one.
Who else sees it
Only the people at Entrazure who need it, which in practice means the architect answering you. Our subprocessors are Microsoft Azure for hosting and our email provider for mail delivery. We add none of the usual marketing intermediaries, because we run none of them.
Your rights
You can ask us to confirm what we hold about you, to give you a copy, to correct it, to delete it, or to stop using it. In Quebec you can also ask for your information in a structured, commonly used technical format, and ask us to explain a decision made about you by automated means, though we make none. In Europe you can object to processing and lodge a complaint with a supervisory authority.
Write to contact@entrazure.com. We answer within one business day and complete the request within thirty days. We will ask for enough information to be sure it is you, and nothing beyond that.
Person responsible for the protection of personal information
Law 25 requires us to name one accountable person for our Canadian operations and to publish how to reach them:
- Title: Privacy officer, Entrazure Technologies
- Contact: contact@entrazure.com, with “Loi 25” in the subject line
Mail sent that way is routed to them and is not handled by the sales team on the way. Ask for the officer’s name and it will be given to you.
Confidentiality incidents
If we discover an incident involving personal information that presents a risk of serious injury, we will notify the Commission d’accès à l’information du Québec and the people affected without delay, and we keep a register of incidents as Law 25 requires. Our engineering practices around this are described on the security page.
Changes
If what we collect or why it changes, the date at the top of this page changes with it, and for anything material we tell the people affected directly.
Ask us
Questions about this policy, or about a specific record, go to contact@entrazure.com or through the contact page. Related pages: terms of use, accessibility, security.