Last updated: Aug, 2026. This policy applies to dactape.com and its subdomains (the “Site”).
DacTAPE Systems (“DacTAPE”, “we”, “us”) builds data acquisition and context software. We are currently operating in stealth and engage with a small number of design partners. This policy explains what we collect through this Site, why, and what you can require of us.
Who is responsible
DacTAPE Systems, St-jean-sur-richelieu, Quebec, Canada, is the controller (GDPR) and the organization responsible for personal information (PIPEDA / Quebec Law 25).
Privacy contact and Privacy Officer: confidential@dactape.ca. Under Quebec Law 25 the person in charge of the protection of personal information is CTO, and President, reachable at the same address.
What we collect
- Briefing requests. When you submit the form: first and last name, email address, telephone number (optional), and your stated purpose for connecting. Submitted directly to our CRM.
- Correspondence. Anything you choose to send us by email.
- Usage data. If you consent to analytics cookies: pages viewed, referring page, approximate location derived from IP, device and browser type, and a pseudonymous visitor identifier.
- Server logs. Our hosting provider records IP addresses and request metadata for security and abuse prevention.
We do not ask for, and ask that you do not send, information about your operating environment, network topology, asset inventories or vulnerabilities through this Site. Technical discussions happen under a mutual non-disclosure agreement.
We do not knowingly collect information from anyone under 16. We do not collect special category data, and the Site is not directed at children.
Why we use it, and on what legal basis
- To respond to your request and arrange a briefing — performance of a contract or steps taken at your request (GDPR Art. 6(1)(b)); implied consent (PIPEDA).
- To contact you about matters related to your enquiry — legitimate interests (Art. 6(1)(f)); we balance this against your expectations and you may object at any time.
- Analytics and site improvement — your consent (Art. 6(1)(a); Quebec Law 25 and the ePrivacy Directive for cookies). Withdraw it at any time through the cookie preferences link in the footer.
- Security, fraud prevention and legal compliance — legitimate interests and legal obligation (Art. 6(1)(f) and (c)).
We do not sell personal information, we do not share it for cross-context behavioural advertising, and we do not engage in automated decision-making or profiling that produces legal effects.
Cookies and similar technologies
Strictly necessary cookies are set to make the Site work and to remember your consent choices; these do not require consent. Analytics and marketing cookies — including those set by HubSpot, our CRM — load only after you agree, and are withheld until then. Embedded third-party content is blocked behind a consent notice until you allow it. You can change or withdraw consent at any time via Cookie preferences in the footer, and we honour Global Privacy Control (GPC) signals where your browser sends them.
Who we share it with
We use a small number of processors, each bound by a data processing agreement and permitted to use the data only on our instructions:
- HubSpot, Inc. — CRM and form processing (United States).
- Cloudflare, Inc. — hosting, content delivery and security (global edge network).
- Google.LLC — business correspondence.
We also disclose information where required by law, and may transfer it as part of a corporate transaction — in which case the acquirer remains bound by this policy or gives you notice of any change.
International transfers
We are based in Canada and our processors include organizations in the United States, so your information may be stored or processed outside your jurisdiction and may be accessible to authorities there under local law. For transfers out of the EEA, the UK and Switzerland we rely on the European Commission's Standard Contractual Clauses, the UK Addendum, and supplementary measures where needed. For transfers out of Quebec we have completed a privacy impact assessment of the receiving jurisdictions as required by Law 25. Copies of the relevant safeguards are available on request.
How long we keep it
- Briefing requests and correspondence — 24 months after our last substantive contact, then deleted or anonymized, unless a design-partner relationship is in place.
- Analytics data — 14 months.
- Server logs — 30 days, absent a security investigation.
- Consent records — retained for as long as we must be able to demonstrate consent, plus the applicable limitation period.
Your rights
Everyone: you may ask us for a copy of the personal information we hold about you, ask us to correct it, ask us to delete it, ask us to stop or limit a particular use, and withdraw any consent you have given. Contact us at [privacy@dactape.com] and we will respond within 30 days.
EEA, UK and Switzerland (GDPR): in addition, you have the right to data portability, the right to object to processing based on legitimate interests, and the right to lodge a complaint with your national supervisory authority. Exercising your rights is free unless a request is manifestly unfounded or excessive.
Canada (PIPEDA): you may challenge our compliance and, if unsatisfied with our response, complain to the Office of the Privacy Commissioner of Canada.
Quebec (Law 25): you additionally have the right to receive your information in a structured, commonly used technological format (portability), the right to be informed of and contest a decision based exclusively on automated processing, and the right to request that a link to your information be de-indexed where the conditions of the law are met. Complaints may be directed to the Commission d'accès à l'information du Québec.
California (CCPA/CPRA) and other U.S. state laws: you have the right to know the categories and specific pieces of personal information collected, the sources, the purposes, and the categories of recipients; to delete it; to correct it; and to opt out of sale or sharing. We do not sell or share personal information, and we do not use or disclose sensitive personal information for purposes requiring an opt-out right. We will not discriminate against you for exercising any right. You may use an authorized agent, and we will verify identity before acting. Residents of Colorado, Connecticut, Virginia, Utah, Texas and other states with comprehensive privacy laws have substantially the same rights and may appeal a refusal by writing to the same address.
How we protect it
Transport encryption (TLS) across the Site, encryption at rest with our processors, access limited to those who need it, multi-factor authentication on administrative accounts, and a static site architecture with no public database or admin panel. No method of transmission or storage is perfectly secure; where a breach creates a real risk of significant injury we will notify affected individuals and the applicable regulators as required by law.
Changes
We will update this page when our practices change and revise the date above. Material changes affecting how we use information already collected will be announced on the Site, and where the law requires it we will seek fresh consent.
Contact
DacTAPE Systems — confidential@dactape.ca— . We reply to every message from a named organization.