Privacy Policy — GeoChantier
Effective date: 2026-11-04 · Version: 1.0
A French version of this policy is available: Version française. If the versions differ, the French version prevails for people located in Quebec.
This Privacy Policy explains how Canalytics Group Inc. ("Canalytics", "we", "us") collects, uses, discloses, retains and protects personal information in connection with GeoChantier (https://geochantier.canalytics-group.com/en/geochantier) (the "Service"). This policy covers the public website only. The GeoChantier platform, which is under development, is not covered. We wrote it to be read, not skimmed past: each section says plainly what we do and what you can do about it.
1. Who we are and our role
Canalytics Group Inc. is a corporation incorporated under the Canada Business Corporations Act with its registered office in Quebec, Canada. It builds and operates software platforms for regulated and data-intensive industries, together with its Moroccan affiliate Canalytics Consulting & Engineering Maroc SARL.
For the personal information described in this policy, Canalytics decides why and how it is processed. Under Quebec law we are the enterprise holding the information. Under the GDPR we are the controller. Under Moroccan Law 09-08 we are the responsable du traitement.
2. Person in charge of the protection of personal information
Canalytics has designated a person in charge of the protection of personal information, who oversees compliance with this policy and handles your requests and complaints:
- Person in charge of the protection of personal information — Abderrahmane Ameray, President and Co-founder
- Email: privacy@canalytics-group.com
- Mail: Canalytics Group Inc., Attn: Privacy, 405-2018, rue des Grands-Monts, Sherbrooke (Québec) J1H 3Z7, Canada
- Morocco: Canalytics Consulting & Engineering Maroc SARL, 29 rue Mohamed El Baamrani, Résidence Sara 2, Étage 2, N°206, Casablanca, Maroc — privacy@canalytics-group.com
3. Information we collect
We collect only the information we need for the purposes listed under Why we use it.
| Category | Examples | Source |
|---|---|---|
| Demo requests | name, company, work email, package of interest (optional), consent tick box | you |
| Preferences | language, light or dark theme, cookie choices (stored in your browser only) | you |
| Analytics (only with consent) | pages visited, referrer, device type, approximate country | automatic, after consent |
| Technical | web server logs kept by our host | automatic |
We do not knowingly collect information we do not need.
How we collect it
- From you, when you fill in the demo form or contact us.
- Automatically, through the technology that runs the Service (server logs and the cookies described in our Cookie Policy).
4. Why we use it
| Purpose | Examples | Legal basis |
|---|---|---|
| Answer demo requests | demo form, follow-up emails | your request / pre-contractual steps |
| Remember your preferences | language, theme, cookie choices | strictly necessary for the service you asked for |
| Measure and improve the website | pseudonymous audience measurement | consent |
| Keep the website secure | server logs, abuse prevention | legitimate interest |
We will not use your information for a new purpose that is incompatible with these without first telling you and, where the law requires, obtaining your consent. We do not sell personal information and do not share it for cross-context behavioural advertising.
Where the GDPR applies, the last column shows the legal basis we rely on (GDPR art. 6). Where we rely on legitimate interests, you may ask us for details of those interests.
5. When we share information
We share personal information only:
- With service providers that host or operate this website for us (see Service providers below).
- With your direction or consent.
- For legal reasons, when the law requires it or to respond to a valid legal order; we review each request and disclose only what is strictly required.
- In a business transaction (merger, financing, sale of assets), with parties bound by confidentiality who may use the information only for the transaction, as permitted by law.
- Within the Canalytics group (Canalytics Group Inc. in Canada and Canalytics Consulting & Engineering Maroc SARL in Morocco), only where needed to operate and support the Service.
6. Service providers (subprocessors) and where your information is stored
Your information is primarily stored in the United States (Netlify).
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Netlify Inc. | Website hosting and demo form handling (Netlify Forms) | web traffic, form submissions | USA / global CDN |
| Google LLC (Google Analytics 4) | Audience measurement, only after consent and only if enabled | pseudonymous usage data | USA |
| Hyperknot Software Kft. (OpenFreeMap) | Map tiles for the fleet map | IP address and browser data needed to serve tiles | Hungary; may use a global CDN |
The current list is the table above. We update it before we add a provider that processes personal information.
Communication outside Quebec. Some of these providers store or access information outside Quebec, including in the United States. Transfers from Morocco. Information sent from Morocco through the demo form is stored in the United States by Netlify. The IP address of visitors who display the map is sent to OpenFreeMap (Hungary, possibly through a global CDN) and, if you accept audience measurement, usage data is sent to Google in the United States. Transfers from Senegal. Information sent from Senegal through the demo form is stored in the United States by Netlify. The IP address of visitors who display the map is sent to OpenFreeMap (Hungary, possibly through a global CDN) and, if you accept audience measurement, usage data is sent to Google in the United States. Transfers outside the EEA/UK. Information sent through the demo form is stored in the United States by Netlify. The IP address of visitors who display the map is sent to OpenFreeMap (Hungary, possibly through a global CDN) and, if you accept audience measurement, usage data is sent to Google in the United States.
7. How long we keep it
We keep personal information only as long as needed for the purposes described above, then securely destroy or anonymize it (anonymized information can no longer identify anyone, irreversibly, and is used only for serious and legitimate purposes).
| Data | Period |
|---|---|
| Demo requests | 24 months after the last exchange, longer if a contract follows |
| Analytics | 14 months |
| Preferences in your browser | until you clear them; cookie choices are asked again after 6 months |
Information subject to a legal hold, an ongoing dispute or a statutory retention period is kept until that obligation ends.
8. How we protect it
The public website has no user accounts. It is served over HTTPS and applies a content security policy. Demo requests are kept by our host. No system is perfectly secure; if a confidentiality incident affects your information and presents a risk of serious harm, we will notify you and the competent authorities as required by law.
9. Your rights
You can exercise the rights below, free of charge, by writing to privacy@canalytics-group.com. We will verify your identity before acting, and answer within 30 days (or the shorter period required by your local law). If we refuse a request, we will explain why and how to contest the refusal.
If you are in Quebec
Under the Act respecting the protection of personal information in the private sector, you may: - access your personal information and obtain a copy; - have inaccurate, incomplete or equivocal information corrected; - withdraw consent to a use or communication; - receive computerized personal information you provided in a structured, commonly used technological format, and have it transferred to a person or body you designate (data portability); - ask us to stop disseminating your information or to de-index any hyperlink attached to your name, where the conditions of the Act are met; - be informed of, and comment on, decisions based exclusively on automated processing. You may file a complaint with the Commission d'accès à l'information du Québec (www.cai.gouv.qc.ca) if you are dissatisfied with our response.
Elsewhere in Canada
Under PIPEDA (and, where applicable, the private-sector laws of Alberta and British Columbia) you may access and correct your information, withdraw consent subject to legal or contractual restrictions, and challenge our compliance. You may contact the Office of the Privacy Commissioner of Canada (www.priv.gc.ca).
In Morocco
Under Law 09-08, you have the right to information, access, rectification and, on legitimate grounds, objection to the processing of your data, and the right to object free of charge to its use for direct marketing. Rectifications are made within ten clear days. You may refer the matter to the Commission Nationale de contrôle de la protection des Données à caractère Personnel (CNDP) (www.cndp.ma).
In Senegal
Under Law No. 2008-12 of 25 January 2008 on the protection of personal data, you have the rights of information, access, objection, rectification and deletion. You may refer the matter to the Commission de Protection des Données Personnelles (CDP) (www.cdp.sn).
In the European Economic Area, Switzerland and the United Kingdom
You have the rights of access, rectification, erasure, restriction, objection (including to direct marketing at any time), data portability, and to withdraw consent at any time without affecting prior processing. You may lodge a complaint with the supervisory authority where you live or work.
In the United States
Depending on your state of residence (for example California, Colorado, Connecticut, Virginia and other states with comprehensive privacy laws), you may have the right to know, access, correct, delete and port your personal information, and to opt out of sale, targeted advertising and certain profiling. We do not sell personal information or use it for targeted advertising. We will not discriminate against you for exercising your rights. An authorized agent may submit a request on your behalf with proof of authorization. If we deny your request, you may appeal by replying to our decision; we will answer the appeal within the time set by your state's law.
10. Children
The Service is intended for adults and professionals. It is not directed at children under the age of 16, and we do not knowingly collect their information. If you believe a child has provided us information, contact us and we will delete it.
11. Cookies and similar technologies
See our Cookie Policy. When audience measurement is on, you can change your choice with the "Cookie settings" button in the footer.
12. Changes to this policy
We will post any change here with a new effective date. If a change is material, we will notify you by email if we have your address, otherwise on this page, and, where required, ask for your consent again.
13. Contact us
Questions, requests or complaints: privacy@canalytics-group.com · Canalytics Group Inc., 405-2018, rue des Grands-Monts, Sherbrooke (Québec) J1H 3Z7, Canada · +1 (514) 434-6530.
To obtain information about our governance policies and practices regarding personal information, write to privacy@canalytics-group.com.
Annex: people located in other African countries
If you are located in another African country, you may exercise the rights described in this policy by writing to privacy@canalytics-group.com. You may also contact the data protection authority in your country.
- South Africa: Protection of Personal Information Act, 2013 (POPIA), authority: Information Regulator;
- Algeria: Law No. 18-07 of 10 June 2018, authority: ANPDP;
- Côte d'Ivoire: Law No. 2013-450 of 19 June 2013, authority: ARTCI;
- Ghana: Data Protection Act, 2012 (Act 843), authority: Data Protection Commission;
- Kenya: Data Protection Act, 2019, authority: Office of the Data Protection Commissioner;
- Nigeria: Nigeria Data Protection Act, 2023, authority: Nigeria Data Protection Commission;
- Tunisia: Organic Law No. 2004-63 of 27 July 2004, authority: INPDP;
- African Union: Malabo Convention on Cyber Security and Personal Data Protection (2014).
To exercise your rights, write to privacy@canalytics-group.com. You may also contact the data protection authority in your country.