Privacy policy

1. 1. Scope: our two roles

As a controller: the information we collect directly (visitors of prosperit.tech, prospects, contacts at our clients).,As a service provider: in the course of our managed services, we may access personal information held in our clients’ systems. We process it only on the client’s instructions; the client remains responsible for it under the law. That processing is governed by our service agreement.

2. 2. Person in charge of the protection of personal information

Philippe Daoust, Solutions ProsperIT inc., info@prosperit.tech. Any question, access or correction request, or complaint may be addressed to him.

3. 3. Information we collect

Contact details: name, company, email, phone, position.,Technical information: when required for support (device identifiers, logs, configuration).,Browsing data: through cookies (see section 7).,"Check your domain" tool (prosperit.tech/verifier): the domain name you submit and, if you request the full report, your name and email address. The tool reads only the domain’s public DNS records (SPF, DKIM, DMARC, BIMI, MTA-STS, TLS-RPT, DNSSEC): no personal information is read and no access to your systems takes place. Your IP address is processed transiently to limit the number of requests and prevent abuse; it is not stored with your request.

We collect only the information needed for the purposes below.

4. 4. Purposes of collection

Responding to requests and providing our IT services;,Managing the client relationship, billing and support;,Ensuring the security and proper operation of systems;,Sending you the report you requested with the "Check your domain" tool, then following up: requesting a report is a request for contact, and a member of our team may write or call you about it. You can ask us to stop by replying to the email you received;,Communicating relevant information about our services (with your consent).

5. 5. Consent

We collect your information with your free and informed consent, for the stated purposes. You may withdraw it at any time (see section 11).

6. 6. Disclosure to third parties

We do not sell your information. We may disclose it to suppliers and subcontractors (for example Microsoft, hosting providers, management tools) strictly to deliver the services, binding them to equivalent confidentiality and security commitments.

7. 7. Cookies, audience measurement and hosting outside Quebec

Our site is served through Cloudflare, which acts as a network relay and as protection against attacks. In that role, Cloudflare processes the technical data of each connection, including the IP address. One strictly necessary cookie ("cf_clearance") is set for that security purpose alone: without it, the protection cannot work. This cookie is exempt from consent because it is inseparable from the protection of the site.

We measure site traffic with Cloudflare Web Analytics. This measurement uses no cookie and no identifier that would follow you from one site to another: we derive aggregate statistics from it (pages viewed, source, performance), never an individual profile.

We use no advertising cookie and no social network tracker. Should we ever enable one, your consent would be requested beforehand. You can in any case manage cookies from your browser.

Some of our suppliers, including Cloudflare and Microsoft, may host or process data outside Quebec. Before any such transfer, we carry out a privacy impact assessment and take the measures needed to ensure adequate protection.

8. 8. Retention and destruction

We keep your information for as long as needed for the stated purposes and our legal obligations, then destroy or anonymize it securely.

For the "Check your domain" tool: the log of report requests (email, domain, grade, date) and the requests set aside by our anti-abuse filters are automatically destroyed after 90 days. If you have become a prospect or a client, your contact details are kept in our sales follow-up for as long as the relationship warrants; you may request their deletion at any time (section 11).

9. 9. Security measures

We apply reasonable technical, physical and organizational measures (access control, encryption, logging, backups), proportionate to the sensitivity of the information.

10. 10. Automated decisions

Our services maintain human oversight. If a service were to rely on a decision based exclusively on automated processing, we would inform you and allow you to present your observations, in accordance with Law 25.

11. 11. Your rights

At any time, you may: access your information, request its correction, withdraw your consent, request the portability of your computerized information, or request de-indexing in the cases provided by law. We respond within 30 days.

12. 12. Confidentiality incidents

In the event of an incident presenting a risk of serious injury, we take reasonable measures to reduce its effects, notify the persons concerned and the Commission d’accès à l’information (CAI), and keep a register of incidents.

13. 13. Complaints

Any complaint may be addressed to our person in charge (section 2). You may also contact the Commission d’accès à l’information du Québec.

14. 14. Changes

We may amend this policy. The current version is published on prosperit.tech.