Legal
Privacy Policy & Law 25.
We are committed to protecting your personal information in compliance with Québec's Law 25 (Act to modernize legislative provisions as regards the protection of personal information).
1. Privacy Officer
The legal entity responsible for the processing is OliMar Développement Inc. (“Olimar”), Québec enterprise number (NEQ) 1182173147, 336 rue Jeanne-d'Arc, Québec (Québec) G1S 2R7, Canada. This is the name that governs in any legally binding text and in any agreement naming Olimar.
The Privacy Officer at Olimar is Olivier Lange. For any question, access request, or exercise of your rights, you may reach him at info@olimar.ca.
2. Information collected
Olimar collects only the information strictly necessary to respond to your request:
- Contact form: name, email address, organization (optional), subject, and message. This information is routed directly to our inbox and is not stored in a database. Information collected through the GoSec 2026 campaign follows a distinct regime, described in section 11.
- Technical server logs: IP address and timestamp, retained briefly for security and diagnostic purposes. These data are not cross-referenced with other personal information.
We apply the principle of data minimization: we collect only what we need, for as long as necessary.
3. Purposes
Information collected through the contact form is used solely to respond to your request. There is no other use, no behavioral profiling, and no sale or transfer of your data to third parties for commercial purposes.
4. Consent
The contact form includes an explicit consent checkbox, in line with Law 25 requirements. By checking it, you consent to Olimar using your information to respond to your request.
You may withdraw your consent at any time by writing to info@olimar.ca. Withdrawal does not affect the lawfulness of processing carried out before that point.
5. Retention
- Contact request emails: retained for 24 months from receipt, then deleted or anonymized.
- Server logs: retained for 90 days, then automatically purged.
No other personal data is persistently stored in our systems, subject to section 11.
6. Disclosure to third parties
Olimar uses two technical sub-processors:
- Resend (email delivery) — a US company whose servers are located in the United States. Your contact details (name, email) pass through Resend when we send our reply to your request. This transfer outside Québec has been assessed through a privacy impact assessment. Resend is bound by contractual confidentiality obligations.
- OVH (server hosting) — infrastructure physically located in Canada. Hosted data does not leave Canadian territory.
No other disclosure to third parties is made, except as required by law and subject to section 11.
7. Cookies
olimar.ca uses no non-essential cookies. There are no tracking cookies, no advertising cookies, and no third-party analytics services.
Audience measurement is performed using Umami, a self-hosted tool on our own infrastructure that produces aggregated statistics without cookies or personal identifiers. This measurement does not constitute processing of personal information under Law 25 — no consent banner is therefore required.
8. Individual rights
Under Law 25, you have the following rights:
- Access: obtain a copy of the personal information we hold about you.
- Rectification: have inaccurate or incomplete information corrected.
- Withdrawal of consent: end the processing of your information.
- De-indexing: in cases provided by law, request that dissemination of information about you cease or that it be de-indexed.
To exercise any of these rights, write to info@olimar.ca describing your request. We will respond within the legally prescribed timeframe (30 days, extendable once).
9. Privacy incidents
In the event of a privacy incident (unauthorized access, communication, or use of personal information), Olimar undertakes to:
- Maintain an incident register in accordance with legal requirements.
- Notify the Commission d'accès à l'information (CAI) and the affected individuals if the incident presents a risk of serious harm.
- Take appropriate corrective measures to limit impact and prevent recurrence.
10. Updates
This policy may be updated to reflect changes in our practices or legal requirements. The date of last revision is shown below. We encourage you to review it periodically.
11. GoSec 2026 joint campaign
From September 23 to 25, 2026, on the occasion of the GoSec conference, OliMar Développement Inc. is running a joint campaign with SecuAAS (9463-7220 Québec inc.). The form hosted at secuaas.com/gosec is operated by SecuAAS; the information collected there is disclosed to Olimar, which processes it for the purposes described below. Both companies are named at the point of collection.
Information collected: first name, last name, email address, organization, role, organization size, stated interest, project horizon, preferred meeting slot, and free-text description. For those who take part, information related to the contest held at the booth is also collected.
Purposes: responding to your request, preparing the meeting at the conference, managing your contest entry where applicable, and — only if you separately consented to it — sending you the joint newsletter.
Who contacts you: Olimar does. The “we” used on the campaign page refers to Olimar for any follow-up to your request.
Where this information is held: in Olimar's customer relationship management system, hosted on OVH infrastructure located in Canada. Your newsletter consent is recorded there separately from your consent to be contacted, together with its timestamp: this is our consent register.
Retention: 24 months from collection — the same period as contact request emails (section 5). At the end of the Founder Offer, on October 31, 2026, individuals who did not follow up receive no special treatment: they remain ordinary prospects, subject to that same period. Your newsletter consent, however, remains valid until you withdraw it.
Newsletter and withdrawal: newsletter consent is optional and express — the checkbox is unchecked by default. Every mailing identifies both senders and includes a working unsubscribe mechanism, in accordance with Canada's Anti-Spam Legislation (CASL). You may also unsubscribe at any time by writing to info@olimar.ca.
Exercising your rights: write to info@olimar.ca. An access, correction, or withdrawal request received by Olimar is forwarded to SecuAAS where it concerns information held by both companies, so that it takes effect on both sides.
Last updated: September 4, 2026.