Version française

Privacy policy

Last updated on October 12, 2026.

Who is responsible

arendal is a team of five software engineers. The person responsible for protecting personal information at arendal is Daniel Lavoie, co-founder, who you can reach at daniel@arendal.ca.

This policy covers the information we handle for ourselves: visitors to this site, people we contact or who contact us about our services, and our contacts at client companies. Information we handle inside a client's own systems, on their behalf, is governed by our contract with that client.

When you visit this site

This site sets no cookies and uses no analytics or tracking. Its fonts and images are served from the site itself, not from third parties.

The site is hosted on GitHub Pages. Like any web host, GitHub receives technical information such as your IP address and browser in its server logs, to deliver and protect the site. We don't receive or use those logs.

When you write to us

We keep your name, email address and what you wrote, to answer you and, if you ask, to prepare a proposal.

When we contact you about our services

We may write to a person at a business about services relevant to their role. To do so, we keep:

• their name, role, company and business email address;
• where and when we found that address: either published by the person or their organisation, with no request not to be contacted, or given to us by someone who referred them;
• public technical information about the organisation's email domain, such as its published DNS records, which we may mention in our message;
• the dates of our messages, and any reply.

We write at most three times, then stop. Every message says who we are and how to stop hearing from us. We never buy contact lists, and never use software to collect email addresses.

When you are our client

We keep the names and contact details of the people we work with, billing information, and our exchanges, to deliver our services and invoice them.

How long we keep it

• People we contacted who never engaged with us: deleted 12 months after we added them.
• People who asked us to stop writing: we keep only their email address, on a do-not-contact list, so we never write again.
• Clients: for the length of our work together, then as long as tax and accounting law requires, generally six years.

Who we share it with

We never sell or rent personal information. We use a few service providers to run arendal, such as our email provider and our website host. Some store information outside Quebec and Canada, including in the United States. Before relying on a provider outside Quebec, we assess whether the information will be adequately protected, as Quebec law requires.

How we protect it

Personal information is accessible only to the people at arendal who need it, through accounts protected by multi-factor authentication. Contact lists are kept out of shared code repositories.

If a confidentiality incident occurs, we record it and, when it presents a risk of serious injury, notify the people concerned and Quebec's Commission d'accès à l'information.

Your rights

You can ask us, at any time, to:

• tell you what information we hold about you and give you a copy;
• correct it;
• delete it, or stop using it;
• stop writing to you: reply "stop" to any message, or write to us.

Write to daniel@arendal.ca. We answer within 30 days. If you're not satisfied with our answer, you can complain to the Commission d'accès à l'information du Québec or the Office of the Privacy Commissioner of Canada.

Changes

We update this policy when the way we handle information changes. The date at the top is the date of the last change.