1. Who We Are
Bud Lafleur Inc. is a company registered in Canada and operating from 3900-1 place Ville-Marie, Montréal - H3B 4M7, Canada (CA). The studio works within the computer systems design and related services field and specialises in computer integrated systems design. For the purposes of this Privacy Policy, the controller of personal information is Bud Lafleur Inc., acting through its principal studio address and its contact channels.
The studio is small by design. A limited number of people handle client relationships, system work and documentation, and those people are the only ones with routine access to the personal information described in this policy. The developer listed in the studio records, BudLafleur, is responsible for maintaining the technical safeguards that protect this information and for reviewing the policy each year.
When this policy refers to we, us or our, it means Bud Lafleur Inc. together with the individuals who act on its behalf. When it refers to you or your, it means a visitor to this website, a person who contacts the studio, a representative of a client organisation, or anyone whose personal information reaches the studio through a lawful channel.
2. Scope of This Policy
This policy covers the personal information that Bud Lafleur Inc. collects through this website, through direct correspondence, through the contact form, through telephone conversations, and through the course of delivering studio services. It applies to information in any format, whether it sits in an email inbox, a project management tool, a document, a spreadsheet or a database that the studio maintains.
This policy does not cover information that the studio processes strictly on behalf of a client as part of a systems design engagement, where the client remains the controller of the data and the studio acts only on documented instructions. In those situations the terms of the relevant engagement agreement and the client privacy policy govern, and this policy applies only to the extent that the engagement agreement refers to it.
This policy also does not cover the practices of third party websites that you may reach through links on this site. Those websites operate under their own terms and policies, and we encourage you to read them before sharing personal information.
3. Information We Collect
We collect only the information that we need in order to respond to enquiries, deliver studio services, maintain accurate records and operate the website. The categories are deliberately modest.
Information you give us directly
When you use the contact form or write to the studio, you may give us your name, email address, telephone number, organisation name, the subject of your enquiry and the content of your message. If you become a client, you may share the names and roles of team members, project schedules, system descriptions, technical documentation and other material that is necessary to do the work.
Information collected automatically
When you visit this website, the server that hosts it may record standard technical information such as the type of browser you use, the pages you request, the date and time of your visit and the approximate region from which the request came. This information is used to keep the site available and secure, and it is not used to build a profile of any individual visitor.
Information from third parties
On occasion, a client may introduce us to a colleague by email, or a partner may share contact details so that the studio can follow up on a referral. When this happens we use the information only for the purpose for which it was shared.
We do not collect sensitive categories of personal information such as health data, biometric data or information about political opinions, and we ask visitors not to send such information through the contact form.
4. How We Collect Information
Most information reaches the studio because someone chooses to send it. The contact form prepares an email in your own mail client, and the message arrives through ordinary email. A telephone call, a letter or a conversation in the studio worktable are equally normal channels. Each of these channels is a direct means by which you choose to share information with us.
A smaller amount of information is collected automatically by the web server and by any measurement tools that the studio uses to understand whether the site is functioning as intended. We describe those tools in the sections that follow.
We do not purchase lists of contact details from data brokers, we do not scrape personal information from social networks, and we do not obtain personal information from any source that would surprise the person concerned.
5. Why We Use Information
The studio uses personal information for a small number of clear purposes. Each purpose is tied to a legitimate interest of the studio or to an obligation that the studio must meet.
- To answer enquiries that arrive through the contact form, email or telephone.
- To prepare proposals, estimates and engagement agreements for prospective clients.
- To deliver the studio services described on the services page, including Bloom Side Desk reviews, Stalk Row Rounds, Ribbon Band Weeks, Vase Fit Days, Seasonal Mix Sessions and Wrap Paper Evenings.
- To maintain accurate project records, documentation and handover material.
- To invoice for work performed and to meet accounting and tax obligations.
- To keep the website secure, available and free of abuse.
- To improve the clarity and usefulness of the website content over time.
- To comply with legal obligations that apply to a Canadian business.
We do not use personal information for any purpose that is incompatible with the purposes for which it was collected, and we do not sell personal information to anyone.
6. Legal Bases for Processing
Where privacy law requires a legal basis for processing, the studio relies on one or more of the following grounds. We rely on consent when you send us a message and thereby invite a reply. We rely on the performance of a contract when we deliver services to a client under an engagement agreement. We rely on legitimate interests when we keep the website secure, maintain project records and respond to enquiries that a reasonable person would expect us to answer. We rely on legal obligation when we keep financial records for the periods required by tax and accounting rules.
Where we rely on consent, you may withdraw it at any time by writing to the studio. Withdrawal does not affect the lawfulness of processing that took place before the withdrawal, and it does not affect processing that relies on another legal basis.
7. Contact Form Information
The contact form on this website does not send your message to a remote application server. Instead, it prepares an email in your own mail client, addressed to styling@budlafleur.hair, with the details you entered. This design keeps the message under your control until you deliberately send it, and it means that the studio does not store a copy of the message in a web database.
Once the message arrives by email, it is handled like any other business correspondence. It is read by the person best placed to answer it, it is filed in the studio mailbox, and it is retained only for as long as it is useful to keep. If your enquiry does not lead to a project, the message is normally removed within twelve months, unless there is a legal reason to keep it longer.
Please avoid sending passwords, payment card numbers or unusually sensitive personal details through the contact form. If a project requires you to share such information, the studio will arrange a more suitable channel before that point.
8. Project and Client Records
During an engagement the studio keeps working records so that the arrangement stays coherent and so that the final Wrap Paper Evenings can be written accurately. These records may contain names of team members, roles, contact details, meeting notes, system descriptions, diagrams and technical documentation.
Project records are stored in a small number of tools that the studio controls. Access is limited to the people working on the engagement. When the engagement ends, the records are archived in a way that preserves the handover material while removing incidental information that is no longer needed.
If a client asks the studio to process personal information on the client behalf, the engagement agreement defines the scope, the duration and the safeguards that apply. In that case the studio follows the client instructions and does not use the information for its own purposes.
10. Analytics and Measurement
The studio may use a simple measurement service to understand how many people visit the site and which pages are read most often. When such a service is used, it is configured to avoid identifying individual visitors. The studio does not combine measurement data with contact form messages or with client records, and it does not attempt to match a website visit to a named person.
Where a measurement service relies on cookies, the studio will make that clear in this section and offer a straightforward way to opt out. At the time of this update, the site uses only aggregate server logs, which record the page requested, the time of the request and basic technical details of the connection.
12. Service Providers
Like most small studios, Bud Lafleur Inc. relies on a handful of carefully chosen service providers. These may include an email host, a file storage provider, a project management tool and a website hosting provider. Each provider is selected because it can meet reasonable security standards and because its terms of service support the obligations that the studio owes to its clients.
We review these providers from time to time and we replace a provider if it no longer meets our expectations. Where a provider processes personal information on our behalf, we require it to act only on our instructions, to keep the information confidential and to apply appropriate technical and organisational safeguards.
A current list of providers can be requested by writing to styling@budlafleur.hair. We share the list on request rather than publishing it here, so that the information stays accurate as providers change.
13. International Transfers
The studio is based in Canada, and most information stays within Canada. Some service providers operate data centres in other countries, which means that personal information may be transferred to, stored in or accessed from a jurisdiction outside Canada. Where this happens, the studio takes reasonable steps to ensure that the information remains protected by contractual safeguards and by the provider own security commitments.
If you would prefer that your information not be transferred outside Canada, please tell us before sending it, and we will do our best to arrange a suitable alternative or to explain any limitation honestly.
14. How Long We Keep Information
We keep personal information only for as long as it serves a clear purpose. The retention periods below describe the normal practice, though individual cases may call for a shorter or longer period.
- Enquiries that do not lead to a project are normally removed within twelve months.
- Proposals and related correspondence are kept for two years after the proposal date.
- Project records, including documentation produced during Wrap Paper Evenings, are kept for six years after the engagement ends, so that the client can request a copy or ask a question about the work at any time.
- Financial records such as invoices are kept for the period required by Canadian tax and accounting rules.
- Website server logs are kept for a short period, normally no more than ninety days.
When a retention period ends, the information is deleted or irreversibly anonymised. If a legal obligation requires us to keep a record, we will keep only the part that is required and will restrict access to it.
15. How We Protect Information
The studio applies a set of practical safeguards that match the size and nature of its work. These include encrypted connections to the website, strong authentication on the accounts that hold client records, software updates applied promptly, and a rule that only the people who need access to a piece of information are given it.
Backups are taken regularly and tested so that a lost file can be recovered. Devices used for studio work are protected with screen locks and full disk encryption. Staff and contractors receive a short written briefing on these practices and are asked to report any suspected incident immediately.
No method of transmission or storage is perfectly secure. If an incident affecting personal information does occur, the studio will act quickly to contain it, will notify affected individuals and the relevant authorities where the law requires, and will explain what happened in plain language.
16. Your Privacy Rights
Depending on where you live, you may have a set of legal rights over your personal information. The studio extends the same courtesy to every person who writes to it, regardless of location. In practice this means you may ask us to confirm whether we hold information about you, to show you a copy, to correct anything that is wrong, to delete information that we no longer need, or to stop using information for a particular purpose.
You may also object to processing that relies on legitimate interests, ask us to restrict processing while a concern is investigated, and withdraw consent that you have previously given. We will answer every request within the timeframe required by applicable law, and normally within thirty days.
To exercise a right, write to styling@budlafleur.hair with enough detail for us to find the records you mean. We may ask you to confirm your identity before releasing information, so that we do not disclose it to the wrong person.
17. Access and Correction
If you would like to see the personal information that the studio holds about you, please write to us and describe the context of your relationship with the studio. A client, a prospective client or a website visitor each has a slightly different set of records, and a short note about the context helps us find the right material quickly.
If something we hold is inaccurate or incomplete, tell us and we will correct it. Where the information came from a third party and we cannot amend the original record, we will note the correction in our own copy and explain the situation to you.
18. Deletion and Portability
You may ask the studio to delete personal information that it no longer has a lawful reason to keep. We will do so promptly, except where a legal obligation or an active engagement requires us to keep a copy. When we must retain something, we will tell you what we are keeping and why.
If you would like a copy of your information in a portable format, ask us and we will provide the material in a readable file, such as a plain text document or a spreadsheet, wherever this is practical. We do not charge for a first request, and we do not make portability conditional on any other action.
19. Privacy for Children
The studio services are intended for businesses and professional organisations. This website is not directed at children, and the studio does not knowingly collect personal information from anyone under the age of sixteen. If a young person writes to the studio for a legitimate reason, we will answer courteously but will not keep their details beyond what the exchange requires.
If you believe that a child has sent personal information to the studio without appropriate consent, please contact us and we will remove the information promptly.
20. Marketing and Enquiries
The studio does not run a mass marketing list, and it does not send newsletters to people who have not asked to receive them. From time to time we may write to a client or a contact who has expressed interest in a Seasonal Mix window, but every such message includes a simple way to say no more.
If you ask us to stop sending a particular kind of message, we will record your preference and respect it. We do not treat an unsubscribe request as an opportunity to persuade you otherwise.
21. Third Party Links
This website may link to a small number of external resources, such as documentation that supports a technical discussion. Those websites are not operated by Bud Lafleur Inc. and this policy does not cover them. We choose links with care, but we cannot control the content or the privacy practices of another organisation.
When you follow a link away from this site, we encourage you to check the privacy notice of the destination before sharing personal information there.
22. Automated Decision Making
The studio does not use automated decision making that produces legal effects or similarly significant effects for any individual. Decisions about whether to take on an engagement, how to staff a project or how to prioritise work are made by people who consider the specific circumstances of each case.
The website uses a small amount of JavaScript to control the mobile menu and the reveal animation of page sections, but this code does not make decisions about individuals and does not process personal information.
23. Changes to This Policy
We review this policy at least once a year and whenever the studio changes its tools or processes in a way that affects personal information. When a change is material, we update the date at the top of the page and, where we hold an email address, we send a short note explaining what has changed.
Older versions of this policy are kept in the studio records so that we can show how our practice has developed over time. If you would like to see an earlier version, ask us and we will provide it.
24. Complaints and Concerns
If you are unhappy with the way the studio has handled your personal information, please tell us first. A plain description of what happened is enough, and we will investigate promptly, explain our findings and, where we were wrong, correct the problem.
If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada or the privacy authority in your own jurisdiction. We will cooperate fully with any such investigation.
25. How to Contact Us
For any question about this policy, write to styling@budlafleur.hair, call +19255594477 during business hours, or send a letter to Bud Lafleur Inc., 3900-1 place Ville-Marie, Montréal - H3B 4M7, Canada (CA). Please include enough detail for us to understand your question quickly.
The person responsible for privacy at the studio is the principal, who can be reached through the same channels. If you would prefer to speak to a specific member of the team, say so in your note and we will arrange it.
26. Governing Law
This policy is governed by the laws of Canada and of the province of Quebec, as they apply to a company based at 3900-1 place Ville-Marie, Montréal - H3B 4M7, Canada (CA). Where the law of your own jurisdiction provides stronger protection for your personal information, the studio will honour that stronger protection to the extent it applies.
Thank you for taking the time to read this policy. We would rather answer a question early than repair a misunderstanding later, so please write to the studio whenever something here is unclear.