Last updated: September 25, 2026

OrionFlow (“OrionFlow,” “we,” “us”) operates the website orionflow.ca. This policy explains what personal information we collect when you visit our website or contact us, why we collect it, how we protect it, and what your rights are.

It applies to the orionflow.ca website only. Our clients’ use of the OrionFlow platform is governed by separate agreements.

We handle personal information in accordance with Québec’s Act respecting the protection of personal information in the private sector and, where applicable, Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).

1. Person in charge of the protection of personal information

The person in charge of the protection of personal information at OrionFlow is:

You may contact this person with any questions about this policy, to exercise your rights, or to file a complaint.

2. Information we collect

Information you provide

When you request a demo or write to us, we collect the information you enter, including:

• your first and last name;
• your email address and phone number;
• your organization’s name and your job title;
• the content of your message.

Information collected automatically

When you browse the website, certain technical information is collected:

• your IP address, used for website security and to detect malicious activity;
• your cookie consent choices and your language preference;
• if you consent, statistical browsing data (pages viewed, visit duration, device and browser type, approximate location). See section 5.

3. Why we use your information

We use your information only for the following purposes:

• to respond to your requests and arrange a demo of the platform;
• to ensure the operation and security of the website and protect it against attacks and abuse;
• to remember your preferences (language, cookie choices);
• with your consent, to measure website usage in order to improve it.

We do not sell your personal information, and we do not use it for any other purpose without your consent, unless permitted or required by law.

4. Consent

By submitting your information through a form, you consent to its use for the purpose of processing your request.

Non-essential cookies, such as analytics cookies, are disabled by default. They are enabled only if you accept them in the consent banner. You may withdraw your consent at any time (see section 5).

5. Cookies

A cookie is a small file stored in your browser. We use the following cookies:

You can change your choices at any time using the cookie settings button displayed on the website. You can also block or delete cookies in your browser settings. However, blocking necessary cookies may affect how the website works.

The website’s fonts are hosted on our own servers. Displaying them does not send any information to third parties.

6. Sharing with third parties

We share personal information only with service providers that help us operate the website, and only to the extent necessary:

• Hosting: Riopel Consultant, which hosts the website and its data in Québec, Canada;
• Email delivery: SMTP2GO, which delivers emails generated by the website;
• Security: Automattic (Jetpack Protect), which analyzes IP addresses to block intrusion attempts;
• Consent management: CookieYes, which records your cookie choices;
• Analytics (with consent): Google, through Google Analytics.

These providers are contractually required to protect your information and to use it only for the services they provide to us.

7. Transfers outside Québec

Some of our service providers, including Google and Automattic, may process or store information outside Québec, including in the United States. Before any such transfer, we assess whether the information will receive adequate protection, as required by law. Information transferred in this way may be subject to the laws of the country where it is located.

8. Security

We take reasonable security measures to protect your information against loss, theft, and unauthorized access, including encrypted communications (HTTPS), restricted administrative access, monitoring of intrusion attempts, and regular backups.

In the event of a confidentiality incident presenting a risk of serious injury, we will notify the Commission d’accès à l’information and the individuals concerned, as required by law.

9. Your rights

Subject to the exceptions provided by law, you have the right:

• to access the personal information we hold about you;
• to have inaccurate, incomplete, or ambiguous information corrected;
• to withdraw your consent to its use;
• to request that your information be provided to you, or to a third party, in a structured, commonly used technological format;
• to request that we stop disseminating your information or de-index any hyperlink attached to your name, under the conditions provided by law;
• to be informed when your information is used to make a decision based exclusively on automated processing, if applicable.

To exercise these rights, write to the person in charge identified in section 1. We will respond within 30 days. We may need to verify your identity before processing your request.

10. Complaints

If you believe your information has not been handled in accordance with this policy or the law, please contact us first (section 1). We will review your complaint and respond in writing.

If you are not satisfied with our response, you may contact the Commission d’accès à l’information du Québec.

11. Changes

We may update this policy to reflect changes in our practices or in the law. The current version is always published on this page, along with its last updated date. If we make significant changes, we will clearly indicate them on the website.