Privacy Policy

Effective and last updated: September 9, 2026

This policy explains how VisiblAir handles personal information through this ecommerce storefront. The Cloud Portal and connected devices may involve additional processing described in their service documentation.

1. Accountability

VisiblAir is responsible for personal information under its control. Andre Couchesne, founder, inventor, and owner of VisiblAir, is the Person in charge of the protection of personal information. Send him questions, complaints, and requests at info@visiblair.com. Write “Privacy request” in the subject and do not email identity documents unless requested through an appropriate channel.

2. Information, sources, and purposes

• Orders and checkout: contact, billing, shipping, product, order, and transaction information supplied through the Snipcart checkout by you and the payment and delivery providers shown there. VisiblAir and those providers use it to process payment, deliver orders, prevent misuse, provide support, and meet accounting, tax, and legal duties. These providers may process information outside Québec.
• Newsletter and product notifications: first name, last name, email, language, requested list, and consent evidence to send requested communications and manage unsubscribe requests.
• Reviews: name, email, optional order number, product, score, review text, and publication choice to verify, moderate, and—with permission—publish a review. Verification details are not intended for publication.
• Multi-unit quote requests: name, work email, organization, country or region, deployment type, approximate quantity, connectivity, timeframe, product interest, optional notes, and automatically retained source/campaign context. The quote page prepares this information in your chosen email application; the storefront does not send or store the form itself. If you send the email, VisiblAir and its email providers use it to assess and answer the request.
• Contact and chat: when you send email or enable and use chat, VisiblAir and the applicable email or chat providers receive your contact details, message contents, headers, and technical records to answer questions and provide support. Avoid including unnecessary personal information. Providers may process information outside Québec.
• Site operation: server/security logs and request data such as IP address, browser/device, pages, timestamps, and errors to deliver and protect the site.
• Optional audience measurement: with your choice, Google Analytics processes online identifiers and page, product-selection, lead-intent, cart, checkout, and purchase events, with path-only landing page, language, product, general use-case, and broad quote-country context. We do not intentionally send URL query strings, names, email or postal addresses, organization names, form values, or message/review text in those events.

Required fields are identified at collection. Without required order information, checkout and delivery cannot be completed. Refusing newsletter, review publication, analytics, or chat does not prevent browsing or necessary checkout.

3. Cookies, storage, and choices

The storefront stores a small first-party preference record containing the policy version, selected categories, and update time. Snipcart may use storage necessary for the cart after you ask to use it. Google Analytics, Tawk.to, and embedded YouTube videos remain disabled until you opt in to their category. Common styles, icons, scripts, article images, and video preview images are served locally so opening a page does not contact their original CDN or image host.

Selecting Open chat (Tawk.to) directly activates only the chat category and records that choice; it does not activate analytics or external videos. The chat button is the means used to activate Tawk.to so you can request support.

Use the persistent Privacy choices control to accept, reject, change, or withdraw optional choices. Withdrawal stops future optional loading after refresh and removes first-party analytics identifiers where technically possible. You may ask us to coordinate a provider-side withdrawal or deletion request.

4. Service providers and transfers

We disclose information only as needed for these purposes, with consent where required, or where law permits or requires it. Recipients may include hosting/storefront providers, Snipcart, payment processors, carriers, the newsletter/review API and email providers, Tawk.to when chat is enabled, Google when analytics is enabled, support providers, professional advisers, and public authorities.

Some providers or subprocessors may store or access information outside Québec or Canada, where foreign laws apply. VisiblAir must assess relevant transfers and contractual protections before use; this policy does not claim Québec-only storage.

5. Consent

Where consent is required, we seek it for a stated purpose and allow withdrawal, subject to legal or contractual restrictions and reasonable notice. Newsletter consent and review-publication permission are optional and separate from verification. Unsubscribe using a message’s link or contact the privacy lead. Continued browsing is not consent to analytics or chat.

We do not knowingly use storefront information for a decision based exclusively on automated processing that has legal or similarly significant effects.

6. Retention and safeguards

Access is limited to people and providers who need information for their duties. We use administrative, technical, and physical safeguards appropriate to the information and context, including access controls, transport protection, provider review, and incident handling. No system is completely secure.

Information is retained only for its purpose and legal requirements, then securely destroyed or anonymized. Periods depend on the record: order and tax records may have statutory periods; consent evidence is kept while needed to demonstrate a choice; support, chat, review verification, analytics, logs, and backups follow the approved retention schedule. Contact us for the period applicable to a particular record.

7. Your rights

Subject to law, you may request access, correction, withdrawal of consent, deletion where applicable, or cessation of dissemination or de-indexing where legal conditions are met. You may request computerized personal information collected from you in a structured, commonly used technological format and its permitted communication.

Describe your request and service to the privacy lead. We may verify identity proportionately before disclosing or changing a record and will explain a refusal and recourse. An unresolved concern may be submitted to the Commission d’accès à l’information du Québec.

8. Governance and complaints

Our privacy governance program assigns responsibility for personal information, limits personnel access by role and need, provides confidentiality and privacy training, maintains an inventory of personal-information activities, and requires periodic access and practice reviews. New or materially changed systems involving personal information are assessed before implementation, including an assessment and written protections where information may be communicated outside Québec.

We review providers and written terms for permitted use, safeguards, incident notice, subprocessors, retention and deletion, assistance with individual requests, and return or destruction at termination. Our retention schedule assigns owners and destruction rules to each record category. Our complaint and rights-request process records intake, proportionate identity verification, searches, decisions, responses, provider coordination, and available recourse.

Suspected confidentiality incidents are escalated, contained, assessed for risk of serious injury, mitigated, and notified to the Commission and affected people where required. We keep the required confidentiality-incident register for at least five years. Governance policies, assessments, provider reviews, access reviews, training, request exercises, retention operation, and incident records are reviewed by the privacy lead and retained in restricted internal systems rather than published with sensitive operational detail.

9. Children, changes, and language

The storefront has no general age restriction and does not request or verify a visitor’s age. Contact the privacy lead if you have a concern about personal information supplied by a person under 14.

We review this policy regularly and when practices change, post its effective date, and give appropriate notice of material changes. It is available in English and French; the French version governs in Québec if they differ.