Privacy policy · St-Zoutils

St-Zoutils protects your privacy in accordance with Québec’s Law 25 and Canada’s PIPEDA. This policy explains what we collect, why, who we share it with, and what your rights are.

1. Who we are

St-Zoutils, 110, avenue 69e, suite B1, Saint-Zotique, Québec J0P 1Z0
Telephone: 450 316-6038
Email: comptabilite@st-zoutils.com

Privacy officer (Law 25): Jonathan Provost, security@bunkers.co

2. What we collect

What you send us. When you submit a quote request or a message:

your name and, where applicable, your company name;
your telephone number and email address;
the branch you want, how you will take delivery, and the delivery address if applicable;
the list of tools requested, the dates, quantities and your notes.

What is recorded automatically. To limit abusive submissions we store, with each request, a cryptographic fingerprint of your IP address (SHA-256 with a secret salt). The fingerprint cannot be reversed to the address; it only lets us recognise repeated submissions.

We collect no payment data: the site processes no transactions.

3. What we do not do

This site uses no Google Ads, no Meta or Facebook pixel, no reCAPTCHA and no advertising or retargeting tool. No advertising profile is built, and no data is sold or traded.

We use Google Analytics to measure site traffic : only if you accept. See the next section.

4. Cookies and local storage

By default the public site sets no cookies. Language is determined by the page address (French at the root, English under /en) not by a cookie, and nothing is guessed from your browser.

Google Analytics does not load until you have answered the banner. This is not a setting that holds it back: the script is simply never inserted into the page, so no request is made to Google and no measurement cookie is written. If you refuse, it never loads, and the site works exactly the same.

Your answer is kept in your browser’s local storage, not in a cookie, so refusing sets nothing at all. You can change your mind at any time: the “Cookie settings” link at the bottom of every page reopens the choice.

Your draft request (“My request”) is kept in your browser’s local storage. It stays on your device, is never sent to us until you submit the request, and is cleared if you clear your browsing data.

A session cookie is used only for the administration area reserved for St-Zoutils staff. It does not concern site visitors.

5. Why we collect it

to answer your request and prepare a quote;
to reach you about that request;
to protect the form against automated submissions;
to meet our legal and accounting obligations.

We send no newsletter and do not use your contact details for solicitation without your separate consent.

The request form carries a mandatory checkbox: nothing is sent without an explicit action on your part.

For audience measurement, no implied consent is assumed: until you choose, nothing is measured. Refusing is as easy as accepting (the two buttons are identical and side by side) and you may withdraw your consent at any time through the “Cookie settings” link, or by writing to us.

7. Providers and hosting

We rely on a small number of providers, solely to run the site:

**Vercel**, hosting for the site and its forms (United States);
**Neon**, the database where requests are stored (United States, us-east-1);
**Resend**, delivery of request and acknowledgement emails (United States);
**Vercel Blob**, hosting for catalogue photographs (United States);
**Google Analytics**, traffic measurement, **only with your consent** (United States).

Each acts as a processor under its own confidentiality and security commitments. None is permitted to use your information for its own purposes.

8. Retention

quote requests and messages: 24 months;
IP fingerprint: kept with the request and deleted with it;
provider technical logs: kept for a short period for diagnostics and security.

9. Security

TLS encryption of all communications;
access-restricted cloud database with encrypted backups;
administration access limited to authorised staff;
IP addresses retained only as a fingerprint.

Despite these measures, no transmission over the internet is 100% secure.

10. Your rights under Law 25

You have the right:

to access the personal information we hold about you;
to request its correction if it is inaccurate;
to withdraw your consent;
to request its deletion, subject to our legal obligations;
to be informed of a confidentiality incident affecting you.

To exercise these rights, write to security@bunkers.co. We reply within the 30 days provided by law.

11. Transfers outside Québec

Our hosting, database and email providers are established in the United States, so your information is processed and stored there. We have assessed these transfers as offering adequate protection within the meaning of Law 25, given those providers’ contractual commitments and the nature of the information involved.

12. Changes to this policy

This policy may change to reflect a legal or operational development. The update date appears at the top of the page.

13. Contact us

Privacy officer · Jonathan Provost

Email: security@bunkers.co
Telephone: 450 316-6038
Address: 110, avenue 69e, suite B1, Saint-Zotique, Québec J0P 1Z0