Privacy Policy

Last updated: 26 September 2026

Maple Open Tech (“we”, “us”) is a Canadian technology consultancy. This policy explains what personal information we collect through this website and in the course of our work, why we collect it, how long we keep it, and what you can require us to do with it.

It is written to meet the Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec’s Act respecting the protection of personal information in the private sector, as amended by Law 25.

Who is responsible

Under Law 25, one person must be accountable for the protection of personal information and must be identified publicly. For Maple Open Tech that is:

• Privacy Officer: Rodolfo Martinez, Principal
• Contact: our contact page
• Post: Maple Open Tech, Southwold, Ontario, Canada

Write to that address for any request or complaint described below. We answer within 30 days, which is the deadline both statutes set.

What we collect

When you visit this site. Our web server records the request: the page asked for, the time, the browser and operating system, the referring page, and a truncated IP address. This is ordinary server logging and we cannot switch it off without losing the ability to detect abuse.

When you agree to analytics. If you accept analytics in the cookie banner, our analytics provider records which pages you visit and roughly where you are (country or region, not street). Until you agree, no analytics script runs — it is present on the page but inert, and downloads nothing.

When you contact us. Your name, your email address, anything you choose to put in the message, and our replies.

When we work together. In the course of an engagement we may be given access to systems containing personal information belonging to your staff or your customers. We act as a service provider for that information: it remains yours, we use it only to do the work you have asked for, and we return or destroy it when the engagement ends.

We do not collect payment details through this website, and we do not buy personal information from anyone.

Why we collect it

• To answer your enquiry and to carry out work you have engaged us for.
• To keep this website working, and to detect and prevent abuse of it.
• To understand which pages are read, if — and only if — you consent.
• To meet legal and accounting obligations, including retaining invoices.

We do not use personal information for any purpose other than the one it was collected for, unless you consent or the law requires it.

Cookies and similar technologies

By default, this site sets no analytics or advertising cookies. Anything that would identify you, locate you or profile you is deactivated until you turn it on, which is what Law 25 requires.

The banner offers Accept all and Decline all with equal prominence, and a Choose option for deciding by category. Declining is not a second-class path: the site works identically either way. Your choice is stored in your browser, not on our servers, and you can change it at any time from the link in the footer.

Automated decision-making

We do not use personal information to make any decision about you by automated means, and we do not profile visitors.

Who else sees it

We share personal information only with service providers who need it to deliver something on our behalf, and only under contract. Where those providers operate outside Quebec or outside Canada, we assess the privacy protection the destination affords before transferring anything, as Law 25 requires.

Our current providers:

We do not sell personal information. We have never received a government or law enforcement demand for it; were we to receive one, we would disclose only what the law compelled and would notify you unless prohibited from doing so.

How long we keep it

• Server logs: 90 days, then deleted.
• Analytics: 26 months, or the shortest period the provider allows.
• Correspondence: for as long as the relationship is active, then two years.
• Client records and invoices: seven years, as tax law requires.
• Client systems and data: returned or destroyed when the engagement ends, and confirmed in writing.

How we protect it

Access is limited to the people who need it. Data at rest is encrypted, and so is data in transit. We keep an internal register of confidentiality incidents, as Law 25 requires, and if an incident presents a risk of serious injury we notify both the affected people and the Commission d’accès à l’information without delay.

Your rights

You may ask us to:

• Tell you what personal information we hold about you, and why.
• Correct anything inaccurate, incomplete or ambiguous.
• Delete information we no longer have a reason to keep.
• Withdraw consent you have given, at any time.
• Give you a copy in a structured, commonly used technology format, or send it directly to another organisation — the portability right that took effect in Quebec in September 2024.
• Stop disseminating information about you, or de-index it, where its distribution contravenes the law or a court order.

There is no charge, and we will not ask you why. If we refuse a request we will say so in writing, explain the reason and the provision we are relying on, and tell you how to challenge it.

If you are not satisfied

Write to our Privacy Officer first, at the address above. If our answer does not satisfy you, you may complain to:

• The Office of the Privacy Commissioner of Canada — priv.gc.ca (opens in a new tab)
• The Commission d’accès à l’information du Québec, if you are in Quebec — cai.gouv.qc.ca (opens in a new tab)

Children

This site is not directed at children, and we do not knowingly collect personal information from anyone under 14. If you believe we have, write to us and we will delete it.

Changes to this policy

We will post any change here and update the date at the top. Where a change materially affects how we handle information already collected, we will seek your consent again rather than rely on the old one.