Privacy Policy

1Who this policy is from

This policy is issued by Abdessamad Tirhzaoui, carrying on business as Lanalyste, a sole proprietorship registered in Québec, Canada (NEQ 2280937873), referred to below as “we”, “us” and “Lanalyste”.

Business address:
1308-1180 Rue de Bleury
Montréal, Québec H3B 0H2
Canada
Telephone: 579-366-2566
Email: contact@lanalyste.ca

Lanalyste’s operator, named above, is responsible for the protection of personal information. Questions about this policy or your information can be sent to contact@lanalyste.ca.

2What this policy covers

This policy applies to the Lanalyste marketing website at lanalyste.ca and to the Lanalyste exam simulator, which runs as a separate application at simulator.lanalyste.ca.

It does not apply to websites operated by other organisations that we link to, including certification bodies. Those sites have their own policies, and we do not control what they collect.

One policy governs both. The simulator does not publish a separate privacy policy: its privacy, terms and payment-policy pages lead here, so the commitments in this document apply to everything Lanalyste operates. Where the two differ in what they collect — the simulator holds an account and a practice record, the marketing site holds neither — this policy says so explicitly rather than describing them as one system.

3Information we collect

4Why we use it

• To answer messages you send us.
• To provide the exam simulator, including your account, your practice history and the performance measurement built on it.
• To take payment for paid access, where applicable, and to keep the records that tax and accounting rules require.
• To keep the service working and secure — diagnosing faults, preventing abuse, and protecting accounts.
• To communicate about the service itself, such as changes that affect your account or access.
• Essential account and service messages include account confirmation, password resets, purchase confirmations, scheduled-charge notices, security notices and replies to your requests. Separately, you can opt in to product updates, special offers and news about new certifications in your account’s communication preferences. Optional marketing emails require your consent and include an unsubscribe link. You can change those preferences without losing purchased access. Study reminders and weekly summaries have separate controls in your study settings.

5Our basis for using it

We rely on your consent, and on the necessity of processing to provide a service you have asked for. Lanalyste operates from Quebec, so Quebec's private-sector privacy law applies to us, together with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) where it applies to our activities. We describe what we do here so you can judge it; we make no claim to hold any privacy certification or seal.

Where consent is the basis, you may withdraw it at any time, subject to legal or contractual limits and to reasonable notice. Withdrawing consent may mean we can no longer provide part of the service.

6Who we share it with

We do not sell personal information, and we do not share it for anyone else's advertising.

We share information as necessary with service providers for hosting, data storage, authentication, email, audience measurement, payment processing and abuse prevention. Full card details are handled by the payment processor; we do not receive or store them.

These providers process information for us under their applicable service and data-protection terms. Some also determine their own purposes for certain data, such as service-account administration, fraud prevention, legal obligations or security improvements. Their own privacy notices govern those separate uses. Provider involvement does not remove our responsibility for the information we entrust to them.

We may also disclose information where the law requires it, where it is necessary to protect our rights or the safety of others, or in connection with a sale or reorganisation of the business, in which case this policy continues to govern the information transferred.

7Where it is stored

Lanalyste operates from Quebec. Our service providers may store or process information outside Quebec and Canada, including in the United States, where local laws and lawful access by authorities may apply.

For questions about where your information is processed or the service providers involved, contact contact@lanalyste.ca.

8How long we keep it

We keep personal information only as long as it is needed for the purposes described here, or as long as the law requires.

• Account and practice history: kept in the active service while the account is open; restricted archives after deletion are described below.
• Unconfirmed accounts that have never had a plan: after 12 days, we may send an email and an in-app notice giving at least 48 hours before automatic deletion. Confirming the email address or purchasing a plan before deletion prevents it. Accounts with past plans or protected billing records are excluded. After deletion, you may create a new account with the same email address whenever you want; deleted activity is not restored. The email address needed to send the deletion notice is retained for up to 30 days for delivery and retries.
• Support and contact correspondence: up to 24 months after the matter is resolved, unless a dispute or a legal obligation requires us to keep it longer.
• Closed accounts: personal data, including restricted archive copies, is deleted or anonymised within 90 days of closure, except information still necessary for an applicable legal or tax obligation, fraud prevention, security or an unresolved dispute.
• Operational and security logs: normally up to 90 days, longer only if a security incident requires it.
• Financial, invoice, payment and tax records: six years, or longer where the law requires.
• Backups: cleared through the ordinary backup lifecycle, normally within 90 days.
• Confidentiality incident register: at least five years after we become aware of an incident, as Quebec law requires.

Deleting an account removes access to the simulator but does not necessarily erase every record immediately. A separate, access-restricted archive may retain contact details, email-change history, Demo and practice activity, assessment results and profile information solely to provide the former account owner with a copy on request, after verification of their identity. To request a copy, contact contact@lanalyste.ca. Archived data is not used for marketing, automated emails or practice recommendations, and is not restored when you register again. These archives remain subject to the retention limits above; the six-year rule for financial records does not automatically apply to all account data.

9Your rights

Subject to the law that applies to you, you may ask us to give you access to the personal information we hold about you, correct it if it is wrong, delete it, or stop using it in a particular way. You may also withdraw consent where consent is the basis for our use.

To make a request, write to contact@lanalyste.ca. We will respond within the period the applicable law sets, and we may need to verify your identity first — that check exists to stop someone else obtaining or deleting your information. If you are not satisfied with our response, you may complain to the Commission d’accès à l’information du Québec, or to the Office of the Privacy Commissioner of Canada where PIPEDA applies.

Deletion requests also cover information held in restricted archives. We assess each request under applicable law. Information required by a legal obligation, or still necessary for a documented security, fraud-prevention or dispute purpose, may be retained under the limits above. We explain any applicable restriction when responding to your request; archiving alone does not make information exempt from deletion.

10Security

We take reasonable technical and organisational measures to protect personal information against loss, theft and unauthorised access, including encryption in transit and access controls on the systems that hold it. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Lanalyste is operated by one person, and that person is currently the individual responsible for the protection of personal information and for handling any confidentiality incident. They can be reached at contact@lanalyste.ca.

We keep a register of confidentiality incidents. Where an incident presents a risk of serious injury, we will notify the Commission d’accès à l’information du Québec and the individuals concerned without delay, as applicable law requires, and take reasonable measures to reduce the risk of harm and prevent a recurrence.

We do not claim a security certification. Information travels over encrypted connections and access is restricted. The contact form does not create a website database record, but the message is processed by the email delivery service and retained in our correspondence under the limits above.

11Children

The service is intended for working professionals and is not directed at children. It is for adults: we do not knowingly collect personal information from anyone under 18, and accounts are for people aged 18 or over. If you believe a child has given us personal information, write to us and we will delete it.

12Changes to this policy

We may update this policy as the service changes. The date at the top shows when it was last revised. If a change materially affects how we handle your personal information, we will give notice through the service or by email before it takes effect.

13Contact

Write to contact@lanalyste.ca, or by post to 1308-1180 Rue de Bleury, Montréal, Québec H3B 0H2, Canada. The contact form on this website reaches the same mailbox, and the contact page states whether online messages are currently being delivered.