Privacy, plainly stated.

01Who we are

This website, Nestorsuite.com, is operated by Nestor Suite Inc., 10590 boul. Perras, Montreal, Quebec H1C 2H7, Canada. When this policy says “we”, “us”, or “our”, it means Nestor Suite Inc.

We are based in Quebec, so this policy follows Quebec's Act respecting the protection of personal information in the private sector as modernized by Law 25 (formerly Bill 25). Quebec law governs this policy.

Our privacy officer — the person accountable for the information on this page — is Anita Colarossi, reachable at hello@nestorsuite.com.

02What personal data we collect

There are three forms on this site, and each one asks for a specific, short list of things:

• Free compliance scan (home page) — your website address, your name, your email address, and anything you choose to tell us in the message box.
• Contact enquiry (contact page) — your full name, your restaurant or business name, your email address, your phone number (optional), which services you're interested in, and your message.
• Product walkthrough request (SaaS products page) — your name, your email address, which products you'd like to see, and your message.

Alongside a submission we record the page you sent it from and the date and time, so we know what you were looking at when you wrote to us.

We also collect:

• Correspondence — the emails and calls you send us, and our replies.
• Standard server logs — the technical record every web server keeps (IP address, browser type, pages requested, timestamps), used to keep the site running and secure.

We do not ask for, and please do not send us, sensitive information such as health details, government ID numbers, or payment card numbers through these forms.

03Why we collect each piece

• Your name — so we can address you properly in our reply.
• Your email address — so we can answer your enquiry. This is the only channel we use unless you give us a phone number.
• Your phone number — only if you provide it, and only to call or text you back about your enquiry.
• Your business name and website address — so we can look at your current site and give you a useful, specific answer instead of a generic one.
• The services or products you tick — so the right person on our team picks up your enquiry.
• Your message — so we understand what you actually need.
• Page, date and time of submission — so we can find your enquiry again and follow up on it.
• Server logs and spam-protection signals — to keep the site available, block automated abuse of the forms, and investigate security incidents.

We do not use any of this for advertising, for building a profile of you, or for any purpose other than the ones listed here. We only send you marketing emails if you specifically ask for them, and every one has an unsubscribe link.

04Our legal basis

Under Quebec law we need a valid reason to hold your information. Ours are:

• Your consent. Filling in a form and pressing send is you choosing to give us your details for the purpose described next to that form. You can withdraw that consent at any time (see section 09).
• Performing a contract. If you become a client, we need your contact and billing details to deliver the services you've asked for.
• A legal obligation. Tax, accounting and corporate law require us to keep certain records for a set number of years.
• Keeping the site secure. Server logs and form spam protection are necessary to operate this website safely — a purpose Quebec law recognizes as legitimate and which we keep as narrow as possible.

05How long we keep it

• Form submissions (everything you send through the three forms above, including our record of the page and time) — 365 days from the day you send it, then deleted.
• Contracts, invoices and payment records, if you become a client — 7 years, because tax and accounting law requires it.
• Website measurement data, if and when we switch analytics on — 14 months maximum.
• Email correspondence — kept as long as needed to handle your matter, and deleted with the rest of the file unless a record has to be kept for one of the reasons above.
• Server logs — kept for a short operational window and then rotated out automatically.

When a retention period ends, the information is deleted or anonymized. If you ask us to delete something sooner, we will — unless the law requires us to keep it, in which case we'll tell you which record and why.

06Who we share it with

We do not sell, rent, or trade your personal information. We share it only with the service providers who make this website work, and only as far as each one needs to do its job for us:

• Nestor Logic — our website platform. It hosts this site, receives your form submissions, stores them, and emails them to us. Role: hosting and processing on our behalf, under contract.
• Cloudflare, Inc. — form spam protection (Cloudflare Turnstile). When you submit a form, this service checks that you're a person rather than a bot. It sees your IP address and basic browser signals; it does not see what you typed. Cloudflare is a United States company operating a worldwide network of servers.

Each of these providers is bound by a written agreement to use your information only for the purpose we've given them, to protect it, and to hand it back or delete it when we ask. We may also disclose information if a law, a court order, or a regulator requires it — and we will tell you if we're permitted to.

07Where your data is processed

We are a Quebec business and we keep your information inside Canada wherever we can. We cannot promise it never leaves the province: the spam-protection check described in section 06 runs on Cloudflare's global network, so a form submission may be verified on a server outside Quebec, including in the United States. Information held outside Canada can, in principle, be accessed by the authorities of the country it sits in.

Before entrusting personal information to a provider outside Quebec, Law 25 requires us to assess whether it will receive adequate protection there. We carry out that assessment, we require the protection in writing, and we keep the amount of information that crosses a border to the minimum needed. If you'd like to know where a specific piece of your information is held, email our privacy officer and we'll tell you.

08Cookies and tracking

This site is deliberately light on cookies. As of the date at the top of this page:

• Strictly necessary only. The only storage this site uses is what it needs to function and to stay secure — including a short-lived token set by the Cloudflare spam-protection check when you use a form. These cannot be switched off without breaking the site, so no consent is required for them.
• No advertising or profiling cookies. We don't run ad pixels, we don't share your browsing with ad networks, and we don't follow you to other websites.
• No analytics running today. No measurement tool is configured on this site, so nothing analytics-related loads. The category still appears in the consent banner, so your choice is already on record if we ever switch one on.

A consent banner appears on your first visit, with a toggle for each category this site actually has — Essential (always on) and Analytics. There is no advertising or marketing category. Accepting everything, refusing everything, and saving your own selection are all a single click, and nothing in a non-essential category loads until you allow it. You can reopen your choices at any time from the Cookie preferences button on the page; we remember your decision for 180 days and then ask again.

You can also block or delete cookies in your browser settings. The site will still work, though some things may behave differently.

09Your rights

Quebec law gives you real, enforceable rights over your information. You can ask us to:

• Access it — tell you whether we hold personal information about you, and give you a copy of it.
• Correct it — fix anything inaccurate, incomplete, or out of date.
• Delete it — remove it, where we're not legally required to keep it.
• Port it — give you the computerized information you provided to us in a structured, commonly used technical format, or send it directly to someone else you name.
• Withdraw your consent — stop us using it going forward, including unsubscribing from any email you asked for.

To exercise any of these, email our privacy officer at hello@nestorsuite.com or write to Nestor Suite Inc., 10590 boul. Perras, Montreal, Quebec H1C 2H7. We may need to confirm your identity first, so that we don't hand your information to somebody else.

We will respond within 30 days of receiving your request, as Law 25 requires. There is no charge for a reasonable request. If we refuse, we'll tell you why in writing, point to the provision we're relying on, and explain how to challenge our decision.

10Children and young people

This site and our services are aimed at businesses and adults. We do not knowingly collect personal information from anyone under 14, and we don't market to children. If a child under 14 has sent us information, contact our privacy officer and we'll delete it. Where the law requires a parent's or guardian's consent for someone under 14, we will not proceed without it.

11No automated decisions, no profiling

We do not make decisions about you using automated processing alone, and we do not build profiles of you or track your behaviour to predict things about you. Every enquiry that arrives through this site is read by a person. If that ever changes, we will say so here first and tell you how to ask for a human review.

12If there's a data breach

We keep your information protected with access controls, encryption in transit, and providers who are contractually held to the same standard. If a confidentiality incident happens anyway and it presents a risk of serious injury to you, we will:

• notify the Commission d'accès à l'information du Québec (CAI) within 72 hours of confirming the breach;
• notify you promptly, with what happened, what information was involved, and what to do about it;
• take reasonable steps to reduce the harm and stop it recurring; and
• record the incident in the register of confidentiality incidents that Law 25 requires us to keep.

13How to complain

Start with us — email hello@nestorsuite.com and our privacy officer will look into it personally. Most things are a misunderstanding we can sort out in a day.

If you're not satisfied with how we've handled your request or your complaint, you have the right to take it to Quebec's privacy regulator, the Commission d'accès à l'information du Québec, which can investigate and order us to act. You can reach the CAI at cai.gouv.qc.ca. Going to us first is not a condition of going to them.

14Changes to this policy

If we change how we handle your information, we'll update this page and the date below. Significant changes will be flagged clearly here rather than buried, and we won't start a new use of your information without the consent that use requires.

Last updated · August 19, 2026