In short
No account and no cookie. Audience measurement without cookies, as aggregated statistics. No advertising, no advertising tracker, no data sold. The listings in the Australian section present companies, never individuals.
Data controller
Grégory Payotte, publisher of Payotte (natural person), Mirabel (Quebec), Canada. Form: payotte.com/contact. Email: gregory@payotte.com.
What we process, why and for how long
| Processing | Data | Purpose | Retention |
|---|---|---|---|
| Website hosting | IP address, browser, page requested, date and time (server logs) | Serving the pages and keeping the site secure | At most 6 months |
| Audience measurement (Cloudflare Web Analytics) | Page viewed, referring page, type of browser and device, country; no cookie, no identifier stored on your device | Knowing which pages are read, in aggregated figures | Aggregated statistics, with no IP address or identifier |
| Counting visits coming from our emails | Only if the link carries an src parameter: that campaign code, and your IP address | Counting one visit per person per day for each mailing | IP address automatically erased after 2 days; afterwards, only totals per mailing, per hour and per day |
| Messages you send us (form or email) | Your address, your name if given, the content of the message | Replying to you and handling your request, including a request to exercise your rights | 3 years after the last exchange |
The listings link to third-party sites (firms, registers) whose practices are not covered by this policy.
Cookies and trackers
The site sets no cookie and uses no advertising tracker. Audience measurement works without cookies or any identifier stored on your device; this is why no consent banner is shown.
Recipients and processors
GoDaddy (site hosting), Cloudflare (audience measurement, server and storage for the visit count), Resend (sending the contact form messages) and Google (the Gmail inbox that receives them). No data is sold, rented or handed over.
Australian privacy law
Payotte is operated from Canada. According to the Office of the Australian Information Commissioner (OAIC), the Australian Privacy Principles (APPs) of the Privacy Act 1988 (Cth) extend to an act done or a practice engaged in outside Australia by an organisation that has an "Australian link", and an organisation that is not incorporated or based in Australia has an Australian link where it carries on business in Australia (section 5B). The OAIC also states that a small business, one with an annual turnover of $3 million or less, is not generally covered by the Act, with exceptions (for example a business trading in personal information, or a health service provider). Whether and how these rules apply to Payotte is a legal question that this page does not settle.
Transfers outside Australia
Payotte is operated from Canada. GoDaddy and Cloudflare process data in the United States. According to the OAIC, APP 8 requires an organisation, before it discloses personal information to an overseas recipient, to take such steps as are reasonable in the circumstances to ensure that the recipient does not breach the APPs, subject to exceptions (for example where the individual consents after being expressly informed, or where the recipient is bound by a law or scheme substantially similar to the APPs).
Your rights
You may ask for access to your data, its correction, its erasure, the restriction of processing, and object to processing based on Payotte's legitimate interests, by writing to gregory@payotte.com. We reply within one month at most. If you are not satisfied, the OAIC's guidance is to complain to the organisation first, and then you can complain in writing to the Office of the Australian Information Commissioner (OAIC), the Australian privacy regulator (telephone 1300 363 992, Monday to Thursday, 10 am to 4 pm AEST/AEDT; postal address GPO Box 5288, Sydney NSW 2001; oaic.gov.au/privacy/privacy-complaints).