In short
No account and no cookie. Audience measurement without cookies, as aggregated statistics. No advertising, no advertising tracker, no data sold. The listings in the Indian section present companies, never individuals.
Data controller
Grégory Payotte, publisher of Payotte (natural person), Mirabel (Quebec), Canada. Form: payotte.com/contact. Email: gregory@payotte.com.
What we process, why and for how long
| Processing | Data | Purpose | Retention |
|---|---|---|---|
| Website hosting | IP address, browser, page requested, date and time (server logs) | Serving the pages and keeping the site secure | At most 6 months |
| Audience measurement (Cloudflare Web Analytics) | Page viewed, referring page, type of browser and device, country; no cookie, no identifier stored on your device | Knowing which pages are read, in aggregated figures | Aggregated statistics, with no IP address or identifier |
| Counting visits coming from our emails | Only if the link carries an src parameter: that campaign code, and your IP address | Counting one visit per person per day for each mailing | IP address automatically erased after 2 days; afterwards, only totals per mailing, per hour and per day |
| Messages you send us (form or email) | Your address, your name if given, the content of the message | Replying to you and handling your request, including a request to exercise your rights | 3 years after the last exchange |
The listings link to third-party sites (firms, registers) whose practices are not covered by this policy.
Cookies and trackers
The site sets no cookie and uses no advertising tracker. Audience measurement works without cookies or any identifier stored on your device; this is why no consent banner is shown.
Recipients and processors
GoDaddy (site hosting), Cloudflare (audience measurement, server and storage for the visit count), Resend (sending the contact form messages) and Google (the Gmail inbox that receives them). No data is sold, rented or handed over.
Indian data protection law
Payotte is operated from Canada. The Digital Personal Data Protection Act, 2023 (DPDP Act) was enacted on 11 August 2023 and its Rules, the Digital Personal Data Protection Rules, 2025, were notified on 14 November 2025. According to a Government of India (Press Information Bureau) document of 17 November 2025, the Rules provide for an eighteen-month period of phased compliance; the provisions of the Act and the Rules therefore do not all apply from the same date, and the dates are those set by the Ministry of Electronics and Information Technology (MeitY) in its notifications (meity.gov.in). Section 3 of the Act, "Application of Act", defines the processing to which the Act applies, within India and, in the cases it lists, outside India. Whether and how the Act and the Rules apply to Payotte, and from which date, is a legal question that this page does not settle.
Where data is processed
Payotte is operated from Canada. GoDaddy and Cloudflare process data in the United States.
Your rights
You may ask for access to your data, its correction, its erasure, the restriction of processing, and object to processing based on Payotte's legitimate interests, by writing to gregory@payotte.com. We reply within one month at most. If you are not satisfied, you can first write to us again, and then refer the matter to the Data Protection Board of India, the authority established under the DPDP Act. According to the Press Information Bureau document mentioned above, the Board is a fully digital body, complaints can be filed online and tracked through a dedicated portal and mobile application, and its decisions can be appealed to the Telecom Disputes Settlement and Appellate Tribunal (TDSAT). We have not been able to confirm the address of that portal or the date from which the Board takes complaints: refer to MeitY (meity.gov.in) for the current procedure