Last updated · 2 August 2026

Privacy Policy

This website collects no personal information about you. No cookies, no analytics, no advertising, no third-party scripts. This page explains the little that does happen, and what you can require of us.

Draft: pending legal review. This document was written from how the site is actually built. It is not legal advice and has not been reviewed by a qualified lawyer. Text in [square brackets] still needs to be filled in.

Who is responsible

[QSnxt legal entity name], [street address], Montréal, Québec [postal code], Canada, publishes this website and decides how the limited information described below is handled. Under the GDPR we are the "controller". Under Québec's Law 25 and Canada's PIPEDA we are the organisation accountable for it.

Privacy questions and requests: privacy@qsnxt.com. Our designated Privacy Officer, as required by Law 25 and PIPEDA, is [name and title of the designated Privacy Officer], reachable at the same address.

Our representative in the European Union, designated under Article 27 of the GDPR: [EU representative (name and address, required under GDPR Art. 27)]. In the United Kingdom: [UK representative (name and address, if UK visitors are targeted)].

The short version

• This site sets no cookies.
• There is no analytics, no tracking pixel, no advertising and no social media embed.
• There are no forms. Nothing is submitted to us from these pages.
• No fonts, scripts, images or other files load from third-party servers, so no third party is told that you visited.
• We do not sell, share, rent or trade personal information, and never have.
• We do not profile you and we make no automated decisions about you.

What is stored on your device

One item, in your browser's local storage:

qsnxt-lang

The language you picked (en, fr, ja or zh). Written only at the moment you click a language in the header. It never leaves your browser and is never sent to any server. It has no expiry; you can delete it whenever you like.

This is not a cookie and it cannot identify you. Under the ePrivacy Directive and the GDPR, storage strictly necessary to provide something you explicitly asked for (here, the language you chose) does not require consent. That is why this site has no cookie banner: there is nothing to consent to.

Clear your site data at any time to remove it. Without it, the site simply falls back to your browser's preferred language.

If you have never chosen a language, the page at the root of this site reads the language preference your browser already advertises, in order to send you to the right version. That is a read of a setting, not a store, and nothing about it is recorded.

Server logs

Our web server writes one line per request so that we can keep the site running and secure. Each line holds the date and time, the file requested, the HTTP status code, the referring page and the browser user-agent string.

IP addresses are truncated before the line is written (the last octet of an IPv4 address and the last 80 bits of an IPv6 address are replaced with zeroes), so the logs cannot single you out. They are deleted after at most 30 days.

Legal basis under the GDPR: our legitimate interest in operating a secure and functioning website, Article 6(1)(f).

If you write to us

The addresses on this site are ordinary mailto: links that open your own email program. We receive only what you choose to send: your email address, whatever name you sign, and the contents of your message.

We use it to reply and, where it concerns an institution, to keep a record of the correspondence. Legal basis: steps taken at your request before entering into a contract, and our legitimate interest in answering enquiries, Article 6(1)(b) and (f). We keep it while the relationship with your institution is active, and for up to 24 months after the last exchange.

Email is not a secure channel. Please do not send student records, credentials or other sensitive information by email.

Where information is processed

The site is hosted by [hosting provider, and the country/region the servers are in]. Email reaches us through [email provider, and the country/region it operates in]. Where personal information leaves the EEA, the United Kingdom or Switzerland, the transfer relies on the European Commission's Standard Contractual Clauses together with any additional measures required after a transfer assessment. Ask us and we will send you a copy of the safeguards.

Your rights in the EEA, the UK and Switzerland

Under the GDPR and the UK GDPR you may ask us to:

• confirm whether we hold personal information about you, and give you a copy (access);
• correct anything inaccurate or incomplete (rectification);
• delete it (erasure);
• restrict how we use it, or object to our use of it where we rely on legitimate interest;
• send you, or another organisation, a machine-readable copy of what you gave us (portability);
• withdraw a consent you previously gave, without affecting what was done before.

Write to privacy@qsnxt.com. We reply within one month. You may also complain to your national supervisory authority: the EU list is at edpb.europa.eu, and in the UK it is ico.org.uk. You do not have to come to us first.

Your rights in California

In the twelve months before the date at the top of this page, the categories of personal information collected through this website were: internet or network activity, in the form of the truncated server logs described above; and (only if you emailed us) identifiers and the contents of your message. It is collected from you and from the request your browser makes, for the operational and communication purposes described above, and kept for the periods stated above.

We do not sell personal information, and we do not share it for cross-context behavioural advertising, as the CCPA defines those terms. We have not done so in the preceding twelve months, and we do not sell or share the personal information of anyone under 16. There is accordingly no "Do Not Sell or Share My Personal Information" link on this site. There is nothing to opt out of.

We do not collect sensitive personal information, so there is nothing for a "Limit the Use of My Sensitive Personal Information" request to limit. We do not use personal information for profiling or automated decision-making.

California residents may request to know, delete or correct their personal information, and may not be treated differently for asking. Send requests to privacy@qsnxt.com, or have an authorised agent do so. We verify a request by replying to the email address it came from; we may ask for more detail if we cannot match the request to any record.

This site honours the Global Privacy Control (GPC) browser signal. Because we neither sell nor share personal information, the signal changes nothing here, but it is respected in full.

Your rights in Canada and Québec

Under PIPEDA and Québec's Law 25 you may ask what personal information we hold about you, ask us to correct it, ask us to delete it, and withdraw a consent you gave earlier. Québec residents may also ask to receive the computerised personal information they provided to us in a structured, commonly used technological format.

Requests go to our Privacy Officer at privacy@qsnxt.com. We answer within 30 days.

Privacy by default, as Law 25 requires: this site's only user-facing setting is your choice of language, and nothing at all is stored until you actively make that choice.

If our answer does not satisfy you, you can complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca, or, in Québec, to the Commission d'accès à l'information at cai.gouv.qc.ca.

Children

This site addresses institutions and adult educators. It is not directed at children, and we do not knowingly collect personal information from anyone under 13, or under 16 in the EEA. If you believe a child has sent us something, write to us and we will delete it.

Breaches

If a confidentiality incident creates a risk of serious injury, we will notify the relevant authority and the people affected without undue delay, as required by the GDPR, Law 25 and PIPEDA, and we keep a register of such incidents.

Changes

If this policy changes, the date at the top changes with it. Anything material will be flagged on this page. Earlier versions are available on request.

This policy is published in English, French, Japanese and Chinese, with the same content in each.

← Back to the site