What we know about you.

01Who answers for your information

NIVEX is an at-home ironing service operated by Styve, in Longueuil, Quebec, registered with the Quebec enterprise registrar under number 2282362666. Styve is the person in charge of the protection of personal information within the meaning of Quebec law, and the only person with access to what this site collects.

For a question, an access request or a complaint, write to contact@nivexrepassage.ca or call +1 450 943 1217.

02What we collect

What you hand us yourself, at the moment you hand it over, and a few technical measurements, each described below. This site follows no one around and buys data from no one.

• Booking — your name, your email, your phone number, the address of the session (street, city, postal code), the session and any single pieces you chose, the time slot you kept, and the notes you write yourself.
• Subscription — the same details as a booking, plus the plan you chose, the day and time of your visits, the visits completed and the cycles paid.
• Contact form — your name, your email, your phone number if you give it, the subject and the body of your message.
• Technical log — the nature and time of the site's operations: a booking created, an email sent, an error raised. No IP address, no browser identifier, no device fingerprint.
• Audience measurement — the number of page views, which page was viewed, the site you arrived from, your country and your device type. This data is aggregated: it says how many people came by, never which ones. No cookie is set and no identifier follows you from one visit to the next.
• Visit log — for each page displayed: the date and time, the page and its language, the site or campaign you arrived from at the start of your visit, with the referring address as your browser sends it, the first name in the referral link if you followed one, the device type, and the approximate city, with its region and country, that our host infers from the network. Your IP address is never written down: it serves to infer the city, then it is forgotten along with the request. To set robots aside, the server also looks at the name your browser gives itself, whether it is driven by a program, and the time zone of its clock; it keeps none of it, except the mention “robot” when it is one. No identifier ties two entries together — two of your visits appear there as two strangers. Pages in the craftsman's own area are never counted, nor are the personal “Manage my booking” and “Manage my visits” links, nor the craftsman's own visits. When you start the introduction video, the log notes that too: the date and time, the page and the device type, nothing more, with the same exclusions.
• Where a booking came from — on your first visit, your browser keeps to itself the campaign tag of the link you followed, the first name in a referral link, the site you came from, the page you landed on, the date of that first visit, and the number of times you came back. This stays in your browser and leaves it only if you book: it then travels with your booking, so that we know which means made the house known to you. If you do not book, we know none of it, and clearing your browser data erases it.
• How you heard about us — the answer you give, if you wish to, to the optional question in the booking form, and the name of the person who recommended us if you choose to write it. A visit at your door or a card handed to you in person leaves no technical trace: that answer is the only way to know. It is suggested in advance when you arrive through a referral link or a card's code, and you remain free to change or clear it.

03What it is for

Every piece of information answers to a reason. When the reason goes, the information goes with it.

• Your address is how we come to you, and how we check that you are inside the service area.
• Your email and phone number are how we confirm, warn you of a delay, answer you, and remind you of each visit the day before. The day after your first session, your email may also receive, once only, a thank-you note inviting you to leave a review on Google; replying to it is enough to receive no more of this kind. If your number is Canadian, it also receives, by text message, the confirmation, the reminder the day before, a note two hours before the artisan arrives and any change to an appointment; reply STOP to any of those texts to receive no more. Every reply, STOP included, is passed on as text to the artisan's mobile phone; the site does not keep it.
• The session and any single pieces you chose are how we book the right time slot and pack the right equipment.
• Your notes are how we avoid ruining a fragile piece, and how we get into your building.
• The appointment book is how the business keeps its accounts and how a past session can be traced if it is ever disputed.
• The visit log and the booking's origin serve to know which way of making ourselves known works — a card handed out in a neighbourhood, a recommendation, a post, a search — so that nothing is spent at random. They are never used to solicit you, to contact you again, or to sort you.

04What we do not do

• We sell, rent and trade nothing, to no one, at no price.
• We run no targeted advertising, and this site hosts no advertising tracker.
• We build no profile of you and make no automated decision about you.
• We collect no banking information: payment happens on site, never on the site.

05Who else has access

Five providers, each for one precise task, and none of them may use any of it for their own ends.

• Vercel — hosts the site, serves it to your browser, and counts its traffic in aggregate.
• Neon — the database where bookings and messages live.
• Google — your artisan's calendar, where your appointment is written down with your name, your address and your contact details, and Gmail, from which your confirmation and invitation are sent.
• Twilio — carries the text messages you receive (confirmation, reminder, two-hour note, cancellation or change of appointment) and the notices sent to the artisan, which carry your name, the date of the appointment and, depending on the case, the city or the plan. The two-hour note is handed to it in advance, and goes out at the set time. It also passes the text of your replies on to the artisan; any photos you attach stay with Twilio, where the artisan views them. Twilio keeps a copy of the messages it carries.
• ImprovMX — forwards the emails you write to our domain address to your artisan's inbox.

06Outside Quebec

The site, the database, the Google services and Twilio are hosted in the United States, and ImprovMX forwards emails from abroad. Your information therefore leaves Quebec to be kept there, and is subject to the law of the host country — which may, in certain cases, allow its authorities to reach it.

We chose providers contractually bound to protection comparable to what is required here, and we entrust them with nothing beyond what is necessary. By booking or writing to us through the site, you consent to this communication outside Quebec. If that troubles you, call us and we will arrange the appointment by voice.

07How long we keep it

• A booking and everything attached to it: three years after the session. That is the civil limitation period in Quebec — the window during which a session can still be disputed, either way. It is then anonymised: your name, phone number, address and notes are erased; the date, duration, services, amount and zone remain, for the accounts. Of your email only a scrambled fingerprint remains, which cannot be read back and serves only to avoid offering the first hour twice.
• A subscription: three years after its last visit, for the same reason, after which it is anonymised the same way.
• A message from the contact form: two years, after which it is deleted of its own accord, or sooner if you ask us to delete it.
• Copies: the event for an appointment in our calendar is deleted when the appointment is anonymised. The emails exchanged with you — confirmations, reminders, the copy of your messages — stay in our mailbox; we delete them on the same schedule, or sooner if you ask.
• The technical log: twelve months, after which its entries are deleted of their own accord.
• The visit log: twelve months, after which entries are deleted of their own accord.
• The origin attached to a booking: it follows the fate of that booking. An anonymised booking keeps only its family — the campaign label, your answer to “How did you hear about NIVEX?”, the first name in a referral link and the name of the site you came from —, enough to count sources without pointing to anyone.

08How it is protected

• The site is served over HTTPS only: what you write is encrypted in transit.
• The token that links the site to the artisan's Google account is encrypted with AES-256-GCM before it reaches the database.
• The artisan's area requires a Google sign-in, and the very first sign-in also requires a setup code.
• The “Manage my booking” link carries a random token belonging to your appointment alone. It opens that one, and nothing else. A subscription's “Manage my visits” link works the same way, for that subscription's visits only.

09Cookies

This site drops no advertising cookie, no analytics cookie, no social network button. An ordinary visitor receives none at all. Visit counting uses neither a cookie nor an identifier: the log sent to the server cannot recognise a visitor from one visit to the next. What your browser keeps for itself is described below.

Two cookies exist, and they concern the artisan only: the one that keeps his session open in his own area, and a temporary one that protects his Google sign-in against fraud. Both expire on their own.

Typefaces are served from our own domain: displaying this page calls no third-party server.

Your browser does, however, keep two things for itself, in its local storage: the origin described above, which reaches us only if you book, and, for the length of your session, where you arrived from, which serves to relate every page read to the same source and to count one visit rather than one per page read; it is erased when the tab closes. Neither is an identifier, neither is readable by another site, and clearing your browsing data erases both.

10Your rights

Quebec law grants you several, and we honour them free of charge, within thirty days.

• Know what information we hold about you, and obtain a copy of it.
• Have corrected anything inaccurate, incomplete or equivocal.
• Withdraw your consent, and ask that what is no longer necessary be deleted.
• Receive the information you gave us in a structured, commonly used technological format.
• File a complaint with the Commission d'accès à l'information du Québec (cai.gouv.qc.ca) if our answer does not satisfy you.

11If there is an incident

Should a confidentiality incident present a risk of serious injury, we would notify the people concerned and the Commission d'accès à l'information without delay, and the incident would be entered in the register the law requires.

12If this page changes

The date at the top governs. A substantive change will be pointed out to you at your next booking, rather than slipped in quietly.