Privacy, cookie and personal information protection policy.

Clémence Vandycke – Art Therapy
www.clémencearttherapie.com
Website type: transactional

At Clémence Vandycke Art Therapy, we place great importance on protecting the personal information of our clients, employees and representatives. In accordance with the Act Respecting the Protection of Personal Information in the Private Sector, we are committed to preserving the confidentiality of the personal information collected in the course of our activities. Our Privacy Policy is intended to inform you about our practices for collecting, using, disclosing, retaining and protecting your personal information. By providing us with your personal information, you accept the terms of this Policy and authorize us to process your information in accordance with it.

The purpose of this Privacy Policy is to inform users of our website about the personal data we collect as well as the following information, where applicable:

The personal data we collect on our website
How the collected data is used
Who has access to the collected data
The rights of website users
The website’s cookies policy

1. Applicable laws

This Policy complies with the laws set out in the Personal Information Protection and Electronic Documents Act (PIPEDA).

For residents of EU countries, the General Data Protection Regulation (GDPR) governs all data protection policies, regardless of where the website is located. This Privacy Policy aims to comply with the GDPR. If there are any inconsistencies between this Policy and the GDPR, the GDPR will apply.

For residents of the State of California, this Privacy Policy aims to comply with the California Consumer Privacy Act (CCPA). If there are inconsistencies between this document and the CCPA, the legislation of the State will apply. If we become aware of any inconsistencies, we will amend our Policy to comply with the relevant law.

For residents of Québec, this Privacy Policy aims to comply with Law 25. If we become aware of any inconsistencies, we will amend our Policy to comply with the relevant law.

2. Consent

2.1 Commitment to privacy

We are committed to protecting the privacy of our users. We collect and use personal information only with their explicit consent and in compliance with applicable laws.

2.2 Acceptance of the terms of our Policy

By accessing our website or by providing us with personal information, you accept the terms of this Privacy Policy. This includes your consent to the collection, retention and use of your personal information in accordance with this Policy.

You consent to this Privacy and Cookies Policy.

2.3 Right to withdraw consent

You have the right to withdraw your consent at any time. However, this is subject to certain legal or contractual restrictions. We will inform you of the possible consequences of such withdrawal, such as our inability to provide certain products or to process certain requests. Your decision to withdraw consent will be recorded in our records.

2.4 Exceptions to the need for consent

In certain exceptional circumstances, we may collect, use or disclose personal information without obtaining your prior consent. This may occur in situations where legal, medical or security imperatives make it impossible or impractical to obtain your consent. These situations include, but are not limited to, suspected breach of contract, prevention or detection of fraud, or law enforcement needs.

3. Collection of personal information

3.1 We collect personal information through various means, such as:

Emails and communications with our customer service
Online request forms (including appointment forms)
The purchasing platform for our events
Cookies and similar technologies on our website

3.2 We may also collect information through third parties, such as:

A technology service provider such as an ordering platform or newsletter service
A recruitment portal allowing candidates to submit their CV and personal data
Professional social networks such as LinkedIn for recruitment or marketing purposes
A consultant providing part of the services we offer to our clients
An agency responsible for answering questions or handling customer complaints
A customer satisfaction survey company collecting feedback on our products or services
An online payment service provider processing financial transactions
A cloud computing company storing client data
A digital marketing company analyzing user behaviour on our website
An IT security service provider monitoring threats and protecting data
A customer relationship management (CRM) provider helping to organize and analyze interactions with clients
A logistics provider managing product delivery and collecting information about recipients

3.3 We may use advanced technologies to collect personal information, including to identify, locate or profile our clients (for example, to create consumer profiles). However, we are committed to protecting our clients’ privacy:

Responsible use of technology: We use these technologies only to improve our services and better understand our clients’ needs.

3.4 Information automatically exchanged on our website

When you access our website, your computer and the site server automatically exchange information. This communication is necessary so that the server can transmit a file compatible with the computer equipment you are using. The information exchanged includes:

The domain name of your Internet service provider
Your IP address, a unique number assigned to your computer when it is connected to the Internet
The type of browser (Explorer, Firefox, etc.) and operating system (Windows, Mac OS, etc.) used
The date and time of the visit
The pages you view
The address of the referring site, if you access our website from another site

This information is stored and used on our website hosting platform (Wix) for technical and statistical purposes. It is used to count the number of visits, the most frequently visited pages, the technology used by visitors, referring sites and the country of origin of visitors.

We are committed to being transparent about the use of these technologies and to respecting the privacy choices of our clients.

4. Types of personal information collected

4.1 We collect various types of data, including but not limited to:

Personal identifiers (name, mailing address, email address, phone number)
Technical or digital information (IP address, online activities)
Financial information (payment details)
Health data (weight, sex at birth, health history, lifestyle habits, medication use)
Demographic data (age, ethnic origin, nationality, place of residence)

We are committed to protecting the confidential information you entrust to us. If you voluntarily provide personal or otherwise confidential information by email or via a form to subscribe to the newsletter or make a request, we will use only the information required to enable our team to respond to your message or follow up on your request. Electronic correspondence is treated with the same confidentiality measures as other written documents.

4.2 Children’s privacy

We do not knowingly collect or solicit personal information from children under the age of 14. By using our website, you represent that you are at least 14 years old. If you are under 14, please do not attempt to send us any personal information. If we discover that we have inadvertently collected personal information from a user under the age of 14, we will attempt to delete this information from our files and records immediately. We also encourage underage users of the website aged 14 or older to ask their parents or guardians for permission before sending any information about themselves over the Internet.

If you believe that a child under the age of 14 has provided us with personal information, please contact us using the contact details provided in the next section.

5. Use of personal information

5.1 We use your personal information for a range of essential activities:

Responding to requests: To respond effectively to your inquiries and requests.
Transaction management: Processing payments and issuing receipts for completed transactions.
Registrations and participation: Managing your registrations for events, trainings, newsletters, downloads from our website, or participation in webinars.
Human resources management: Internal management and administration of human resources, recruitment, employment contracts and service agreements.
Improving user experience: Operating, maintaining and improving our website, personalizing your online experience, and providing requested services and information.
Marketing communications: Sending information, special offers and relevant news, with the option to unsubscribe at any time.
User account management: Managing your user account to access various features of our website.

These uses are intended to enhance your experience with our services and facilitate effective interaction with our organization.

5.2 We offer various options to allow you to control and limit the collection of your personal information. These options include:

Communication choices: You may choose to receive our communications by different means (phone, SMS, email), or to opt out entirely.
Account settings: When creating an account on our website, you may choose not to participate in certain services or loyalty programs.
Cookie management: Our website allows you to refuse or customize the use of cookies. Please note that blocking certain cookies may affect the accessibility and functionality of our website.
Granular consent: In most situations, when we collect information for specific purposes, you have the option to consent only to certain uses of your data.

It is important to note that some of these options may limit your access to all features of our service. For example, if you refuse certain cookies, some parts of our website may not function as intended, or if you choose not to create an account, some personalization features may not be available.

6. Sharing and disclosure of personal information

6.1 The personal information collected by our organization is accessible to specific categories of our staff and certain partner organizations, for the purpose of providing our products and services effectively. For example:

Customer service: Accesses contact information to respond to requests
IT department: Accesses technical data for support and maintenance.
Marketing department: Uses data for advertising campaigns and market research.
Delivery partners: Receive addresses for order delivery.
Payment service providers: Access financial information to process transactions.
Personal information and data security officers: Access information to ensure security and protection against unauthorized access or cyberattacks.
Legal consultants: Use data to ensure compliance with applicable laws and regulations.
Cloud service providers: Host data on secure servers, allowing storage and retrieval of information.
Research and development partners: Access certain data to collaborate on new innovations or product/service improvements.
Collection agencies: In cases of payment default, certain information may be shared with external collection agencies.

We ensure that this information is used exclusively for the purposes stated and in compliance with confidentiality. Data transfers outside Québec are carried out as part of international collaborations, while ensuring adequate protection of information in accordance with applicable laws.

6.2 We may share user data processed on our website with the following third parties:

Wix Online Platform Limited: This website is hosted by Wix Online Platform Limited. Address: 1 Grant’s Row, Dublin 2 D02HX96, Ireland. Wix.com is a processor for the data of visitors to our website. This means that Wix will only process the data of our website visitors according to our instructions and on our behalf. Wix.com will not process visitors’ data for its own purposes. To learn more about Wix’s Privacy Policy, visit: https://fr.wix.com/about/privacy
Website visitor analytics tools: This website uses web audience measurement tools. These tools collect information about your browsing activity on this website, which is stored on servers located in particular in the United States or Canada.

These tools may disclose this information to third parties when required by law or when such third parties process data on their behalf. The information collected by these tools includes, for example, the pages you visit, the date, time, duration and frequency of your visits, as well as the links you click on. The type of operating system you use and its language, the name of your Internet service provider and your geographic location (region) are also collected. Your IP address is also collected, but it is anonymized (truncated) to ensure the confidentiality of information about you.

Anonymizing an IP address prevents an individual’s identity from being determined using that address. These tools use the collected information only to produce statistics and reports on browsing on this website, which allows us to improve the electronic delivery of our services. Under no circumstances will the information collected on this website be matched with any other data held by these tools.

Other disclosures: We are committed not to sell or share your data with other third parties, except in the following cases:

if required by law;
if required for any legal proceeding;
to prove or protect our legal rights;
to buyers or potential buyers of this company in the event that we seek to sell the company.

7. Links to other websites

7.1 Our website may contain links to third-party websites

When you follow these links, you leave our website. The information exchanged at that time is no longer subject to our Privacy Policy. We recommend that you review the privacy statements of other websites you visit before providing any information.

8. Security of personal information

8.1 Security measures to protect personal information

To ensure the security and confidentiality of personal information, we adopt rigorous security measures, including both physical and technological aspects. Here are some concrete examples:

Physical security: Use of electronic locking systems and security locks for access to offices, cabinets and filing cabinets; installation of surveillance cameras; and restricted access to areas where personal data is stored.
Access controls: Limiting access to personal data to authorized employees only.
Staff training: Regular awareness-raising of staff on best data security practices.
Monitoring and intrusion detection: Implementing systems to monitor any suspicious activity and detect potential intrusions.
Disaster recovery plans: Developing plans to quickly restore data in the event of incidents such as a breakdown or cyberattack.
Data encryption: Wix uses HTTPS, TLS 1.2+ and automatic SSL so that data on our site (e.g., user data) is protected regardless of location.

AES-256, the most robust encryption available, encrypts user data at rest so that it is protected during storage.

Wix provides two built-in levels of DDoS protection: one to protect against fraudulent incoming traffic and another to manage the massive traffic flow caused by a DDoS attack.

We ensure that our business is protected through Wix’s international security standards and compliance with SOC 2 Type 2, PCI DSS Level 1, GDPR, CCPA, LGPD and ISO standards.

While we take all reasonable precautions to ensure our user data is secure and users are protected, there is always some risk of harm. The Internet as a whole can sometimes be unsafe, and therefore we are unable to guarantee the security of user data beyond what is reasonably practical.

These measures are intended to protect personal information against any unauthorized access, use or disclosure, and to maximize its integrity and confidentiality. Although we do everything we can to protect your personal data, it is important to keep in mind that no method of transmission over the Internet or electronic storage is 100% secure. We therefore cannot guarantee absolute security.

8.2 International data transfers

User data may be accessed, processed or collected in the following countries:

To our knowledge, data is collected for statistical purposes by Wix and Google. It is not possible to determine the exact countries of the servers to which data is transmitted to these third parties. However, we know that some data may be collected in the following countries:

United States (Google Analytics)
Ireland (Wix)

8.3 Commitment of staff and/or the board of directors

Each employee, director, volunteer, independent contractor or ad hoc advisor working within committees of our board of directors undertakes to respect the personal information we collect. In addition, these individuals agree to maintain the confidentiality of information specific to our activities and not to disclose it or use it for personal purposes or for the benefit of others. This commitment begins when the employee, director, volunteer, independent contractor or ad hoc advisor takes up their duties and continues indefinitely.

9. Retention and destruction of personal information

We will retain your personal data only for as long as necessary for the purposes set out in this Privacy Policy. We will retain and use it to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our legal policies.

We will also retain usage data for internal analysis purposes. This data is generally kept for a shorter period, unless it is used to enhance security or improve the functionality of our website, or unless we are legally required to retain it for a longer period.

10. Your rights

10.1 Recognition and respect of your rights

As part of our Privacy Policy, we recognize and respect the fundamental rights of individuals whose personal information we hold. These rights include:

Right of access: Individuals have the right to view the personal information we hold about them. For example, a client may request to see the data collected when they registered for our service.
Right to rectification: If information is inaccurate or incomplete, individuals may request that it be updated. For example, an employee may request that an incorrect mailing address in our records be corrected.
Right to de-indexation: Individuals may request that their personal information be removed from dissemination or that any hyperlink associated with their name be de-indexed, if such dissemination causes them harm or violates the law or a court order. This right to erasure or “right to be forgotten” allows individuals to control the availability of their personal information on the Internet.
Right to file a complaint: In case of concerns regarding the processing of their data, individuals may file a complaint in accordance with our established process.

Subject to applicable laws, upon receipt of a written request from an individual and after verifying their identity, we will inform them whether we hold personal information about them and will communicate such information to them.

We may refuse an individual access to their information in accordance with applicable laws, in which case we will provide reasons for our refusal.

To facilitate these rights, the contact details of our person responsible for the protection of personal information are clearly indicated for any questions or concerns. These measures ensure that individuals can exercise their rights with confidence and transparency.

11. Changes to the Policy

This Policy may be updated to reflect changes in our practices or legal requirements. Changes will be posted on our website. We encourage you to review this Privacy Policy regularly to stay informed of any updates.

12. Cookies Policy

12.1 What is a cookie?

A cookie is a small file consisting of letters and numbers that is downloaded to your computer when you access certain websites. In general, cookies allow a website to recognize a user’s computer.

The most important thing to know about the cookies we use is that they are intended to improve the user-friendliness of our website, for example by remembering site preferences and language settings.

12.2 Why do we use cookies?

We may use cookies and other similar technologies for a number of reasons, for example:
i) for security or fraud protection purposes, and to identify and prevent cyber attacks;
ii) to provide you with the service you have chosen to receive from us;
iii) to monitor and analyze the performance, operation and effectiveness of our service; and
iv) to improve your user experience.

12.3 What types of cookies do we use?

Functional cookies: We use them to remember any choices you make on our website so that they are saved for your future visits.
Analytics cookies: These allow us to improve the design and functionality of our website by collecting data on the content you access and engage with while using our site.
Targeting cookies: These cookies collect data on how you use the website and your preferences. This allows us to make the information you see on our website more promotional and targeted to you.

12.4 Cookies table

You can consult the table at the following address to see which cookies are placed by default on our site. Some cookies may be added by external applications such as Google Analytics, Facebook or others.

https://support.wix.com/fr/article/les-cookies-et-votre-site-wix

12.5 Your choices

To learn more about cookies, including how to see which cookies have been set and how to manage, delete or block them, visit:

https://www.allaboutcookies.org/fr/

It is also possible to prevent your browser from accepting cookies by changing the relevant settings in your browser. You can usually find these settings in your browser’s “Options” or “Preferences” menu.

Please note that deleting our cookies or disabling future cookies or tracking technologies may prevent you from accessing certain areas or features of our services, or may otherwise negatively affect your user experience.

To opt out and prevent your data from being used by Google Analytics on all websites, please consult the following instructions:
https://tools.google.com/dlpage/gaoptout?hl=fr

12.6 Changes

We may modify this Cookies Policy from time to time. We encourage you to check this page regularly for the latest information on cookies.

13. Contact

Any request or question regarding this Privacy Policy may be sent to the person responsible for the protection of personal information at the following address:

Name of contact person: Clémence Vandycke
By email: clemence.vdk@gmail.com
By phone: 438 764-8084

Effective date of the policy: September 14, 2023

Last updated: Novembre 22, 2025

Privacy, cookie and personal information protection policy.

Travel