Privacy Policy

1. Purpose and Scope

This Privacy Policy applies to the Icitte product page, operated by UDesign Productions (referred to herein as "we," "us," or "our"). It describes the personal information we collect, why we collect it, how we use it, and the rights you have regarding it.

This policy is written in compliance with Quebec's Act to Modernize Legislative Provisions as Regards the Protection of Personal Information (Law 25) and applies to any person who interacts with our product page or waitlist.

2. Personal Information Collected

We collect personal information in two distinct contexts.

2.1 Waitlist Registration

When you register for the Icitte waitlist, we collect:

• First and last name — to identify and contact you
• Email address — to send you updates on product availability and marketing communications
• Phone number — to contact you regarding your registration, your order or for marketing purposes
• Registration timestamp — the date and time you signed up, generated automatically

This information is collected directly through the form on our website.

2.2 Order Processing via Stripe

When you make a purchase, your payment is processed through Stripe, Inc., our payment provider. As part of this process, we receive and store the following information transmitted by Stripe upon completion of your transaction:

• First and last name
• Email address
• Phone number
• Full shipping address (street, city, province, postal code, country)
• Transaction amount (in CAD)
• Payment status (e.g., "paid")
• Stripe Session ID — a technical reference linking your order to Stripe

Important note about Stripe: Stripe independently collects, for its own purposes (including fraud detection), your IP address, browser and device information, and payment card data (card number, CVV, expiry date). This data is processed directly by Stripe and is never transmitted to us. Stripe acts as a data sub-processor. See Stripe's Privacy Policy at: https://stripe.com/privacy.

2.3 Affiliate Code (Pseudonymous)

If you access our page via a referral link (a ?ref= parameter in the URL), an affiliate code is stored in your browser and associated with your order. This code identifies the person who referred you, not you directly. It is retained in our databases for the purpose of managing our referral program.

3. What We Do Not Collect

Our website contains none of the following:

• Analytics or tracking tools (Google Analytics, Meta Pixel, Hotjar, etc.)
• Advertising or retargeting pixels
• Session recordings or heatmaps
• Error-monitoring software that transmits data to third parties
• Digital fingerprinting or geolocation data collection
• Third-party scripts loading external content without your knowledge

4. Purposes of Collection

We use your personal information for the following purposes:

We do not sell, rent, or share your personal information with third parties for third-party advertising purposes.

5. Third-Party Transfers

Your personal information may be processed by the following third parties, strictly in the context of delivering our services:

6. Hosting and Infrastructure Logs

Our site is hosted on Netlify and routed through Cloudflare. These providers automatically collect standard access logs, including your IP address, browser type (User-Agent), and TLS connection data. These logs are retained in accordance with each provider's own policies (typically 30 days for Netlify) and are not used by UDesign Productions for identification or profiling purposes.

7. Data Retention

Your personal information is retained for as long as the Icitte brand is in operation. Should the brand cease operations, we will notify you of any changes to our retention practices within a reasonable timeframe.

Order-related data may be retained beyond this period where required by applicable law (for example, for accounting or tax purposes).

8. Your Rights

Under Law 25, you have the following rights regarding your personal information:

• Right of access — obtain a copy of the information we hold about you
• Right to rectification — correct inaccurate or incomplete information
• Right to erasure — request deletion of your data
• Right to data portability — receive your data in a structured format
• Right to withdraw consent — at any time, for processing based on consent

To exercise any of these rights, please contact us at:

📧 kaleb@udesignproductions.com

We will respond to your request within 30 days of receipt.

9. Data Security

We implement reasonable technical and organizational measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These measures include:

• API key authentication on our Cloudflare Worker data gateway
• Row-Level Security on our Supabase database
• TLS-encrypted transmission for all communications
• No storage of credit card data on our servers

10. Changes to This Policy

We reserve the right to modify this policy at any time. In the event of a significant change, we will make reasonable efforts to notify you (by email if you are on our waitlist). The date of the last update is indicated at the top of this document.

11. Person Responsible for Personal Information Protection

In accordance with Law 25, the person responsible for personal information protection at UDesign Productions is:

Kaleb
UDesign Productions
📧 kaleb@udesignproductions.com

Any questions, concerns, or requests relating to the protection of your personal information may be directed to them.