What we know about you fits in one email.

Who answers for this

Your data is the responsibility of 1001511837 Ontario Inc., trading as Farblau, a company incorporated in Ontario, Canada.

The person in charge of protecting personal information is the founder of Farblau, A. Pacho Sierra. Write to contact@farblau.com and he answers, not a department.

What we do collect

Only what you type into the diagnostic form: your name, your email, your business name and, if you care to give them, your phone and your website. Along with that come your answers to the questions and, if you arrive from the price calculator, whatever you ticked there.

Nothing else. There is no other form on the site.

Separately, Cloudflare’s servers keep technical logs — IP address, date and time, page requested — as every server in the world does. An IP address counts as personal data, so we say it instead of looking away: they are there, they keep the site running and hold off abuse, Cloudflare deletes them on its own schedule, and we neither cross them with the form nor use them to work out who you are.

Cloudflare also counts requests because it hosts the site, so a visit count and a country exist. Nothing that says who you are.

What we use it for

To answer you and to prepare the call. Nothing else.

We do not add you to any mailing list, we do not send you advertising, we do not build a profile of you and we do not hand you to anyone who wants to sell you something.

Why we are allowed to

In Canada and Quebec the basis is your consent: you write to us, and you tick the box before sending.

In the European Union the basis is the steps taken before a contract at your own request (article 6.1.b of the GDPR). We do not ask for consent there because it would not be needed, and it would be pretending you can say no to something you started.

The server’s technical logs run on a different basis: legitimate interest in keeping the site up and protecting it.

Either way, if you change your mind you write and we delete.

Where it travels and where it stays

Cloudflare hosts this site, runs the form submission and turns it into an email. The whole path stays inside Cloudflare: there is no other email service in between.

That email lands in our inbox, which is hosted at Google, and stays there until we delete it.

If the questionnaire offers you a slot, the calendar you see is served by Cal.com. It is a third party, and it receives nothing about you until you open it: the page does not load it unless you reach that screen. When you book, you give it your name, your email and the time you picked, and its servers are in the European Union.

We run no database of prospects: no internal CRM, no spreadsheet, no list. What exists of you is an email in an inbox. But it is an email that exists, and that is why this page says how long it lasts and how it gets deleted.

That it leaves Quebec and Europe

Cloudflare and Google run their systems in the United States, so your data leaves your province and your country to reach us. Cal.com, the calendar, stays in the European Union. That is three of them, and there are no others.

There is a contract with both: they rely on the European Commission’s standard contractual clauses and on the EU-U.S. Data Privacy Framework. Before starting we checked that the level of protection was equivalent to the one here, and we wrote that down.

If you want to see those documents, ask and we show them to you.

How long it stays

Until you ask us to delete it, and at most twenty-four months from the last time we spoke. After that we delete it ourselves, without you having to remember.

If we end up working together, anything to do with invoicing we keep for six years, which is what Canadian tax law requires. The rest we do not.

And before that, whenever you like: write to contact@farblau.com saying you want yours deleted and we delete it, without asking why. We confirm when it is done.

How we keep it

The whole site runs over HTTPS. The sending keys live on the server and never reach your browser.

One person gets into that inbox, with two-step verification. It is not a bunker, but it is proportionate to how little there is.

The questionnaire gives you a score

The questionnaire works out a score while you fill it in, which is why you get a result at the end.

That score decides nothing on its own: a person reads every request, including the ones that come out red. If the result seems unfair, write and we look again.

What you can ask of us

To tell you what we hold about you. To correct it if it is wrong. To delete it. To stop using it. To withdraw the permission you gave us. To give you yours in a file you can take elsewhere.

All through the same place: contact@farblau.com. No form and no justification needed.

Depending on where you write from, you are covered by Canada’s privacy law (PIPEDA), Quebec’s Law 25 or the European GDPR. All three give you these same rights, and all three give us thirty days to answer. We do not usually take them.

If you think we got it wrong

Tell us first, at contact@farblau.com. We answer within thirty days at most, and if the answer does not help we explain why.

If it still does not convince you, you can complain: in Canada, to the Office of the Privacy Commissioner of Canada; in Quebec, to the Commission d’accès à l’information; in the European Union, to your country’s authority.

You do not have to come through us first. But through us is usually faster.

If something breaks

If your data ever ended up where it should not and that could harm you, we tell you and the relevant authority. Without waiting to be asked.

If this changes

If we ever add something that collects data — analytics, a chat widget, anything — this page will say so before it happens, with the date changed. No small print moves without notice.