This Privacy Policy explains how Kastallis Productions Inc. ("Kastallis", "we", "us", "our") collects, uses, discloses, and protects your personal information when you interact with our website (kastallis.com), our services, and our communications.

We are committed to protecting your privacy in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA), the Act respecting the protection of personal information in the private sector (Quebec's Law 25), and the General Data Protection Regulation (GDPR) where applicable.

1. Information We Collect

• Identification data: name, company, email, phone number
• Project information: content you provide about your project through our contact form
• Technical data: IP address, browser type, device, pages viewed
• Communications: records of your exchanges with us (email, chat, calls)

2. How We Use Your Information

• Responding to inquiries and providing quotes
• Delivering our video production services
• Sending commercial communications (with your consent)
• Improving our website and services
• Complying with legal and tax obligations

3. Legal Basis for Processing

We process your personal information based on: your consent, the performance of a contract, our legitimate business interests, or legal obligations.

4. Sharing of Information

We share your data only with trusted service providers:

• HighLevel (CRM): lead and customer relationship management
• Google (Analytics, Workspace): analytics and business email
• Vimeo, Cloudflare: video hosting and infrastructure security
• Payment processors: for billing and invoicing
• Subcontractors: when needed for production (under confidentiality agreements)

We never sell your personal information.

5. Data Storage

Your data is stored on servers operated by our service providers, primarily in Canada and the United States. By using our services, you acknowledge that your data may be transferred outside Quebec, subject to equivalent protection.

6. Retention Period

• Active prospects: up to 24 months
• Clients: duration of the relationship + 7 years (tax obligations)
• Marketing communications: until you withdraw consent

7. Your Rights (Quebec Law 25)

You have the right to:

• Access your personal information
• Request correction or deletion
• Withdraw consent at any time
• Data portability
• Lodge a complaint with the Commission d'accès à l'information du Québec

To exercise these rights, contact our Privacy Officer (Section 11).

8. Cookies and Tracking

Our website uses cookies for analytics, functional, and marketing purposes. You can adjust your browser settings to refuse cookies. Refusing them may limit some site features.

9. Security Measures

We implement reasonable technical and organizational measures to protect your personal information (encrypted connections, access controls, vetted service providers). No system is fully secure, however.

10. Data Breach Notification

In the event of a confidentiality incident presenting a risk of serious harm, we will notify affected individuals and the Commission d'accès à l'information du Québec in accordance with Law 25.

11. Privacy Officer

12. Changes to This Policy

We may update this Privacy Policy. The latest version is always available at kastallis.com/privacy-policy.