Privacy Policy

Last updated: September 27, 2026.

Who is responsible

JM Systems, in Québec, Canada, is responsible for personal information collected through this website and its online shop. The person in charge of the protection of personal information can be reached through the contact form. No separate public email address is published.

Information we collect

  • Contact form: name, email, company, industry, project type, budget, timeline, and project details. The message is delivered to us by email.
  • Shop: name, email, shipping and billing details, items, quantities, amounts, and order number.
  • Support and feature requests: name, email, subject, message, an optional order number, and browser type when that helps us reply.
  • Technical data: IP address is used to limit abusive submissions. It is not used for advertising.

Cookies and on-device storage

We do not use advertising cookies or audience-measurement tools.

  • A short-lived cookie (contact_form_started_at) records when the homepage was opened. It is readable only by the server, lasts up to one hour, and is used only to reject automated submissions.
  • A preference stored in the browser (jm_legal_notice_seen_v1) remembers that the legal notice was dismissed. It stays on the device and is not sent to us.
  • The admin area uses a session cookie to keep a person signed in. That area is not public.

How we use it

This information is used to answer inquiries, process and deliver orders, provide support, prevent fraud and spam, and meet legal obligations. We do not sell personal information. Contact-form messages are sorted with simple rules so we can set aside likely sales solicitations. That sorting does not decide a right, a contract, or a service.

Service providers

We share only what a provider needs in order to perform its service. Some providers process information outside Québec, including in Canada, the United States, and the European Union.

  • Stripe — card payments. Card numbers are sent to Stripe and are not stored by JM Systems.
  • Brevo — delivery of contact, order, and support email.
  • Canada Post — shipping quotes and delivery of physical items.
  • Supabase — storage of orders, support requests, and site content.
  • Netlify — hosting for this website.
  • Sentry — technical error reports. Session replay is off. Order tokens, email addresses, and cookies are removed from those reports before they are sent.

Shipping details stored with an order are encrypted.

Retention

Order and payment records are kept for as long as accounting, tax, and fraud-prevention rules require. Contact, support, and feature-request messages are kept while we handle the request and for a reasonable period afterward. The contact-form cookie expires within an hour.

Your rights

Under Quebec's Law 25, you may ask to access your personal information, correct it, withdraw consent where the law allows, or ask us to delete it when we are allowed to do so. You may also file a complaint with the Commission d'accès à l'information du Québec. Use the contact form and say that the message is a privacy request.

Changes

We may update this policy. The version published on this page is the one that applies.