Privacy Policy

Last updated: June 2026

1. Who we are

AJ Web Studio is operated by Atash Jamalluddin, a solo web developer and AI systems architect based in Montreal, Quebec, Canada. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with Quebec’s Act Respecting the Protection of Personal Information in the Private Sector (Law 25 / Loi 25) and Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).

By using this website or submitting a contact request, you acknowledge the practices described in this policy.

2. Personal information we collect

We collect personal information only when you voluntarily submit the contact form on this website. The information collected includes:

Full name
Email address
Phone number (optional)
Project type selection
Message content describing your project or inquiry

We do not collect sensitive personal information as defined under Law 25 (health data, biometric data, financial records, or other intimate-category data).

3. Purpose of collection

Your personal information is collected solely to:

Respond to your inquiry and evaluate project fit
Communicate regarding potential or active service engagements
Fulfil the service agreement if you engage our services

We do not use your information for unsolicited marketing, behavioral profiling, or fully automated decision-making. If this changes, this policy will be updated and your explicit consent requested.

4. Cookies and tracking technologies

This website uses no tracking cookies, advertising cookies, or behavioral analytics. Fonts are served locally from our own servers—not from Google or any third-party CDN—eliminating the most common source of passive IP collection on business websites.

No third-party tracking or analytics scripts are loaded. If analytics are introduced in the future, this policy will be updated and your prior informed consent will be obtained as required by Law 25.

5. Third-party processor — Formspree

Contact form submissions are processed by Formspree, Inc., a form-handling service headquartered in the United States. When you submit the contact form, your name, email, phone number, project type, and message are transmitted to Formspree’s servers and forwarded to us by email.

Formspree acts as a data processor on our behalf and is bound by its own Privacy Policy, available at formspree.io/legal/privacy-policy. Your information is not sold, rented, or shared by Formspree beyond what is required to deliver your message to us.

6. Data transfers outside Quebec

As disclosed in Section 5, contact form data is transferred to Formspree’s servers located in the United States. Under Law 25, we are required to inform you of this cross-border transfer.

We have reviewed Formspree’s security practices and determined that they provide an adequate level of protection for personal information. We have no other third-party data processors or cross-border transfers at this time.

7. Retention and destruction

We retain contact inquiry data for a maximum of 12 months from initial contact, unless you engage our services, in which case project-related information is retained for the duration of the engagement plus 24 months for legal and accounting purposes.

After the applicable retention period, personal information is securely deleted or anonymized. You may request earlier deletion at any time (see Section 9).

8. Security measures

We take reasonable technical and organizational measures to protect your personal information against unauthorized access, loss, or disclosure. These measures include encrypted email communication and secure form processing via Formspree’s SSL-secured endpoints.

No method of electronic transmission is 100% secure. In the event of a privacy incident presenting a risk of serious injury, we will notify you and the Commission d’accès à l’information (CAI) as required by Law 25, without undue delay and no later than 72 hours after becoming aware of the incident.

9. Your rights under Law 25 and PIPEDA

If you are a Quebec or Canadian resident, you have the following rights regarding your personal information:

Right to access: request a copy of personal information we hold about you
Right to rectification: request correction of inaccurate or incomplete information
Right to erasure: request deletion of your personal information
Right to data portability: receive your data in a structured, machine-readable format (effective Sept 2024 under Law 25)
Right to withdraw consent: withdraw consent to processing at any time, without affecting the lawfulness of prior processing
Right to object: object to processing based on legitimate interests
Right to de-indexation: request that links to your personal information be de-indexed where applicable

To exercise any of these rights, contact us at the address in Section 10. We will respond within 30 days.

10. Privacy officer

As required by Law 25, the person responsible for the protection of personal information at AJ Web Studio is:

Name: Atash Jamalluddin
Email: atash@atashjamall.com
Phone: +1 (514) 299-8906
Address: Montreal, Quebec, Canada

All privacy requests, complaints, and inquiries regarding this policy should be directed to the above contact.

11. Filing a complaint

If you believe your privacy rights have been violated and your concerns have not been adequately addressed by us, you have the right to file a complaint with the provincial regulator:

Commission d’accès à l’information (CAI)
Website: www.cai.gouv.qc.ca
Phone: 1-888-528-7741

You may also file a complaint with the Office of the Privacy Commissioner of Canada regarding PIPEDA matters at www.priv.gc.ca.

12. Updates to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technology. The “Last updated” date at the top of this page reflects the most recent revision.

If changes are material, we will make reasonable efforts to notify you. Continued use of this website after an update constitutes acceptance of the revised policy.