Privacy Policy
Revised June 1, 2026
Preambule
KELDARX inc, a corporation governed by Quebec law, registered with the Registre des Entreprises du Québec under number (NEQ) 1174429754, with its registered office at 2001 Boulevard Robert-Bourassa, Suite 1700, Montréal (Quebec) H3A 2A6 – Canada (hereinafter “KELDARX”), processes personal data in connection with the operation of the website https://www.keldarx.com (the “Website”).
This Privacy Policy (the “Policy”) is intended to inform all individuals concerned (“You” or “Your”) about the manner in which KELDARX collects and uses your personal data, and the means available to you to control such use, in accordance with:
- The Act respecting the protection of personal information in the private sector (LPRPSP), as modernized by Law 25 (in force since September 2023)
- The General Data Protection Regulation (GDPR, EU 2016/679)
- The French Digital Economy Confidence Act (LCEN, France).
1. Scope
This Policy applies to all personal data collected on or through the Website, whether collected online or offline.
Personal data — any information relating to an identified or identifiable natural person, directly or indirectly, in particular by reference to an identifier (name, IP address, online identifier) or to one or more factors specific to their identity.
Non-personal data — information that does not, alone or in combination with other data, allow a natural person to be identified.
Your use of the Website is also subject to our Terms of Use, available at: https://www.keldarx.com/en/terms-of-use/
2. Data Collected
Visitors — any person browsing the Website without registering. Data collected automatically may include:
- IP address
- Browsing data (pages visited, duration of visit, browser, operating system)
- Strictly necessary technical cookies (see section 10).
Waitlist registrants — any person submitting a form expressing interest in the KEY platform. Data collected may include:
- First and last name
- Email address
- Organization name (optional)
- Any information freely provided in the form.
In any event, data collected will be limited to what is strictly necessary for the purposes set out in section 4.
3. Protection of Minors' Data
KELDARX services are not intended for individuals who are minors under applicable data protection laws. KELDARX does not knowingly collect or retain personal data from minors.
If parents or legal guardians become aware that their child has provided data to KELDARX without their consent, they may request its deletion at:
- compliancy@keldarx.com
Should KELDARX become aware that data from minors has been collected, the necessary steps would be taken as soon as possible to delete such data.
4. Purposes and Legal Bases
For all visitors
- Legal basis — legitimate interest:
- Ensuring the technical operation and security of the Website
- Analyzing traffic and improving performance.
- Remembering your browsing preferences.
For waitlist registrants
- Legal basis — consent:
- Informing you of the launch of the KEY platform and KELDARX news
- Responding to your information requests.
KEY platform and KELDARX Business Solution users (upon launch)
- Legal basis — performance of a contract:
- Enabling you to open and manage an account
- Providing the features and services of the platform
- Managing commercial relationships (contracts, orders, invoices).
- Improving platform features
- Managing obligations related to applicable export laws and trade sanctions.
- Sending you marketing communications related to KELDARX services
- Enabling you to participate in events, webinars or seminars.
Legal basis — legitimate interest:
Legal basis — consent:
KELDARX does not make fully automated decisions producing significant legal effects concerning you without human intervention.
5. Retention Periods
KELDARX does not retain your personal data beyond what is necessary for the purposes for which it was collected.
- Browsing data (server logs): maximum 12 months, then irreversible deletion or anonymization
- Waitlist registrants: until the launch of the KEY platform and for up to 3 years following the last contact, unless consent is withdrawn
- User account data: for the duration of the contractual relationship, then 3 years after its termination
- Legal and accounting data: 7 years in accordance with applicable tax obligations
After these periods, data is irreversibly deleted or anonymized.
6. Personal Data Transfers
The Website is hosted by O2Switch (Clermont-Ferrand, France), established within the European Union. Browsing data remains within European territory.
KELDARX is a corporation governed by Quebec law. If you reside within the European Union, your data may be transferred to Canada. The European Commission has recognized Canada (private sector governed by the LPRPSP) as providing an adequate level of protection (Decision 2002/2/EC).
If you access the Website from a jurisdiction whose laws differ from Quebec law, your continued use of the Website constitutes acceptance of this transfer to Quebec.
Any transfer to a third country not recognized as adequate will be governed by appropriate safeguards (standard contractual clauses) and, where applicable, a Privacy Impact Assessment (PIA) in accordance with Law 25.
7. Your Rights
In accordance with the GDPR (Articles 15 to 22) and Law 25 (modernized LPRPSP), you have the following rights:
- Right of access: obtain a copy of the personal data concerning you
- Right of rectification: correct inaccurate or incomplete data
- Right to erasure: request the deletion of your data in cases provided for by law
- Right to data portability: receive your data in a structured, machine-readable format
- Right to object: object to processing based on legitimate interest
- Right to restriction: temporarily suspend contested processing
- Right to withdraw consent: withdraw your consent at any time, without affecting the lawfulness of prior processing
- Right to de-indexing (Law 25, art. 28.1 LPRPSP): request that the dissemination of your data be stopped or that any link making it accessible be de-indexed, if such dissemination contravenes the law or a court order
To exercise any of these rights:
- compliancy@keldarx.com
KELDARX undertakes to respond within 30 days. Depending on the complexity of the request, a reasonable additional period may be required, within the limits permitted by applicable law.
8. Recipients of Data
KELDARX does not sell your personal data to third parties.
KELDARX may share your data with:
- Technical service providers (hosting provider O2Switch, email tools, forms) — strictly within the scope of service delivery and subject to confidentiality obligations
- Competent authorities — where required by law or in response to a legitimate judicial request
- Commercial successors — in the event of a merger, acquisition or asset transfer, under the conditions provided for by law
Any third party with access to your data is required to process it in accordance with this Policy and applicable laws.
9. Security
KELDARX implements appropriate physical, technical and organizational protection measures to protect your personal data against unauthorized access, loss, alteration, disclosure or destruction.
These measures include in particular: encrypted communications (HTTPS/TLS), system access controls, and confidentiality obligations for all persons accessing data.
Despite these precautions, no transmission or storage technology can guarantee absolute security. You are encouraged to protect your own credentials and to log out when using a shared device.
10. Cookies
The website https://www.keldarx.com uses only strictly necessary technical cookies required for the Website’s operation (session, security). No advertising, behavioral tracking or profiling cookies are placed at this time.
If KELDARX uses audience analytics tools in the future, this section will be updated and your consent will be sought in accordance with applicable legal requirements.
You may configure your browser to refuse cookies. Certain Website features may be affected as a result.
11. Links to Third-Party Websites
The Website may provide links to third-party websites. KELDARX exercises no control over the content or data protection practices of these third parties.
It is your responsibility to review the privacy policies of any third-party websites you visit.
KELDARX accepts no liability for the processing of your data by such third parties.
12. Privacy Incident Notification
In accordance with Law 25 (art. 63.7 LPRPSP) and the GDPR (art. 33-34), in the event of a privacy incident likely to cause serious harm, KELDARX undertakes to:
- Notify the Commission d’accès à l’information (CAI) of Quebec as soon as possible — and, for EU residents, the competent supervisory authority within 72 hours
- Inform the individuals concerned when the incident poses a high risk to their rights and freedoms
- Record all incidents in an internal register
13. Dispute Resolution
KELDARX handles any complaint relating to the protection of personal data diligently and in accordance with the principles of this Policy.
To report an incident or a concern:
- compliancy@keldarx.com
If the matter cannot be resolved directly with KELDARX, you have the right to lodge a complaint with:
- The Commission d’accès à l’information (CAI) — http://www.cai.gouv.qc.ca (Quebec / Canada)
- The Commission Nationale de l’Informatique et des Libertés (CNIL) — http://www.cnil.fr (France / EU)
- The competent supervisory authority in your EU member state
14. Contact and Revisions
For any questions regarding this Policy or the exercise of your rights:
- compliancy@keldarx.com
KELDARX reserves the right to modify this Policy at any time to reflect changes in processing practices, services offered or legal obligations. The revision date at the top of this page will be updated accordingly.
In the event of a material change, KELDARX will notify you by email or by a prominent notice on the Website.
15 Language of Reference and Machine Translations
This Website is available in French and English only. In the event of any discrepancy or inconsistency between the two versions, the French version shall prevail.
KELDARX does not provide translations of the Website in any other language. Any translation automatically generated by a browser or third-party tool (including Google Translate, Microsoft Translator or any equivalent service) is performed without KELDARX’s involvement or control.
KELDARX accepts no responsibility for the accuracy, completeness or legal validity of such automatic translations. Users relying on such translations do so entirely at their own risk and are responsible for consulting the official versions (French or English) in case of doubt.
For any inquiries: compliancy@keldarx.com
