<pymewebpro/>

Read this in: English · Español (Ley 1581)

Privacy Policy

Norte Sur Consulting S.A.S. (DBA PymeWebPro) · Last reviewed: May 5, 2026

1. Scope of this policy

This policy describes how Norte Sur Consulting S.A.S., doing business as PymeWebPro ("we", "us", "PymeWebPro"), collects, uses, shares, and protects personal information when you visit pymewebpro.com, contact us, sign a service agreement, or use our client portal.

It is written to align with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec's Act respecting the protection of personal information in the private sector (Law 25). A separate Spanish-language policy covers our obligations under Colombia's Ley 1581 de 2012 (Habeas Data); both policies describe the same data flows from different regulatory perspectives.

2. Privacy officer

Under PIPEDA Principle 1 (Accountability) and Quebec Law 25 section 3.1, we have designated a person responsible for personal information protection:

3. What personal information we collect

We collect only what we need to deliver the service you contracted for. Specifically:

• Identity and contact information: name, email address, telephone or WhatsApp number, business name.
• Business information: type of business, address, current website, social profiles, photographs, logos, and any content you upload to the client portal.
• Payment information: payments are processed by Wise Payments (CAD/USD) or Wompi/Bancolombia (COP). PymeWebPro does not store credit card numbers or bank account details. We retain only invoice metadata (amount, currency, date, processor reference).
• Technical information: IP address (anonymized via hash), browser, operating system, and pages visited, all aggregated through Cloudflare Web Analytics. No cookies, no fingerprints, no cross-site tracking.
• Communications: messages you send by email, contact form, or WhatsApp.
• Browser local storage (not cookies): we store up to two values in your browser's localStorage to remember your language preference (pwp-lang: en or es) and detected country code for currency display (pwp-geo). These values are not transmitted to us, and you can clear them at any time from your browser settings.

4. Purposes for which we use your information

Under PIPEDA Principle 4 (Limiting Collection) and Quebec Law 25 section 12, we use personal information only for the following identified purposes:

1. Respond to inquiries, quotes, and support requests.
2. Deliver the contracted services (design, build, hosting, and ongoing support of your website).
3. Process payments and issue invoices through Wise Payments or Wompi.
4. Send transactional communications (payment confirmations, portal access links, milestone reminders, launch notifications).
5. Meet legal, accounting, and tax obligations under Canadian and Colombian law.
6. Improve our services through aggregated, anonymized analytics.

We do not sell your personal information. We do not share it with third parties for their own marketing. We do not use it for behavioural advertising or profiling.

5. How we share information (service providers)

We share the minimum necessary information with the following service providers, each acting under a written contract that limits use to what is required to deliver the service:

• Cloudflare, Inc. (USA): website hosting, DNS, edge analytics (Cloudflare Web Analytics, cookie-free), D1 database, R2 file storage.
• Resend, Inc. (USA): transactional email delivery.
• Wise Payments Limited (UK / Canada): card, Apple Pay, Google Pay, and wire processing for clients in CAD or USD.
• Wompi (Bancolombia) (Colombia): card, PSE, and bank-transfer processing for clients in COP.
• Google LLC (USA): Search Console, used only to verify domain ownership for indexing. We do not use Google Analytics.

Each provider operates under its own privacy policy and recognized security standards. None of them are authorized to use your information for their own marketing.

6. Cross-border transfers

Because PymeWebPro is operated from Medellín, Colombia, and our service providers are based in the United States and the United Kingdom, your personal information will be processed outside Canada. Specifically:

• Hosting, email, and payment processing happen on servers located in the United States, the United Kingdom, the European Union, and Colombia.
• Our internal operations, including reviewing portal submissions and answering support requests, are performed from Colombia.

By engaging our services or submitting information through our website, you consent to this cross-border transfer. We assess privacy impact before engaging any new sub-processor outside Canada, in line with Quebec Law 25 section 17 and PIPEDA Principle 1. The countries listed above either offer comparable protection or are bound by equivalent contractual safeguards.

7. Cookies and analytics

pymewebpro.com does not use cookies. We do not set session cookies, marketing cookies, or analytics cookies. We do not run Google Analytics, Meta Pixel, or any cookie-based or fingerprint-based tracking on this site.

We measure traffic using Cloudflare Web Analytics, which aggregates page-load counts at Cloudflare's edge without cookies, persistent identifiers, or third-party advertising data sharing. Because no tracking technology requiring consent is used, we do not display a consent banner. This approach satisfies PIPEDA's "meaningful consent" guidance and Quebec Law 25 section 8.1's transparency requirements without an interstitial.

The only browser-side persistence is localStorage, described in Section 3. localStorage is not a cookie under PIPEDA or Quebec Law 25 case law, and the values stored never reach our servers.

Client websites we build are separate. If you contract a Pro tier site that includes GA4 or Meta Pixel, that tracking lives on your site under your privacy policy, and PymeWebPro installs a compliant consent banner before activation. Our own site (this one) remains tracking-free regardless.

8. Your rights

Under PIPEDA and Quebec Law 25, you have the following rights with respect to personal information we hold about you:

• Access to the personal information we hold about you and information about how it is being used.
• Rectification of inaccurate or incomplete information.
• Erasure / withdrawal of consent, subject to legal or contractual retention requirements.
• Portability (Quebec Law 25, in force since September 2024): receive your personal information in a structured, commonly-used technological format.
• De-indexing (Quebec residents): request that we cease disseminating personal information or de-index a hyperlink that causes serious injury, where applicable.
• Information about automated decision-making: we do not use automated decision-making to evaluate clients. All design, pricing, and acceptance decisions are made by a human (Michael Chartrand).
• File a complaint with the Office of the Privacy Commissioner of Canada (priv.gc.ca) or, for Quebec residents, the Commission d'accès à l'information du Québec (cai.gouv.qc.ca).

9. How to exercise your rights

To exercise any of the rights above, email hello@pymewebpro.com with the subject "Privacy". Please include:

• Your full name.
• The specific request (access, rectification, erasure, portability, de-indexing, etc.).
• A reply email address.
• Enough detail for us to identify the records you are asking about.

We will acknowledge your request within ten (10) business days and respond substantively within thirty (30) days, the maximum permitted under PIPEDA section 8(3) and Quebec Law 25 section 32. If we need to extend this timeline (for example, because the request is complex), we will notify you in writing with the reason and the new expected response date.

There is no charge to exercise these rights. We may ask you to verify your identity before disclosing personal information.

10. Privacy breach notification

If we determine that a privacy breach involving your personal information presents a real risk of significant harm, we will notify you and, where required, the Office of the Privacy Commissioner of Canada or the Commission d'accès à l'information du Québec, as required by PIPEDA section 10.1 and Quebec Law 25 section 3.5. We maintain a breach log for the periods required by those statutes.

11. Retention

We retain personal information only for as long as needed to deliver the service and to meet legal, accounting, and tax obligations:

• Active client records (project files, brand assets, portal content): for the duration of the engagement plus seven (7) years, the minimum statutory retention period for Canadian tax records.
• Inquiry and lead records (you contacted us but did not become a client): up to twenty-four (24) months, after which we delete or anonymize.
• Invoice and payment metadata: seven (7) years, as required by Canadian and Colombian tax authorities.
• Email correspondence: retained while the relationship is active, then archived for the periods above.

After these periods expire, we permanently delete or anonymize the records.

12. Security

We apply reasonable technical, administrative, and physical safeguards to protect your information, including: HTTPS encryption (HSTS preloaded), token-based access control, the Cloudflare edge network with bot-management and rate-limiting, encrypted backups, principle-of-least-privilege staff access (only the two principals — Michael Chartrand and Santiago Santos — have access to client records, and access is scoped to the minimum required to deliver each engagement), and regular review of security headers (CSP, X-Frame-Options, Permissions-Policy) on every page we ship.

13. Children

Our services are intended for businesses and adult clients. We do not knowingly collect personal information from individuals under 13 (PIPEDA) or under 14 (Quebec Law 25). If you believe a minor has submitted information, contact us and we will delete the record.

14. Changes to this policy

We may update this policy from time to time. The current version is always available at pymewebpro.com/privacy, with the "Last reviewed" date at the top. Material changes will be communicated by email to active clients before they take effect.

15. Contact

For any privacy question, comment, or complaint, contact our privacy officer:

← Back to home