Privacy Policy for New France Architectural Heritage (NouvelleFranceHeritage.com)

Last Updated: [Date]

New France Architectural Heritage ("we," "our," or "us") operates the website NouvelleFranceHeritage.com (the "Site"). We are committed to protecting your privacy and handling your personal data with transparency and care. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Site, use our services, or interact with us.

Please read this Privacy Policy carefully. By accessing or using the Site, you acknowledge that you have read, understood, and agree to be bound by all the terms outlined here. If you do not agree with our policies and practices, please do not use our Site.

This policy is designed to comply with applicable data protection laws, including the General Data Protection Regulation (GDPR) for users in the European Union and European Economic Area, and other relevant regulations.

1. Definitions

For the purposes of this Privacy Policy:

"Personal Data" means any information relating to an identified or identifiable natural person ('data subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
"Processing" means any operation or set of operations which is performed on Personal Data or on sets of Personal Data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.
"Data Controller" means the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of Personal Data.
"Data Subject" is any identified or identifiable natural person whose Personal Data is processed by the Data Controller.

2. Data Controller

The Data Controller for the processing of your Personal Data is:

New France Architectural Heritage
[Insert Physical Address, if applicable]
Email: privacy@NouvelleFranceHeritage.com

3. Information We Collect

We collect several types of information from and about users of our Site, which may include:

3.1. Information You Provide Directly

Contact Information: Such as your name, email address, postal address, and phone number when you subscribe to our newsletter, create an account, submit an inquiry via a contact form, or register for an event.
Account Credentials: Username and password if you create an account on our Site.
Communications: Records of your correspondence with us, including emails, contact form submissions, and survey responses.
User Content: Any content you submit for publication on our Site, such as comments on blog posts, forum posts, or uploaded images (which may contain metadata).
Transaction Information: If you make a donation, purchase a publication, or pay for an event, we collect payment information. Note that we use third-party payment processors, and we do not store full credit card numbers on our servers.
Preferences: Your communication preferences and interests related to architectural heritage.

3.2. Information Collected Automatically

As you navigate through the Site, we may use automatic data collection technologies to collect certain information about your equipment, browsing actions, and patterns:

Usage Data: Details of your visits to our Site, including traffic data, location data (at country/city level), logs, and other communication data and the resources that you access and use on the Site.
Device Information: Information about your computer and internet connection, including your IP address, operating system, browser type, and device identifiers.
Cookies and Tracking Technologies: For more detailed information, please see our Cookie Policy section (Section 9).

3.3. Information from Third Parties

We may receive information about you from third-party sources, such as social media platforms (if you interact with us through them), analytics providers, and public databases, to the extent permitted by law.

4. Legal Basis for Processing (GDPR)

For users in the European Union and European Economic Area, we process your Personal Data on one or more of the following legal bases:

Consent: You have given clear consent for us to process your Personal Data for a specific purpose (e.g., sending you our newsletter).
Contractual Necessity: The processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract (e.g., processing your donation or event registration).
Legal Obligation: The processing is necessary for compliance with a legal obligation to which we are subject.
Legitimate Interests: The processing is necessary for our legitimate interests or the legitimate interests of a third party, provided your interests and fundamental rights do not override those interests. Our legitimate interests include: operating and improving our Site and services, ensuring network and information security, conducting analytics, and promoting our mission of preserving architectural heritage.

5. How We Use Your Information

We use the information we collect for various purposes, including:

To present our Site and its contents to you and provide you with information, products, or services that you request from us.
To fulfill the purpose for which you provided the information (e.g., to process your donation).
To send you administrative information, such as updates to our policies, and to respond to your inquiries, comments, or questions.
To send you marketing and promotional communications (where you have consented to receive them) about our work, events, publications, and other news related to New France architectural heritage.
To personalize your experience on our Site and to deliver content and product offerings relevant to your interests.
To maintain and improve the safety, security, and functionality of our Site, including for troubleshooting, data analysis, testing, research, and statistical purposes.
To comply with legal obligations and enforce our terms of service and other agreements.
For any other purpose with your explicit consent.

6. Disclosure of Your Information

We may share your Personal Data in the following situations:

Service Providers: We may share your information with trusted third-party vendors who perform services on our behalf, such as website hosting, data analysis, payment processing, email delivery, and marketing assistance. These providers are contractually obligated to protect your data and use it only for the purposes we specify.
Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).
Protection of Rights: We may disclose information where we believe it is necessary to investigate, prevent, or take action regarding potential violations of our policies, suspected fraud, situations involving potential threats to the safety of any person, or as evidence in litigation in which we are involved.
Business Transfers: In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company, your information may be transferred as a business asset.
With Your Consent: We may disclose your Personal Data for any other purpose with your explicit consent.
Aggregated or Anonymized Data: We may share aggregated or anonymized information that does not directly identify you for research, historical, or public interest purposes related to architectural heritage.

7. International Data Transfers

Your Personal Data may be transferred to, and processed in, countries other than the country in which you are resident. These countries may have data protection laws that are different from the laws of your country. Our primary servers are located in [e.g., Canada]. However, our service providers may operate in other countries, including the United States.

When we transfer Personal Data from the European Union or United Kingdom to a country not deemed to provide an adequate level of data protection, we implement appropriate safeguards as required by law, such as Standard Contractual Clauses approved by the European Commission, or rely on other legal mechanisms. You can obtain details of these safeguards by contacting us.

8. Data Security

We have implemented technical and organizational measures designed to secure your Personal Data from accidental loss and from unauthorized access, use, alteration, and disclosure. These measures include encryption, firewalls, access controls, and secure server infrastructure.

However, the transmission of information via the internet is not completely secure. Although we do our best to protect your Personal Data, we cannot guarantee the absolute security of data transmitted to our Site. Any transmission is at your own risk.

9. Cookies and Similar Tracking Technologies

Our Site uses cookies and similar tracking technologies to distinguish you from other users. This helps us provide you with a good experience when you browse our Site and also allows us to improve our Site.

What are cookies? A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer if you agree.

We use the following types of cookies:

Strictly Necessary Cookies: Required for the operation of our Site. They include, for example, cookies that enable you to log into secure areas.
Analytical/Performance Cookies: Allow us to recognize and count the number of visitors and see how visitors move around our Site. This helps us improve the way our Site works.
Functionality Cookies: Used to recognize you when you return to our Site. This enables us to personalize our content for you, greet you by name, and remember your preferences.
Targeting/Advertising Cookies: Record your visit to our Site, the pages you have visited, and the links you have followed. We may use this information to make our Site and any advertising displayed on it more relevant to your interests. We may also share this information with third parties for this purpose.

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this Site may become inaccessible or not function properly. For more detailed information on the specific cookies we use, please contact us or refer to our dedicated Cookie Banner/Preference Center on the Site.

10. Data Retention

We will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy, or as required to comply with our legal obligations, resolve disputes, and enforce our agreements. Criteria used to determine retention periods include:

The length of time we have an ongoing relationship with you (e.g., for as long as you have an account or remain subscribed to our newsletter).
Whether there is a legal obligation to which we are subject (e.g., certain laws require us to keep records of financial transactions for a specific period).
Whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation, or regulatory investigations).

11. Your Data Protection Rights

Depending on your location and applicable data protection laws (such as the GDPR), you may have the following rights regarding your Personal Data:

Right of Access: You have the right to request copies of your Personal Data.
Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
Right to Erasure ("Right to be Forgotten"): You have the right to request that we erase your Personal Data, under certain conditions.
Right to Restrict Processing: You have the right to request that we restrict the processing of your Personal Data, under certain conditions.
Right to Object to Processing: You have the right to object to our processing of your Personal Data, under certain conditions, including for direct marketing purposes.
Right to Data Portability: You have the right to request that we transfer the data we have collected to another organization, or directly to you, under certain conditions.
Right to Withdraw Consent: Where we rely on your consent to process your Personal Data, you have the right to withdraw that consent at any time. This does not affect the lawfulness of processing based on consent before its withdrawal.
Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority in your country of residence if you believe our processing of your Personal Data infringes applicable law.

To exercise any of these rights, please contact us using the details provided in Section 14 (Contact Information). We may need to verify your identity before responding to your request. We will respond to all legitimate requests within one month, as required by law.

12. Children's Privacy

Our Site is not intended for children under the age of 16. We do not knowingly collect Personal Data from children under 16. If you are a parent or guardian and believe your child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from a child under 16 without verification of parental consent, we will take steps to remove that information from our servers.

13. Third-Party Links

Our Site may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

14. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top. We may also provide notice via email or a prominent notice on our Site if changes are material. You are advised to review this Privacy Policy periodically for any changes.

15. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, or if you wish to exercise your data protection rights, please contact our Data Controller at:

New France Architectural Heritage
[Insert Physical Address, if applicable]
Email: privacy@NouvelleFranceHeritage.com

For users in the European Union, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement.