Privacy Policy

1) Who are we?

​

The website hypnoflows.com (the "Site") is operated by Hypnoflows, a company located at 4577 Hingston Avenue, H4A 2K2 Montreal, QC, Canada ("Hypnoflows," "we").

Privacy Officer (Quebec) / Privacy Contact: Eric OVADIA – eovadia@esfh.fr

​

2) What does this policy cover?

​

This policy describes how we collect, use, disclose, retain, and protect your personal information when you:

• visit the Site;

• fill in a form (e.g. stress, sleep, weight, phobias, addictions, confidence, exams, etc.);

• purchase an access / a session;

• receive an email (audio link, support);

• communicate with us (email, WhatsApp if enabled).

3) What information do we collect?

​

Depending on your journey, we may collect:

​

A. Identity and contact

 

First name, last name (if provided), email, phone number (if WhatsApp / support), language, country/region.

​

B. Payment information (processed by Stripe)

 

Information required for payment and anti-fraud purposes (we do not store your card numbers; they are processed by our payment provider).

​

C. Data related to your request (Hypnoflows forms)

​

Information you enter to personalize the script (life context, objectives, habits, triggers, etc.).

​

​

Sensitive information

Depending on the nature of the information you choose to share, some data may be considered sensitive under Quebec legislation, particularly when it relates to your emotional or personal wellbeing. This information is subject to enhanced protection measures.

​

D. Technical data

 

IP address, device type, browser, pages visited, cookie identifiers, logs, performance and security data.

​

4) How do we collect this information?

​

We collect your information:

• when you enter it in our forms and fields on the Site;

• when you purchase a service;

• when you write to us;

• automatically through Site technologies (cookies, logs, anti-fraud/security tools).

5) Why do we use your information?

​

We use your information notably for:

Delivering the Hypnoflows service

 

Processing your request, generating a personalized script, and producing your audio;

 

Sending you the listening link and managing your access.

​

Payments and billing

 

Processing payment, preventing fraud, and managing accounting.

 

Support and customer relations

 

Answering your questions, managing requests and complaints.

 

Service improvement and security

 

Maintaining the Site, preventing misuse, ensuring security, and carrying out overall analyses (ideally on aggregated/limited data).

 

Marketing (if applicable)

 

Sending you communications if you have consented or if the law permits (you can unsubscribe at any time).

​

6) On what basis may we process your information?

 

Depending on the case:

• Execution of a contract (delivering the requested session / access);

• Consent (e.g. sensitive information in the form, marketing, certain cookies);

• Legal obligations (accounting, incident management, etc.);

• Legitimate interest (security, fraud prevention, reasonable improvement).

Under the Quebec regime, consent must be informed, freely given, and for specific purposes. For sensitive information, consent must be expressed explicitly.

​

7) With whom do we share your information?

​

We limit access to those who need it (on a "need-to-know" basis).

​

We may share certain personal information with technology providers who help us operate the service, notably for:

• site hosting and security;

• form collection;

• payment processing;

• transactional email delivery;

• automated content generation (text and audio);

• secure content delivery.

These providers act solely on our instructions and are bound by confidentiality and security obligations.

​

We may also share information:

• if required by law (legal order, compliance);

• to protect our rights, our security, or to prevent fraud.

8) Transfers outside Quebec / outside Canada

​

Some providers may process data outside Quebec (and sometimes outside Canada), for example in the United States (some providers operate globally).

​

In accordance with Quebec legislation, we assess the risks associated with these transfers and put in place contractual and organizational measures to ensure the protection of your personal information.

​

9) Cookies, measurement tools, and preferences

​

We use cookies and similar technologies to:

• operate the Site (security, session);

• measure audience and improve the experience;

• (where applicable) advertising / remarketing.

Your choices: you can reject certain cookies via the banner or your browser settings. Some features may then be limited (e.g. saved preferences).

​

10) Automated decisions / personalization

​

Hypnoflows may use automated processing to:

• transform your answers into a personalized script;

• generate a corresponding audio track.

If, in a particular case, a decision concerning you were based solely on automated processing as defined under Quebec law, you could request additional information and the opportunity to present your observations to a person able to review the decision.

​

11) How long do we retain your information?

​

We retain your information only for as long as necessary:

• to deliver the service and provide support;

• to comply with our legal obligations (e.g. billing);

• to prevent fraud and ensure security.

Proposed framework :

• Order / payment data: duration required by law and accounting;

• Form responses: 24 months unless a deletion request is made;

• Technical / security logs: 12 months;

• Transactional emails: according to our providers and our needs for proof / support.

12) How do we protect your information?

​

We implement reasonable measures, adapted to the sensitivity of the data (access controls, segmentation, logging, technical and organizational measures, and contractual clauses with providers).

​

13) Your rights

​

Depending on your place of residence and applicable laws, you may notably request:

• access to your personal information;

• rectification if any information is inaccurate;

• withdrawal of consent (where applicable);

• to file a complaint through our process and with the relevant authorities.

How to exercise your rights:

Write to eovadia@esfh.fr and include:

• your name, the email address used, and the subject of your request (access, rectification, deletion, portability);

• any useful details (time period, form concerned).

We may request reasonable identity verification.

​

14) Privacy incidents

​

In the event of a privacy incident presenting a risk of serious harm, notification to the individuals concerned and the relevant authority may be required. Quebec law also requires that a record of incidents be maintained.

​

15) Services intended for adults / minors

​

Our services are primarily intended for adults. If a minor uses the service, parental or guardian consent may be required depending on the age and applicable law.

​

16) Updates

​

We may update this policy. The online version is the applicable version. Under Quebec law, updates must also be communicated by notice.

​

17) Contact us

​

For any question regarding privacy:

Eric OVADIA – eovadia@esfh.fr – 4577 Hingston Avenue, H4A 2K2 Montreal, QC, Canada