Privacy Policy
Last updated: July 19, 2026
FilmDNA is operated by RA7 Développement et intégration digitale inc. ("FilmDNA", "we"), a Quebec company with its head office at 111, rue des Érables, Sainte-Sophie (Québec) J5J 1P4.
This policy explains, in plain language, what personal information we collect, why, how we protect it, and what your rights are. It is written in accordance with Quebec's Act respecting the protection of personal information in the private sector (as modernized by Law 25).
1. Person in charge of the protection of personal information
Patrick Racette
Email: [email protected]
Mailing address: 111, rue des Érables, Sainte-Sophie (Québec) J5J 1P4
Any question, access request, or complaint about your personal information may be addressed to them. We respond within 30 days.
2. Information we collect
We collect only the information necessary for the purposes described in section 3:
Identity and contact information — name, email address, phone number, billing and shipping addresses, provided when you place an order or write to us.
Order and payment information — details of your orders and purchase history. We never collect or store your payment card number: payments are processed directly by our provider Stripe, which sends us only a transaction confirmation and the last four digits of the card.
Content you provide to us — files you upload or send to us for custom printing (photographs, personal videos, artwork). See section 5, which is dedicated to them.
Technical information — IP address, browser type, and server logs, generated automatically when you visit, solely for site security and proper operation.
Communications — the content of your emails or messages when you contact us.
3. Why we collect it
We use your information to: process, produce, and deliver your orders; communicate with you about your order (confirmations, proofs, delivery tracking); answer your questions; meet our legal obligations (notably tax and accounting); keep the site secure and prevent fraud; and, only if you have consented, send you promotional communications (see section 8).
We do not use your information for other purposes without first obtaining your consent. We never sell your personal information.
4. Cookies
On your first visit, a banner lets you accept or refuse — each as easily as the other — non-essential cookies used for audience measurement and advertising: Google Analytics 4, Google Ads, and Meta (Pixel/Conversions API). These cookies are off by default and load only after you consent, in accordance with section 8.1 of Law 25.
Strictly necessary cookies (shopping cart, session, security, and the fdna_consent cookie that records your consent choice) do not require consent. You can change or withdraw your consent at any time via the "Manage cookies" link in the site footer.
5. Files you entrust to us for custom printing
When you entrust us with personal photographs or videos (for example, a "DNA" artwork created from a wedding video), these files may contain intimate personal information. We handle them with particular care:
- They are used exclusively to produce your order.
- They are never used for promotion, portfolio, or example purposes without your explicit written permission.
- Access is limited to the person producing your order.
- They are deleted from our systems 42 days after your order is delivered, unless you ask us in writing to keep them for a future reprint.
- The generated artwork (the "DNA" image itself) is kept with your order file to allow reprints and after-sales service.
6. Who we share your information with
We disclose your information only to the service providers necessary to fulfill your order, each limited to its function:
- Stripe — payment processing;
- Delivery carriers — delivery (name, address, phone). The carrier may vary from one order to the next;
- Resend — sending order confirmations and shipping notices;
- Google (Analytics 4 and Ads) — site measurement and advertising, only if you have consented to non-essential cookies (section 4);
- Meta (Pixel and Conversions API) — advertising, only if you have consented to non-essential cookies (section 4);
- public authorities, where required by law.
Our infrastructure is self-hosted: we do not entrust the hosting of your information to any external provider.
Some of these providers store or process information outside Quebec, notably in the United States — this is the case for Google and Meta. Before using these providers, we assessed, in accordance with Law 25, the sensitivity of the information, the purposes of its use, and the protections offered, and concluded that it receives adequate protection, notably through contractual commitments.
7. Retention periods
We keep your information only as long as necessary: order and invoicing records, 7 years (tax obligations); files uploaded for custom printing, 42 days after delivery (section 5); email correspondence, 2 years after last contact; technical logs, 30 days. At the end of these periods, information is securely destroyed or anonymized.
8. Promotional communications
We send promotional emails only if you checked the sign-up box (unchecked by default) or subscribed to our newsletter. Every email contains an unsubscribe link, honored without delay. Transactional emails (order confirmation, shipping) are not promotional communications.
9. Your rights
You may at any time: access the information we hold about you; have it corrected if inaccurate or incomplete; withdraw your consent to a given use; request its deletion (subject to our legal retention obligations); and obtain the computerized information you provided to us in a structured, commonly used technological format (portability).
To exercise a right, write to [email protected]. We confirm your identity, then respond within 30 days. If you are dissatisfied with our response, you may file a complaint with the Commission d'accès à l'information du Québec (www.cai.gouv.qc.ca).
10. Security
We apply reasonable security measures proportionate to the sensitivity of the information: encrypted communications (HTTPS/TLS), restricted data access, strong authentication on our systems, and separated environments. No system is infallible; in the event of a confidentiality incident presenting a risk of serious injury, we will notify you and the Commission d'accès à l'information, as the law requires.
11. Minors
Our site is not directed at persons under 14 and we do not knowingly collect their personal information.
12. Changes
We may update this policy. The update date appears at the top of the page; in the event of a significant change, we will indicate it visibly on the site.