Privacy policy

The person in charge of the protection of personal information at « Legal name inc. » is « Officer's name ». For any question, access request or complaint regarding your personal information, write to support@cadanse.app.

Depending on your relationship with Cadanse, we may collect:

• Studios (customers): studio name, contact details, billing and subscription information.
• Parents and responsible adults: name, email, phone, address, emergency contact, payment history and receipts.
• Students, including minors: name, date of birth, classes taken, attendance, costume measurements, and — only if the studio enters them — medical notes (sensitive information).
• Payment data: processed by our payment providers (see §6). We do not store card numbers; we keep a transaction identifier and status.
• Technical data: sign-in information (authenticated sessions) and logs needed for operation and security.

We use this information to:

• provide the service (registrations, classes, attendance, payments, receipts, recital);
• communicate with you (confirmations, reminders, notices);
• produce tax receipts and, where applicable, required statements;
• ensure security, prevent fraud and meet our legal obligations.

We do not use your information for automated decisions producing a legal effect, nor for advertising profiling. We never sell your personal information.

Collection is based on your consent and on the need to perform the service. Where required, consent is clear, free and informed, and given for specific purposes. The studio acts as the controllerof its families' information; Cadanse processes it on the studio's behalf, according to its instructions and these terms. For a child under 14, consent is given by the holder of parental authority. You may withdraw your consent at any time (see §8), subject to information we must retain by legal obligation.

Data is hosted in Canada (region ca-central-1). Sensitive information — medical notes, social insurance number (Relevé 24), payment tokens — is encrypted at rest (AES-256-GCM). Access is protected by authentication, per-studio isolation and logging of sensitive actions. Communications are encrypted in transit (TLS).

We rely on providers that process certain information solely to deliver the service, bound by contract:

• Amazon Web Services (AWS) — hosting and database, Montréal region (Canada).
• Stripe and Square — payment processing.
• Brevo — sending of transactional emails.

Some providers may process data outside Québec. We carry out a privacy impact assessment before any disclosure outside Québec, as required by Law 25.

We keep information for as long as necessary for the purposes above and to meet our legal and tax obligations (for example, keeping receipts). When no longer needed, it is securely destroyed or anonymized.

In accordance with Law 25, you may:

• access your information and obtain a copy;
• have it corrected if it is inaccurate or incomplete;
• withdraw your consent or request deletion, subject to the law;
• request the portability of your computerized information;
• request de-indexing or the cessation of dissemination of information whose dissemination causes you harm, in the cases provided by Law 25.

To exercise a right, write to support@cadanse.app. We respond within the time limits set by law (generally 30 days). If our response does not satisfy you, you may file a complaint with the Commission d'accès à l'information du Québec (cai.gouv.qc.ca).

In the event of an incident presenting a risk of serious harm, we take reasonable measures to contain it, notify the individuals concerned and the Commission d'accès à l'information, and record the incident in a register, as required by Law 25.

A cookie is a small file placed on your device. We use only cookies that are strictly necessary to operate the Service:

• Authentication session — securely keeps you signed in once you have authenticated. Without this cookie, you could not access your account.
• Language preference (NEXT_LOCALE) — remembers your French or English choice to display the Service in your language.
• Theme preference (NEXT_THEME) — remembers your light or dark appearance choice. No personal data, no tracking.

These cookies are essential: they serve only to provide the Service and require no separate consent. We use no advertising cookies, no third-party trackers and no behavioural-analytics or profiling technology.

In accordance with Law 25, where a technology allows a person to be identified, located or profiled, its settings must offer the highest level of privacy by default. Since the Service activates no such technology, the most protective configuration is the default state — there is nothing for you to turn off. You may also block or delete cookies in your browser, but blocking the session cookie will prevent you from using your account.

We may update this policy. The effective date at the top of the page indicates the current version; significant changes will be flagged.