Privacy statement
Who is responsible
This site, www.jaservices.ca, is operated by J.A. Services (Joe Abdo), an independent IT and web services business based in Montreal, Quebec.
Under Quebec's Law 25, every organization must name a person responsible for the protection of personal information. For J.A. Services, that person is Joe Abdo. You can reach him directly at [email protected].
What this site does not do
It is worth stating plainly, because it is unusual:
- There is no analytics on this site. No Google Analytics, no Tag Manager, no Meta pixel, no heatmaps, no session recording.
- There are no advertising or tracking cookies, and no third-party marketing scripts.
- Your information is never sold, rented or shared for anyone else's marketing.
- You are not added to a newsletter because you used a form.
Information collected, and why
Nothing is collected simply because you read a page. Information is only collected when you choose to send it.
Contact form. Your name, email address, subject and message, plus the language you were reading in. This is emailed to me so I can reply. It is not stored in the website database.
Training booking request. Business name, contact person, email, phone, number of participants, address when the session is in person, your preferred date and time, and any notes. Your IP address is recorded with the request. This is stored in the site and emailed to me, so I can confirm the session and get back to you.
Free site scan. The domain you asked me to analyze, the resulting scores and the language you used are stored as a record of the scan. Your IP address is not stored with that record; it appears in the notification email sent to me, and a one-way hash of it is kept for up to one hour to enforce the scan rate limit. If you then ask for a follow-up, the name, email and phone you provide are added to that record.
Server logs. The hosting provider keeps standard technical logs, including IP addresses, for security and troubleshooting.
Cookies
This site sets exactly one cookie, and it is not used for tracking.
ja_lang gives the site your language choice: it remembers whether you chose French or English, so returning visitors land in the right language. It is set by your browser, holds only fr or en, and expires after 90 days. Deleting it simply means the site shows French again by default.
Server-side caching (LiteSpeed, Redis) speeds the site up but stores no personal information about you.
Third parties
A small number of external services are involved in loading or operating this site. Each one is listed here, with what it receives:
- Google Fonts (fonts.googleapis.com, fonts.gstatic.com): serves the typeface. Your browser's request means Google receives your IP address.
- Google favicon service: some client logos in the "Trusted by" section are fetched as site icons, which likewise sends your IP address to Google.
- HubSpot: only if you click through to book a call. The booking itself happens on HubSpot's page, under HubSpot's own privacy terms.
- n0c: the hosting provider. Servers are located in Canada.
- Email delivery: form notifications and confirmations are sent through an authenticated SMTP provider.
Where your information is stored
The website, its database and its backups are hosted on servers physically located in Canada. Nothing you submit through a form on this site is stored outside Canada.
The exceptions are the third parties above: if you book through HubSpot, or when your browser loads fonts from Google, those companies process data on their own infrastructure, which may be outside Canada.
How long it is kept
Training booking requests and scan records are kept for 24 months, then deleted. Contact form messages live in my mailbox and are kept only as long as they are useful for our business relationship.
You can ask me to delete your information sooner. See below.
Your rights
Under Law 25 and the federal PIPEDA, you can ask me to:
- confirm what information I hold about you, and give you a copy;
- correct anything inaccurate or incomplete;
- delete your information;
- stop using it, or withdraw a consent you gave earlier;
- provide it in a structured, commonly used technical format (portability);
- de-index a link that would let someone find information about you.
Write to [email protected] and I will answer within 30 days. There is no charge.
If you are not satisfied with my answer, you can file a complaint with the Commission d'accès à l'information du Québec.
Security
The site is served over HTTPS. Administrative accounts require two-factor authentication, the server runs a firewall with login-attempt blocking and file integrity monitoring, and backups are encrypted and stored separately. Access to form submissions is limited to me.
No system is perfect. If a breach ever presented a risk of serious harm, I would notify affected people and the Commission d'accès à l'information, as Law 25 requires.
Changes
If this statement changes materially, the date below changes with it and the previous version is replaced. This page is the current version.
Last updated: September 3, 2026