Privacy Policy

Caroline Thibault is responsible for protecting personal information associated with this website.

For a privacy question, access or correction request, or complaint, email carolinethibault.art@gmail.com.

When you use the contact form or write directly by email, the following information may be collected:

• your name;
• your email address;
• the subject you select;
• your message and any information you choose to include in it.

This information is used only to receive and reply to your inquiry and to follow up on the conversation. It is not used for a newsletter or advertising without separate consent.

Providing this information is optional. Without a reply address or a message, however, it may not be possible to respond.

The form is processed by Formspree, which sends the message to Caroline Thibault’s Gmail address. The website is hosted by Vercel. These providers may process information required to operate and secure their services, including an IP address, browser type, request date and time, and the data submitted through the form.

Formspree, Vercel, and Google may process or host data outside Québec, including in the United States, where rules governing access by public authorities may differ from those in Québec.

The website currently uses no analytics, profiling, or advertising tools and no cookies for those purposes.

Caroline Thibault is normally the only person who reads messages. Personal information is not sold or rented. It may be accessible to the technical providers named above only to provide their services, or disclosed where required by law.

Submissions remain in the Formspree archive for 30 days. Messages received by email are kept for up to 24 months after the last exchange and then deleted when no longer needed.

Some information may be kept longer where a conversation leads to a transaction, commission, legal obligation, or ongoing administrative record. It is then retained only for as long as required for that purpose.

Reasonable safeguards are used, including two-factor authentication, restricted access, HTTPS encryption in transit, and safeguards provided by service providers. No system, however, can guarantee absolute security.

You may ask to access personal information held about you, correct it, or, where the law permits, have it deleted. You may also withdraw consent to future use or disclosure, subject to applicable legal requirements.

Email your request with “Privacy” in the subject line. Reasonable identity verification may be required. The request or complaint will be reviewed diligently and answered within the period required by applicable law.

This policy may be updated if the website’s practices or applicable requirements change. The latest update date will appear at the top of this page.