The Nutcache Privacy Policy
This Privacy Policy applies to the collection, use, disclosure and retention of the information provided by you as users of our Services (including any mobile applications developed for iOS, Android or other platforms) or visitors of our Website www.nutcache.com owned and controlled by Nutcache Technologies Inc. (“Nutcache,” “we,” “us,” “our”). Nutcache Technologies Inc has been awarded Trust Guard’s Privacy Seal signifying that this privacy policy and practices have been reviewed by Trust Guard for compliance with Trust Guard’s program requirements including transparency, accountability and choice regarding the collection and use of your personal information. The Trust Guard program does not cover information that may be collected through downloadable software. Trust Guard’s mission, as an independent third party, is to accelerate online trust among consumers and organizations globally through its leading privacy trustmark and innovative trust solutions. If you have questions or complaints regarding our privacy policy or practices, please contact us at [email protected]. If you are not satisfied with our response you can contact Trust Guard. The Trust Guard certification covers information collected on our website. Nutcache complies with the Act respecting the Protection of personal information in the private sector (RSQ, c P-39.1), also known as Loi 25.
Nutcache has appointed a Privacy Officer (DPO) responsible for the protection of personal information. You can contact our Privacy Officer at [email protected]. Nutcache is committed to storing and processing your content and personal information on highly secured servers at Nutcache’s offices located in Laval, Quebec and therefore is subjected to the laws and jurisdictions of Canada. By using the Services, you consent to the collection, use and disclosure of your personal information in accordance with this Privacy Policy. If you do not agree with the privacy policy, refrain from using the services. You can submit your questions pertaining to this Policy to our Privacy officer at [email protected]. Nutcache conducts Privacy Impact Assessments (PIAs), also known as Évaluations des facteurs relatifs à la vie privée (EFVP), prior to launching any new project or system that involves the collection, use or disclosure of personal information.
Internal Governance and Personal Information Protection Policies
Nutcache has implemented rigorous internal policies governing the access, use, disclosure, retention, and destruction of personal information. These policies define employee roles and responsibilities throughout the data lifecycle and include, among others, an information security policy, a personal data management policy, and a subcontractor management policy. All employees undergo mandatory data privacy training and are subject to sanctions in case of non-compliance.
Privacy by Default
Nutcache applies the privacy by default principle by limiting the collection, use, disclosure, and retention of personal information to what is strictly necessary for providing its services, without user intervention. Default settings therefore offer the highest level of privacy.
Accountability and Complaints
Nutcache allows users to append written comments to their record in cases where a request for rectification of personal data is refused.
If you wish to file a complaint regarding the handling of your personal information, you may contact Nutcache’s Privacy Officer at [email protected].
Your complaint should include a clear description of the concern and your contact information. Nutcache commits to acknowledging receipt of all complaints within seven (7) business days and to providing a written response within thirty (30) days.
If you are not satisfied with the response provided by Nutcache, you may file a formal complaint with the Commission d’accès à l’information du Québec (CAI).
Breach Notification Procedure
Nutcache follows a standardized process for breach notification. Affected individuals are contacted within 72 hours of confirmation of a breach that presents a real risk of significant harm. A registry of all incidents is maintained, and the Commission d’accès à l’information is notified when required and can be transmitted the registry.
Effective Date
This Privacy Policy was last updated on June 23, 2025.
Definitions
“Service” or “Services” or “Nutcache Services” shall mean the Nutcache.com Website, application and software offering functionalities of project, task, time, expenses and billing process management as well as any and all other services offered and available from time to time at Nutcache.com. “Content” shall mean content such as data, text, images, contact information and links to content submitted to Nutcache.com as part of your use of the Service.
Collecting Personal Information
Nutcache collects a variety of information that you provide directly to us, including personal and financial info gathered via: The product subscription process, The contact form, The live chat, Document downloads (white papers, ebooks). The newsletter registration Specifically, in the course of providing the Services: Nutcache collects personal information about you when you register with us. Said information can include, among others, your name, email address, and passwords, and other personal information (collectively, “Personal information”); Nutcache may also collect Identifiable Information from Visitors when they communicate with us about our Services or during interactions with our Users; Nutcache collects information about your clients so that you may set them up in the system. Information may include their name, email address, address, and phone number; We will collect information about your employees if you wish to add them to your account; we will collect their name, email address, phone number, date of birth and hire date; If you wish to create a new supplier we will ask for name, email address, address and phone number.
Nutcache’s services are not intended for children under 14. We do not knowingly collect personal information from minors.
Use of Your Personal Information
Nutcache will only use Personal information to:
Provide the Services you request; Time track by employee, process invoices, payments, expenses and run reports; Market Nutcache’s Services that may be of interest to you; and, Conform to request from authorities and legal obligations in accordance with the Act respecting the Protection of personal information in the private sector (RSQ, c P-39.1), with the General Data Protection Regulation (“GDPR”) regulation, and other applicable laws. Add clients to your account so that you may track time spent on them, create invoices, run reports, and bill them for services provided; Add employees to your account so that they may also track time spent on clients, create invoices, run reports and bill clients for services; Adding a supplier will allow you to contact that supplier when you need them to provide a service on your behalf. This information is only stored in our system so that you may use it to conduct business such as log a payment, process an order or invite them to use Nutcache.
Legal basis: These actions are performed under the legal basis of contract performance (you have agreed to these operations by subscribing to our service).
If you wish to subscribe to our newsletter or marketing emails, we will use your name and email address to send the newsletter or marketing to you. Out of respect for your privacy, we provide you a way to unsubscribe, you may do so by using the unsubscribe link located at the bottom of each communication or by emailing us at [email protected].
Legal basis: Consent (you must actively opt in to receive these communications).
We will send you service-related announcements on rare occasions when it is necessary to do so. For instance, if our service is temporarily suspended for maintenance, we might send you an email. Based upon the personal information you provide us, we will send you a welcoming email to verify your email address. We will also communicate with you in response to your inquiries, to provide the services you request, and to manage your account.
Legal basis: Contract performance.
Nutcache will share your personal information with third parties only in the ways that are described in this privacy policy. We do not sell your personal information to third parties. We may provide your personal information to companies that provide services to help us with our business activities such as offering customer service or sending out emails on our behalf. These companies are authorized to use your personal information only as necessary to provide these services to us. Nutcache requires all third-party service providers that process personal information on our behalf to commit contractually to comply with privacy and data protection obligations equivalent to those imposed by the Loi 25. Nutcache may also use and disclose Personal information as required by law, such as to comply with a subpoena, other legal process, to investigate and help prevent potentially unlawful activity or activities that threaten the integrity of our Service or network, to investigate fraud or violations of our Terms of Service, when we believe in good faith that disclosure is necessary to protect our rights, your safety or the safety of others, or respond to a government request. In the event of a privacy incident involving personal information that poses a risk of serious harm, Nutcache will notify the Commission d’accès à l’information (CAI) of Quebec as well as any individuals whose data was affected, as required by the Loi 25. Nutcache maintains a registry of such incidents in compliance with its legal obligations. If we are involved in a merger, acquisition, or sale of all or a portion of our assets, you will be notified via email and/or prominent notice on our Website of any change in ownership or uses of your personal information, as well as any choices you may have regarding your personal information.
Access and Rectification
You can access, correct, delete inaccuracies, update, and rectify the Personal information we maintain by accessing your company settings and user profile or by emailing us at [email protected]. We will respond to your access request within 90 days. You also have the possibility to export this information and that of all members of your organization in accordance with the General Data Protection Regulation (“GDPR”) regulation.
Under Quebec’s Loi 25, you also have the following rights:
• Right to data portability: Request a copy of your data in a structured digital format
• Right to restrict processing: Limit how we use your data in certain circumstances
• Right to be informed of automated decision-making: You will be informed if your data is used for automated profiling
• Right to lodge a complaint: You may contact the Commission d’accès à l’information du Québec if unsatisfied with our response
To exercise these rights, contact our Privacy Officer at [email protected].
Nutcache does not use your personal information to make any automated decisions, including profiling, that may significantly affect you.
Data Retention
We will retain your data even after you unsubscribe from our Services and use your information to facilitate your account reactivation, and if necessary to comply with our legal obligations, resolve disputes and enforce our commitments. Should you wish to obtain the total deletion of your data, please make the request by contacting [email protected]. Your data will be deleted within 3 months (90 days) following your request.
Nutcache retains personal data according to the following durations:
Data Type |
Retention Period |
User account data |
As long as the account is active. Deleted within 90 days of account termination. |
Billing and financial data |
7 years after the end of fiscal year (legal obligation). |
Employee profile data |
As long as they are associated with an active user account. Deleted 90 days after. |
Marketing & newsletter data |
Until the user unsubscribes. Immediately deleted upon request. |
Support interactions |
Up to 2 years after resolution, for quality assurance and legal defense. |
Retention justification: In accordance with legal, contractual, or operational requirements, and to ensure continuity of service.
Nutcache conducts regular reviews and audits of its privacy practices to ensure ongoing compliance with applicable laws including Loi 25. Nutcache offers mandatory privacy training to its staff and maintains internal governance rules concerning the access, use, and handling of personal information.
Other Information Collected
Nutcache and authorized third parties, may also collect and share with third parties, other information when you use our Services or visit our Website. Such information may include Internet browsing history, device used, demographic and location data, preferences and use of the Services.
From analytics tools
Nutcache also uses third-party web analytics services (e.g., Google Analytics) to collect and analyze the information discussed above, and to engage in auditing, research and reporting. Google Analytics is an analytics service provided by Google Inc. Google Analytics uses cookies and similar technologies to collect information and evaluate how our visitors and users use our website. The information is transmitted to Google to evaluate visitors activity and compile statistical reports. To prevent Google Analytics from using your information for analytics, you may install the Google Analytics Opt-out Browser Add-on that you will find here: https://tools.google.com/dlpage/gaoptout
From social media
We use social media widgets on our website to engage with our visitors who may post links to third party websites. However, these websites have their own privacy policies and Nutcache does not accept any responsibility or liability for their policies. You should also adjust privacy settings on your account on any third-party website to match your preferences.
From online advertising
Third parties or affiliates may administer Nutcache banner advertising programs and other online marketing activities. For example, a third-party provider may use the fact that you visited the Nutcache website to target online ads for Nutcache services to you on non-Nutcache websites.
Log Files
As true of most Websites, we gather information automatically and store it in log files. This information includes Internet protocol (IP) addresses, browser type, Internet service provider (ISP), referring/exit pages, operating system, date/time stamp, and clickstream data.
We use this information, which does not identify individual users, to analyze trends, to administer the site, to track users’ movements around the site and to gather demographic information about our user base as a whole.
Cookies
The provision of the Services requires the placement of a cookie. A “Cookie” is an information file that may be placed on your computer by a Website for the purpose of facilitating and improving the use of our Services and Website. If you choose to block the placement of cookies, you may not be able to use certain features of Nutcache’s services. We do not link the information we store in cookies to any personal information you submit while on our site.
Nutcache uses a cookie consent banner on its website in compliance with the Loi 25. This banner gives users the ability to consent or refuse non-essential cookies. It is integrated with our Google Tag Manager (GTM) to ensure no marketing or analytics tracking is activated without prior consent.
In addition to cookies, Nutcache and third-party advertisers may also use third-party cookies to anonymously track and analyze online activity and use of our Services and provide specific advertising. You may block or restrict the placement of third-party cookies or delete them from your browser by adjusting your Internet browser settings or preferences. In such case, you may still use Nutcache’s services, but it may affect some of its functionality. The use of cookies by third parties is not covered by our privacy policy. We do not have access or control over these cookies.
Clear Gifs (Web Beacons/Web Bugs)
We employ, or our third-party tracking utility partner employs, a software technology called clear gifs (a.k.a. Web Beacons/Web Bugs), that help us better manage content on our site by informing us what content is effective. Clear gifs are tiny graphics with a unique identifier, similar in function to cookies, and are used to track the online movements of Web users. In contrast to cookies, which are stored on a user’s computer hard drive, clear gifs are embedded invisibly on Web pages and are about the size of the period at the end of this sentence. We do not tie the information gathered by clear gifs to our customers’ personally identifiable information.
Your Content
If you preserve the confidentiality of your access codes and/or passwords, and subject to the present policy, only you will have access to your Content and Personal information. People you share Content with will only see the parts you grant access to.
Security
The security of your personal information is important to us. We follow generally accepted industry standards to protect the personal information submitted to us, both during transmission and once we receive it. No method of transmission over the Internet, or method of electronic storage, is 100% secure, however. Therefore, we cannot guarantee its absolute security.
Nutcache has implemented the following security mechanisms:
-
Information transmitted is securely encrypted using Secure Sockets Layer (SSL) software;
-
Access control.
We have also implemented two-factor authentication (2FA) where available, and we regularly update our internal systems and plugins to address known vulnerabilities.
Access to personal data is restricted to authorized employees whose roles require it, in accordance with our internal data governance policy. All authorized personnel receive mandatory privacy training.
Nutcache will continue to revise its policies and implement additional security features as new technologies become available. However, no system or service can give a 100% guarantee of security, especially a service that relies upon a public network such as the Internet. Therefore, there remains a risk that third parties may gain unauthorized access to your information.
You must ensure the confidentiality of the access codes and/or passwords used to access your account. You are responsible for all activity occurring under your account(s) and shall abide by all applicable laws in connection with your use of the Service, including those related to data privacy, and personal information. You shall notify Nutcache immediately of any unauthorized use of any password or account or any other known or suspected breach of security.
Technical and Organizational Security Measures
In addition to SSL encryption and 2FA, Nutcache performs vulnerability scanning, system access logging, regular penetration testing, and restricts data access based on least privilege. Data backups are encrypted and stored securely with access audits
Nutcache may use service providers or partners located outside the province of Québec to support its operations, including cloud hosting, technical support, and analytics. Prior to any such transfer of personal information outside of Québec, Nutcache conducts a Privacy Impact Assessment (PIA) to evaluate potential risks and ensure that the information will be adequately protected, in accordance with the requirements of Québec’s Act respecting the protection of personal information in the private sector (Loi 25).
Nutcache will only transfer personal data outside Québec when the PIA demonstrates that the data will receive protection equivalent to that provided under Québec law. All third-party vendors involved in such transfers are contractually required to comply with strict privacy and security obligations.
Links to Other Sites
This site contains links to other sites that are not owned or controlled by us. Please be aware that we are not responsible for the privacy practices of such other sites.
We encourage you to be aware when you leave our site and to read the privacy policies of each and every Website that collects personal information.
This privacy policy applies only to information collected by this site.
Public Forums
Our website offers publicly accessible community forums. You should be aware that any information you provide in these areas may be read, collected, and used by others who access them. To request removal of your personal information from our community forum, contact us at [email protected]. In some cases, we may not be able to remove your personal information, in which case we will let you know if we are unable to do so and why.
Changes to Privacy Policy
We may update this privacy statement to reflect changes to our information practices. If we make any material changes we will notify you by email (sent to the e-mail address specified in your account) or by means of a notice on this Site prior to the change becoming effective. We encourage you to periodically review this page for the latest information on our privacy practices.
Contact Us:
If you have any questions or suggestions regarding our privacy policy, please contact us:
Nutcache Technologies Inc.
A/S Marc Guévin
Marketing Associate Director
1270 Dagenais Blvd., West
Laval, QC
Canada H7L 5E3
Email: [email protected]