Privacy Policy
Last updated: April 26, 2026
This site is operated by Marcel Gelinas, an independent consultant based in Ontario, Canada. This policy explains what information is collected when you visit marcelgelinas.com or contact me through the site, how it is used, and the choices you have. The site complies with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
Who is responsible for your information
Marcel Gelinas is the data controller. For any privacy question, data access request, or correction, email marcel@marcelgelinas.com.
What is collected
Form submissions. When you submit the audit-request form on /book, I collect the name, email address, business name, website, industry, team size, budget range, and free-text description you provide. The contact form on /contact collects your name, email, subject, and message.
Anti-bot data. Cloudflare Turnstile runs on form pages and may receive a short-lived challenge token plus limited browser signals to verify you are human. Cloudflare does not receive form contents.
Analytics. Google Analytics 4 (measurement ID G-6Y9MMBQ8L3) collects standard usage data: pages viewed, approximate location (city level, derived from IP), device type, referrer, and form-submission events. IP addresses are truncated by Google before storage. No cross-site advertising signals are enabled.
Server logs. Vercel, the host, retains short-term request logs (IP, user agent, path) for security and operations.
How your information is used
- To respond to your enquiry, schedule the audit call you requested, and follow up about the work.
- To send a confirmation email acknowledging your form submission.
- To understand how visitors use the site and improve it.
- To detect and block spam, abuse, and automated submissions.
Your information is never sold, rented, or used to train third-party AI models.
Where your information is stored
Form submissions are routed through a self-hosted n8n workflow running on a Vultr server in Toronto, Canada, and stored in Airtable (United States) as a CRM record. Confirmation and notification emails are sent through Resend (United States). Analytics data is processed by Google Analytics (United States). The site itself is hosted by Vercel (United States).
When data is stored or processed outside Canada, it is subject to the laws of that jurisdiction. I rely on the contractual and security commitments of these processors and use them only for the purposes described above.
Cookies
The site sets a small number of first-party cookies for Google Analytics (e.g. _ga, _ga_*) to distinguish visitors and measure engagement. Cloudflare Turnstile may set transient cookies for bot verification. You can block or delete these in your browser settings without affecting your ability to use the site.
How long it is kept
- Form data: retained in Airtable for as long as it is useful for the consulting relationship, then archived or deleted on request.
- Email correspondence: retained while the relationship is active and for up to 24 months after the last interaction, unless you ask for deletion sooner.
- Analytics: Google Analytics retains event-level data for 14 months by default.
- Server logs: retained by Vercel according to its standard log policy (typically days, not months).
Your rights
Under PIPEDA you have the right to access the personal information held about you, request correction of inaccurate information, withdraw consent, and ask for deletion. To exercise any of these rights, email marcel@marcelgelinas.com and I will respond within 30 days. You also have the right to file a complaint with the Office of the Privacy Commissioner of Canada.
Security
Form submissions are sent over HTTPS. Webhook endpoints are protected by a shared secret, Cloudflare Turnstile, and a honeypot field to block automated abuse. API keys for Resend, Airtable, and other services are stored as environment variables and rotated when needed. No system is perfectly secure; if you believe your information has been compromised, email me right away.
Changes to this policy
I will update this page when the practices above change. The “Last updated” date at the top reflects the most recent revision. Material changes affecting existing contacts will be communicated by email.
Contact
Marcel Gelinas
Ontario, Canada
marcel@marcelgelinas.com