Ceptivo / Privacy
Draft — to be finalised before publication. The highlighted passages must be completed by Global360 Inc. Remove this banner once the blanks are filled and the text has been reviewed by legal counsel.
This policy is issued under Quebec's Law 25 — the Act to modernize legislative provisions as regards the protection of personal information, which amended the Act respecting the protection of personal information in the private sector (CQLR, c. P-39.1). It also addresses the Canadian federal legislation applicable to commercial activities.
The short version. global360inc.ca is a marketing website: it sets no cookies, runs no analytics, and collects nothing beyond what you voluntarily write in the contact form. Payment information is collected and held by Stripe, our payment provider; we never see your card number. We do not sell, rent or trade personal information — to anyone, ever.
Contents
Global360 Inc. is a company incorporated in Quebec, Canada. It designs, publishes and operates management software sold by subscription. Ceptivo is its engineering and go-to-market division; Ohadash is its software range for the OHADA region.
As Law 25 requires of every Quebec business, a person in charge of the protection of personal information has been designated: [name and title of the designated person], reachable at info@global360inc.ca. Requests for access, correction or withdrawal should be addressed to that person.
global360inc.ca is a marketing website. There is no account to create, no customer area, no cart. Only three things are worth mentioning.
If you choose to write to us through the form, we receive what you enter: your name, your email address, your phone number (optional), the type of project selected from the list, and your message. It reaches us as an email sent by our provider Resend. It is not stored in any database. We use it solely to reply and follow up — never for unsolicited marketing.
Like any website, ours is served by a host (Netlify) that keeps technical logs: IP address, date and time, page requested, browser type. They exist to run the site, protect it and diagnose failures. We do not consult them for any other purpose and do not combine them with other information.
The site loads its fonts from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). Your browser therefore discloses your IP address to Google when rendering the page. This is the only third party involved in simply reading the site. A content blocker is enough to avoid it: the site remains fully legible without those fonts.
The website uses no cookies. You will therefore never see a banner asking you to accept anything: there is nothing to accept. No analytics tool is installed — no Google Analytics, no social network pixel, no equivalent. No profiling, no cross-site tracking.
There is a single local storage entry: the key g360inc-lang, which remembers whether you read the site in French or English. It never leaves your device, is never transmitted to us, and cannot identify you. Clearing your browser's site data removes it.
This is a design decision, consistent with the privacy by default requirement introduced by Law 25: the most protective settings apply without you having to ask. Should we ever add a measurement tool, we would amend this policy before enabling it and would inform you.
Subscriptions to our software are processed by Stripe, a PCI-DSS Level 1 certified payment provider.
On our side we keep the billing information required for our books: customer identity, amounts, dates and invoices issued.
This policy covers the global360inc.ca website and the commercial relationship. The software we operate — Ohadash Finance, Ohadash HR and the others — holds the data you put into it: accounting entries, staff records, attendance sheets, sensor readings, depending on the product.
That data belongs to you and you remain its controller under the law. We are only its technical custodian and act solely on your instructions. We do not consult it, except where you ask us to in order to resolve a problem, where a maintenance operation requires it, or where the law compels us.
Every subscribing company is walled off inside the database itself, through row-level isolation rather than application code alone. You can export your data at any time from the application. If you enter information about other people — your employees, your clients — it is your responsibility to have the right to do so and to inform them. The detailed terms are set out in our terms of service.
We entrust certain technical operations to providers. Each accesses only what its function requires, and none is permitted to use this information for its own purposes.
| Provider | Role | What it processes |
|---|---|---|
| Netlify | Website hosting | Technical logs, IP addresses |
| Resend | Email delivery | Contact form content |
| Stripe | Payment and billing | Billing details, card data |
| Google Fonts | Web fonts | IP address when the page loads |
| Railway | Application hosting | Runtime logs |
| Neon | Application database | Stored data, encrypted at rest |
| Cloudflare | Domain name management | DNS queries |
We may also disclose information to our professional advisers bound by confidentiality (accountant, lawyer), or where a law, court order or valid legal demand compels us. In the event of a sale or reorganisation of the business, this information could be transferred to the acquirer, who would remain bound by this policy; you would be informed.
Our providers operate servers outside Quebec, notably in the United States and the European Union. Your information is therefore stored and processed there, and the law of those countries may allow their authorities to access it under conditions different from Quebec's.
As Law 25 requires, we carry out a privacy impact assessment before communicating personal information outside Quebec, and we govern the relationship by contract. [To be completed: exact server regions for Netlify, Railway and Neon, once confirmed with each provider.]
We keep information only for as long as the purpose it was collected for requires, then destroy or anonymise it.
No system is perfectly secure. We commit to serious measures and to transparency when something goes wrong — not to infallibility.
At any time, free of charge, you may:
Write to info@global360inc.ca. We respond within 30 days at most. We may ask you to confirm your identity first — that is a protection for you.
If your request concerns data held inside a subscribing company's workspace — your employee record in Ohadash HR, for instance — please contact that company first: it is the controller. We will assist it as needed.
Law 25 requires us to keep a register of confidentiality incidents. If an incident presented a risk of serious injury, we would promptly notify the Commission d'accès à l'information and the individuals concerned, stating what happened, what is affected, and the measures taken to limit the consequences.
We may amend this policy to reflect a change in our services or in the law. The last-updated date appears at the top of this document. For any significant change, we will notify subscribers by email at least 30 days before it takes effect.
Global360 Inc.
Attention: Person in charge of the protection of personal information
[full registered office address], Quebec, Canada
info@global360inc.ca