This policy explains what personal information Pragm collects when you visit pragm.co or get in touch with us, why we use it, and how you stay in control. It also covers cookies. In short: we collect very little, we never sell it, and we don't run targeted advertising on this site.
Who is responsible for your information
Agence et formations Pragm inc. ("Pragm", "we") 199 rue Gordon, Montréal, Quebec, H4G 2R2, Canada
Person in charge of the protection of personal information: Augustin Delporte, CEO, augustin@pragm.co. Contact him with any question about this policy or your information.
Information we collect
What you give us. When you fill in the contact form: your name, email address, company or organization name, the services or training you're interested in, and your message. When you email or call us: whatever you choose to share. If you become a client: the information we need for contracts and invoicing.
What is collected automatically, with your consent. Browsing data measured by Google Analytics 4 and Microsoft Clarity: pages viewed, visit duration, where the visit came from, device and browser type, approximate location, clicks and scrolling. These tools only load if you accept them.
What the site needs to work. Our host, Cloudflare, processes technical data such as your IP address and browser type to serve and protect the site. Cloudflare Turnstile checks that the contact form is filled in by a person, not a bot. Your light or dark mode choice is saved in your browser.
What you write to our AI agent. If you use the AI agent to clarify your needs, your messages and its replies are saved anonymously. If you choose to send a contact request from the agent, the conversation is attached to your request, along with your contact details.
We don't ask for any sensitive information. Please don't include any in your messages.
Why we use it
| Purpose | Information used | Legal basis (GDPR) |
|---|---|---|
| Reply to your requests and offer our services or training | Contact form, emails, calls | Pre-contractual steps and legitimate interest |
| Help you clarify your needs with the AI agent, and improve it | Conversations saved anonymously; conversation attached if you send a request | Legitimate interest; pre-contractual steps if you send a request |
| Deliver our projects and invoice | Client contact and billing details | Performance of a contract and legal obligations |
| Understand how the site is used and improve it | Browsing data (Google Analytics 4, Microsoft Clarity) | Consent |
| Run and protect the site | Technical data (Cloudflare, Turnstile), display preference | Legitimate interest |
| Meet our legal obligations | As requested by the authorities | Legal obligation |
We don't use your information for any other purpose without telling you and, where needed, getting your consent.
Cookies and similar technologies
A cookie is a small file stored in your browser. Strictly necessary cookies are always on. Analytics cookies are off by default and only turn on if you accept them.
| Name | Provider | What it does | Duration | Category |
|---|---|---|---|---|
| Cookie choices | Pragm | Remembers your cookie choices | 6 months | Necessary |
| theme (local storage) | Pragm | Remembers light or dark mode | Until you clear it | Necessary |
| Turnstile | Cloudflare | Tells people and bots apart on the contact form | For the duration of the check | Necessary |
| _ga | Distinguishes visitors | 2 years | Analytics | |
| ga[ID] | Keeps the session state | 2 years | Analytics | |
| _clck | Microsoft | Keeps the Clarity user ID and preferences | 1 year | Analytics |
| _clsk | Microsoft | Groups page views from the same visit | 1 day | Analytics |
| CLID, MUID, ANONCHK, MR, SM | Microsoft | Third-party cookies from Microsoft domains used by Clarity | Up to 1 year | Analytics |
Google Tag Manager doesn't set cookies: it loads the tools above, and only after you consent.
Your consent and how to withdraw it
On your first visit, our consent banner lets you accept or refuse analytics, with buttons that are equally visible. Until you accept, Google Analytics and Microsoft Clarity don't load and nothing is sent to them. Your choice is kept for 6 months, after which we ask again.
You can change your mind at any time with the "Manage cookies" link at the bottom of every page. You can also block or delete cookies in your browser settings, or install the Google Analytics opt-out browser add-on.
Analytics: Google Analytics 4 and Microsoft Clarity
Google Analytics 4 (Google LLC) measures traffic to the site: pages viewed, traffic sources, devices and countries. Your IP address is used to derive an approximate location; Google states it doesn't store IP addresses of visitors from the European Union, Switzerland and the United Kingdom. Google Signals is turned on: if your browser is signed in to a Google account that allows ad personalization, Google may link this data to that account to produce reports on age, gender, interests and cross-device use. We only receive aggregate statistics, never data about an individual. You can manage these settings in Google's My Ad Center. Detailed data is kept for 14 months.
Microsoft Clarity (Microsoft Corporation) produces heatmaps and anonymized session recordings: clicks, scrolling, mouse movements. Anything you type into form fields is masked and never sent to Microsoft. Recordings are kept for 30 days; a sample may be kept for up to 9 months, and heatmaps remain available for up to 9 months.
Our AI agent
Our AI agent helps you clarify your needs before you write to us. You're talking to an artificial intelligence, not to a member of our team. The agent runs on Cloudflare Workers AI, on the same infrastructure as our site, and Cloudflare doesn't use these exchanges to train its models.
We save conversations without linking them to your name, email address or IP address, to improve the agent and better understand visitors' needs. Please avoid entering personal information. If you did, write to us with the date of the conversation and we'll delete it.
At the end of the exchange, the agent can prepare a contact request. Nothing is sent unless you decide to send it. If you do, the conversation is attached with your contact details and handled like a contact form message.
The agent makes no decisions about you: it only helps you put your request into words.
Who we share your information with
We never sell or rent your information. We only share it with providers that help us run the site and our business, and that must protect it:
- Cloudflare, Inc.: hosting, contact form delivery, Turnstile protection and the AI agent (Cloudflare Workers AI)
- Google LLC: Google Tag Manager, Google Analytics 4 and Google Workspace, the email service that receives contact form messages and our emails
- Microsoft Corporation: Microsoft Clarity
These providers may only use your information to provide their services to us. We may also disclose information when the law requires it, for example at the request of a competent authority.
Where your information is stored
Our providers may process your information outside Quebec, including in the United States. Before entrusting them with information, we assess the protection they offer, as required by Quebec law, and rely on their contractual commitments. For visitors in Europe, these transfers rely on safeguards provided for by the GDPR, such as the EU–U.S. Data Privacy Framework or standard contractual clauses.
How long we keep it
| Information | Retention |
|---|---|
| Contact form messages and emails | As long as needed to answer your request and follow up on our exchanges; we also keep the messages in our emails for documentation purposes. |
| AI agent conversations | Kept in anonymous form. If you send a contact request, the attached conversation follows the rule for contact form messages. |
| Client information | For the duration of the project, then as long as tax laws require |
| Google Analytics 4 | 14 months |
| Microsoft Clarity | 30 days for recordings (up to 9 months for a sample); up to 9 months for heatmaps |
| Your cookie choices | 6 months |
Once these periods end, the information is destroyed or anonymized.
Security
We protect your information with appropriate measures: encrypted connection (HTTPS), access limited to those who need it, and strong authentication on our accounts. If a confidentiality incident presents a risk of serious injury, we notify the people concerned and Quebec's Commission d'accès à l'information.
Your rights
Depending on where you are, you can:
- access your information and get a copy, including in a structured, commonly used technological format;
- have it corrected if it's inaccurate or incomplete;
- withdraw your consent at any time;
- ask for it to be deleted or no longer disseminated;
- object to or restrict processing (Europe);
- file a complaint with an authority.
To exercise these rights, write to augustin@pragm.co. We may ask you to confirm your identity. We respond free of charge within 30 days.
You can file a complaint with Quebec's Commission d'accès à l'information, the Office of the Privacy Commissioner of Canada or, if you're in Europe, your country's data protection authority.
Children
This site is meant for professionals. We don't knowingly collect information about people under 14.
Links to other sites
The site links to other sites (LinkedIn, GitHub, our guest articles). Their practices aren't covered by this policy.
Changes
We may update this policy. The date at the top of the page shows the latest version. If a change affects how we use your information, we'll flag it on the site and ask for your consent where needed.
Contact us
Augustin Delporte, person in charge of the protection of personal information augustin@pragm.co Agence et formations Pragm inc., 199 rue Gordon, Montréal, Quebec H4G 2R2, Canada