Privacy Policy

1. Introduction

At Pachangueros ("we", "our"), we are committed to protecting your privacy. This policy details how we collect, use, share, and protect your personal data in accordance with applicable laws, including Law 25 of Quebec regarding the protection of personal data.

2. Data We Collect

• Contact Information: Name, email, and phone number when registering for classes, buying an event ticket, reserving at the Shop (CALIDOSOS/Wear), subscribing to a newsletter, or writing to us via the contact form.
• Account Data (Members Zone): Email, name, school, and requested courses, if you create an account.
• Purchase Data: When buying a ticket or order, your name, email, and phone, to confirm and follow up on your order. We do not store card numbers: card payments are processed directly by Stripe.
• Navigation Data: IP address, device type, pages visited, and anonymous identifiers (cookies and browser storage) — see section 4.
• Visual Material: Photographs and videos taken during our public events for promotional purposes, and any you voluntarily upload (for example, a feedback or contest video in the Members Zone).

3. How and Why We Use Your Data

We use your personal data only for the following purposes:

• Managing registrations, reservations, purchases, and access to the Members Zone.
• Sending you confirmations, tickets, reminders, and notices related to your purchase, reservation, or registration.
• Communicating with you by email, WhatsApp, or message about your classes, events, or orders.
• Sending our newsletter or promotions, only if you gave your explicit consent when registering (you may withdraw it at any time).
• Measuring site usage and the effectiveness of our advertising — see section 4.
• Complying with legal, accounting, and tax obligations.

4. Use of Cookies and Technologies

We use third-party services such as Google Analytics, the Meta/Facebook Pixel, and Firebase to improve your experience and measure the effectiveness of our advertising campaigns. These tools may store cookies on your device. When you enter the site, we ask for your consent via a banner before enabling analytics and advertising cookies (you can accept, decline, or change your choice at any time from "Cookie preferences" in the footer). Regardless of your choice, you can also disable cookies in your browser settings.

Our own anonymous statistics: to learn which events and links generate interest (for example, adding an event to a calendar or clicking through to one of our partner schools), we anonymously record visits and clicks on our site, along with the page, language, device type, referring site, and campaign parameters (UTM) of the visit. It does not include your name or email. If you decline cookies, this recording still runs, but with an identifier that only lasts for your visit (it is deleted when you close the tab) and without saving the source campaign: we cannot recognize you from one visit to the next. If you accept, we store an anonymous identifier and the source campaign in your browser (up to 30 days) to better measure our campaigns; you can erase them at any time by changing your choice in "Cookie preferences".

If you buy a ticket and accept cookies, to measure our advertising we share your email, phone, and name with Meta (Facebook/Instagram) transformed through a one-way cryptographic function (hash) that Meta cannot reverse to the original data; if you decline cookies, this information is not sent.

5. Who We Share Your Data With

We do not sell your personal data. We share it only with the providers we need to operate the site and our services, each acting on our behalf and under its own privacy policy:

• Stripe: securely processes card payments; we never see or store your card number.
• Firebase / Google Cloud: hosts the site, the database, sign-in, and the files you upload (photos, videos).
• Google Analytics 4 and Google Ads: traffic measurement and advertising, only with your consent (section 4).
• Meta/Facebook (Pixel and Conversions API): advertising measurement; only with your consent, and with contact data hashed as explained in section 4.
• Brevo: sends our emails and SMS messages, both transactional (confirmations) and newsletter/marketing.
• Make.com: automation platform that securely connects the site, Stripe, and Brevo to process your orders and communications.
• YouTube and Google Maps: videos and maps embedded on the site; they may set their own cookies per Google's privacy policy.
• Partner schools (Imperio Studio de Danse, Loisir Brio, PEPS Université Laval): if you choose to register or pay directly on one of these schools' sites, your data is subject to that school's privacy policy, not ours.

6. International Data Transfers

Most of the providers listed in section 5 process data outside Quebec, mainly in the United States (Google/Firebase, Meta, Stripe, YouTube) and the European Union (Brevo, Make.com). Before using these providers, we assess that they offer a level of data protection equivalent to that required by Law 25.

7. Data Retention

We keep your personal data for as long as your relationship with us lasts and, afterward, for the following periods:

Account, registration, purchase, and communication data (name, email, phone, order and contact history): up to 6 years after your last activity or transaction with us. This period matches how long the law requires a business in Quebec/Canada to keep its accounting and tax records, and also lets us respond to a claim within the civil limitation period.

Photographs and videos taken at our public events: kept as part of our promotional archive for as long as they remain useful for that purpose, since you consented to their use by attending the event (section 2). You may ask us to remove a photo or video of you at any time; see section 9.

Newsletter and marketing communications: while you remain subscribed. If you unsubscribe, we keep a minimal record of that opt-out (without the rest of your profile) to comply with Canada's anti-spam law (CASL).

After these periods, we delete or anonymize your data, unless the law requires a longer period. You may request deletion before these periods are reached; see section 9.

8. Data Security

We apply reasonable technical and organizational measures to protect your data against loss, misuse, or unauthorized access or disclosure — including role-restricted access to our administrative systems, database access rules, and encryption of data in transit. No system is 100% secure; should an incident occur that poses a serious risk of harm to you, we will notify you and report it to the Commission d'accès à l'information (CAI) as required by Law 25.

9. Your Rights

Under Law 25, you have the right to:

• Access your personal data held by us.
• Request correction of incorrect, incomplete, or outdated information.
• Request deletion of your data ("right to be forgotten"), subject to our legal or accounting obligations.
• Request a copy of your data in a structured, commonly used technological format (portability), where applicable.
• Withdraw at any time your consent for the use of your data, your photos, or marketing communications.
• File a complaint with the Commission d'accès à l'information du Québec (CAI) if you believe we have not respected your rights.

To exercise any of these rights, write to us at the contact email (section 10); we will respond within a reasonable time.

10. Person Responsible for Data Protection

In accordance with Law 25, the person responsible for ensuring the security and confidentiality of your data is:

11. Minors

Our services are intended for adults. We do not knowingly collect personal data from minors without the verifiable consent of a parent or guardian. If you believe a minor provided us with their data without such consent, please contact us so we can delete it.

12. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or the law. The "Last Updated" date at the top of this page indicates the current version. We recommend reviewing it periodically; significant changes will be announced on the site.