Privacy and data governance
Website privacy, stated plainly.
This policy explains what the Underlabs corporate website handles, why it is used, and which external providers are visible in the website’s current implementation.
Last updated: September 9, 2026. This policy is about the corporate website. Underlabs products and client systems may have separate privacy notices and different data practices.
1. Scope
Who this policy covers
This policy applies to the general Underlabs website at underlabs.ca, excluding a product or service that publishes its own privacy policy. “Underlabs,” “we,” and “us” mean Ateliers Underlabs Inc., a company based in Montréal, Québec.
The website presents our work and services. It does not provide a general Underlabs user account or website checkout.
2. Information handled
Information you submit and ordinary website data
If you contact us by email or through the embedded contact form, you choose what to provide. This can include your name, contact details, company information, project requirements, and the contents of your message.
Like other websites, the site and its infrastructure may receive technical request information such as an IP address, browser and device information, requested pages, timestamps, referring pages, and diagnostic or security information.
The site stores a cookie-preference record named underlabsCookieConsent in your browser’s local storage. That record remembers whether you allowed optional analytics.
3. Contact form
Information sent through AidaForm
The contact page embeds a form provided by AidaForm. Information entered into that form is transmitted to and processed through AidaForm so that Underlabs can receive and respond to the inquiry. Do not submit secrets, production credentials, payment-card information, health records, or other highly sensitive information through the general website form.
You can contact us directly by email instead of using the embedded form. Privacy inquiries should be sent to [email protected].
4. Cookies and analytics
Your browser choice
Pages using the current Underlabs consent control keep optional analytics disabled unless you allow them. If allowed, the site can load Google Tag Manager and process page views and interaction events used to understand website use. Event definitions in the current website code cover items such as service-page visits, case-study visits, contact-method clicks, and form start or submission attempts. The Underlabs event code does not intentionally include the text entered into form fields.
You can review or change the stored choice at any time using “Cookie preferences” in the footer. Clearing site data in your browser will also remove the saved preference.
5. How information is used
Limited business and website purposes
Information handled through the corporate website may be used to:
- respond to inquiries and discuss potential or active work;
- operate, secure, diagnose, and maintain the website;
- understand page and feature use when optional analytics is allowed;
- meet legal obligations and protect the rights, systems, or safety of Underlabs and others.
The current corporate website does not provide a newsletter or automated email-marketing signup.
6. External providers
Providers visible in the website implementation
This table covers the main operational providers used by the corporate website. It is not a subprocessor list for every Underlabs client project or product.
| Provider | Website purpose | Information involved |
|---|---|---|
| Website hosting provider | Hosting and delivery of the static corporate website | Ordinary web requests and hosting or security logs |
| AidaForm | Embedded contact form | Information a visitor chooses to submit, plus ordinary request data |
| Optional analytics and tag delivery; maps, video, fonts, or hosted resources on some pages | Usage, device, browser, network, and interaction information, depending on the page and consent state | |
| Microsoft | Embedded request-for-proposal form | Information a visitor chooses to submit, plus ordinary request data |
| Vimeo and X | Video or social-media embeds on selected pages | Ordinary web requests and information handled under each provider’s own privacy notice |
Links to social networks, app stores, client sites, publications, or other external websites take you to services governed by their own terms and privacy notices.
7. Location and retention
Third parties can introduce other jurisdictions
Underlabs is based in Québec, but the corporate website uses external providers. Those providers may process information in Canada, the United States, or other jurisdictions where they or their suppliers operate. Information processed elsewhere may be subject to the laws of those places.
The corporate website does not publish a single fixed retention period for website inquiries or provider logs. Retention depends on the purpose of the inquiry, an active business relationship, legal requirements, and provider settings. You may ask us to review or delete personal information associated with a website inquiry, subject to information we must retain by law or for legitimate business records.
8. Safeguards and disclosure
Proportionate protection
Underlabs is responsible for personal information it handles. No website, email, form, or transmission method can be guaranteed completely secure. This policy does not make detailed security-control claims beyond the website practices described here.
Information may be made available to providers acting for the purposes described above, or disclosed when reasonably required by law, to respond to legal process, to investigate misuse, or to protect rights and safety. This policy does not claim a certification, an absolute security guarantee, or that every provider is subject only to Canadian jurisdiction.
9. Your privacy rights
Access, correction, questions, and complaints
Subject to applicable law, you may ask whether Underlabs holds personal information about you, request access or correction, withdraw consent where consent is the legal basis, or ask about how information was handled. We may need to verify your identity before completing a request.
Privacy inquiries may be directed to [email protected]. Use this address for privacy questions, access or correction requests, deletion requests, consent inquiries, or complaints.
10. Changes
Policy updates
We may update this policy when the website, providers, or legal requirements change. The revised policy will be published on this page with a new “Last updated” date.
For information about Canadian hosting and project-specific architecture options, read our digital sovereignty capability page.