Skip to main content
FR/EN
← Back

PRIVACY POLICY

Last updated : Jul 7, 2026

Effective date: 6/01/2026
Last updated: 7/7/2026

Introduction

This Privacy Policy describes how Alex Sparks (referred to as "we," "us," or "our") collects, uses, discloses and protects the personal information of people who visit alexsparks.ca or who engage our professional DJ services.

We comply with Québec's Act respecting the protection of personal information in the private sector (CQLR, c. P-39.1, as amended by Law 25), Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), and Canada's Anti-Spam Legislation (CASL).

Who is accountable for your personal information

Our designated person in charge of the protection of personal information is:

Alex Bossé
Dj Alex Sparks
Email: info@alexsparks.ca
Phone: 506-838-1608
Mailing address: Edmundston, NB, Canada

You can contact this person for any question about this policy, to exercise your rights, or to file a complaint.

What information we collect

We collect only the information needed for the purposes described below. Depending on how you interact with us, we may collect:

Information you give us directly

  • Booking inquiry: first and last name, email address, phone number, event date, city/venue, event type, approximate guest count, and any free-text message you send.

  • Contract and payment: billing civic address, name of the contract signer, amounts paid, payment dates. Credit-card details are never stored on our servers (see Payment processing).

  • Communications: the content of emails and messages you exchange with us.

  • Marketing consent (optional and separate): if you tick the newsletter opt-in box, your email address and the date the consent was given.

Information collected automatically

  • Essential cookies: a session identifier, your language preference (fr/en), and your cookie-consent state. These are strictly necessary to make the site work.

  • Technical logs: IP address, browser type, pages viewed, timestamps — kept for security and fraud prevention for a maximum of 30 days.

  • Anti-spam protection: we use Cloudflare Turnstile on our forms to prevent automated submissions. Turnstile may read technical signals from your browser (without tracking cookies).

We use no marketing or advertising cookies. No analytics tool is currently active. If we activate an analytics tool in the future, we will update this policy and request your prior consent.

Why we collect this information (purposes)

We use your personal information only for the following purposes:

  1. To respond to your booking inquiry and prepare a proposal tailored to your event.

  2. To enter into and perform a service contract: preparing the contract, processing the deposit and balance, coordinating logistics before the event, performing on the day.

  3. Transactional communications: booking confirmations, payment reminders, invoices, post-event follow-up. These communications are necessary to the contractual relationship and do not require a separate marketing consent.

  4. Site security and fraud prevention.

  5. Legal obligations: accounting and tax record-keeping required by federal and provincial authorities.

  6. Marketing (only if you have given express consent): newsletter or occasional offers. You can withdraw this consent at any time via the unsubscribe link in every marketing email.

Legal basis for processing

We process your personal information based on:

  • your consent (e.g. when you submit a booking inquiry or subscribe to the newsletter);

  • contractual necessity (performing a contract entered into with you);

  • our legal obligations (including tax);

  • our legitimate interests where they do not override your rights (site security, fraud prevention).

Who we share your information with

We never sell your personal information. We share it only with service providers who help us run the site and the business, strictly to the extent needed for their function, and who are bound by contractual confidentiality obligations.

Service providers and processing locations

  • Vercel Inc. — Web application hosting. Headquartered in San Francisco, California, USA. Global edge network.

  • Supabase Inc. — Database (booking data, site content). Headquartered in the USA. Data physically stored in Canada (Canada Central — Montréal region, ca-central-1).

  • Cloudflare Inc. — R2 — File storage (photos, mix cover art). Headquartered in San Francisco, California, USA.

  • Resend Inc. — Transactional email delivery (sent through Amazon SES infrastructure). Delaware, USA.

  • Stripe Inc. — Card payment processing. Headquartered in San Francisco, California, USA. Payouts to Alex Sparks's Canadian bank account.

  • Cloudflare Inc. — Turnstile — Form protection against automated submissions. USA (global network).

Transfers outside Québec and outside Canada

In accordance with section 17 of Québec's Act respecting the protection of personal information in the private sector, we inform you that some of your personal information may be communicated outside Québec, and at times outside Canada, to the United States, through the providers listed above.

Before engaging each of these providers, we conducted a privacy-impact assessment that considered:

  • the sensitivity of the information transferred;

  • the purposes of the processing;

  • the protection measures (including contractual) in place;

  • the legal framework of the receiving jurisdiction, including U.S. government surveillance laws (CLOUD Act, FISA Section 702).

Our contracts with these providers include confidentiality and security commitments aligned with Law 25. Where technically possible, we choose options that keep the data in Canada — for example, our Supabase database is configured to store data in the ca-central-1 (Montréal) region.

Payment processing

Online payments are processed by Stripe Inc., a PCI DSS Service Provider Level 1 certified processor (the highest level in the industry). Your credit-card details (number, expiry, CVC) are entered directly into Stripe's secure interface and never pass through our own servers. We only see the last four digits of your card and the transaction metadata (amount, date, status).

Stripe's own privacy policy is available at https://stripe.com/privacy

Retention

We keep your personal information only as long as needed:

  • Unconverted booking inquiries: 24 months from your last communication, then deletion. This window lets us pick up a later return inquiry.

  • Client files (contract signed): for the duration of the contract, plus 7 years after the event, to meet Canadian and Québec tax record-keeping obligations.

  • Email communications: 24 months, unless a longer retention is required (dispute, warranty, tax).

  • Technical logs: 30 days maximum.

  • Newsletter subscriptions: until you withdraw consent, then deletion within 30 days.

When these periods expire, your information is securely destroyed or irreversibly anonymized.

Your rights

Under Law 25 and PIPEDA, you have the following rights regarding your personal information:

  • Right of access: obtain a copy of the personal information we hold about you.

  • Right to rectification: have inaccurate, incomplete, or equivocal information corrected.

  • Right to withdraw consent: withdraw consent to marketing communications at any time.

  • Right to cessation of dissemination, deindexing, or reindexing (Law 25, s. 28.1): ask that we stop disseminating personal information about you or that a hyperlink giving access to that information be deindexed, where the legal conditions are met.

  • Right to data portability (Law 25, as of September 22, 2024): receive, in a structured, commonly used technological format, the computerized personal information you have provided to us.

  • Right to complain: if you believe your rights have not been respected, you may contact us and, after that, the competent authority (see below).

To exercise these rights, email privacy@alexsparks.ca. We will respond within 30 days of receiving your request. Reasonable proof of identity may be requested.

Complaints

If you are not satisfied with our response, you can contact:

Security measures

We take reasonable technical and organizational measures to protect your information, including:

  • TLS encryption on all site communications;

  • encryption at rest on Supabase databases and Cloudflare R2 storage;

  • strict access controls to the admin interface (strong password, two-factor authentication);

  • segmentation of sensitive data (payment data isolated at Stripe);

  • logging of administrative access;

  • periodic review of providers.

No system is foolproof. We undertake to notify you promptly, and the CAI when the law requires it, of any confidentiality incident presenting a risk of serious injury.

Cookies

Our site uses only essential cookies by default:

  • session cookie (authentication, in-progress booking cart);

  • language preference (fr / en);

  • cookie-consent state.

No analytics or marketing cookies are active by default. You can manage your preferences through the cookie banner shown on your first visit, or by clearing cookies in your browser.

Minors

Our services are aimed at adult clients (event organizers). We do not knowingly collect personal information from anyone under 14 without parental or guardian consent.

Changes

We may update this policy to reflect legal, technical, or operational changes. The current version is always available at alexsparks.ca/en/privacy-policy, with the last-updated date. Material changes will be communicated to you by email if we have your address, or by a clear notice on the site.

Contact us

For any question about this policy or your personal information:

Alex Bossé — Person in charge of the protection of personal information
Email: info@alexsparks.ca
Phone: 506-838-1608
Mailing address: Edmundston, New Brunswick, Canada

Back to home →