Privacy

PRIVACY POLICY — FORMA CNC Version prepared October 11, 2026 WHO IS RESPONSIBLE? 9551 9021 Québec inc., operating as FORMA CNC 1206, boulevard L’Assomption, Repentigny, Québec, Canada Postal code: J6A 0B7 Email: atelierformacnc@gmail.com Telephone: 514 886-0893 Person responsible for personal information protection: Chrystopher Richard. For a request about your information, email atelierformacnc@gmail.com with “Privacy” in the subject line. INFORMATION COLLECTED AND ITS USE Depending on your request, we receive your name, email, telephone number, billing or shipping address, order details, messages, drawings and project files. We use them to answer enquiries, prepare quotations, manufacture and deliver products, follow orders, process payments, provide after-sales service and maintain business records. Avoid sending sensitive information or information about other people that is unnecessary for your project. Without required contact details, we may be unable to fulfil an order or arrange delivery. PAYMENTS AND SERVICE PROVIDERS Stripe processes payments and associated financial information. FORMA receives the payment references and statuses needed to manage orders, rather than your full card number. Render hosts the website and its data. Resend handles transactional emails. Formspree processes messages submitted through the contact form. When shipping is used, Shippo and carriers may receive the contact information needed for delivery and tracking. Email exchanges may also pass through Gmail. Information shared depends on the service used. Some providers may process or store information outside Québec, including in the United States. Their own policies describe their practices. We do not sell your personal information. BROWSING AND BROWSER STORAGE The website uses browser storage to keep items such as your cart and language preference. Internal audience measurement uses a temporary session identifier and counts pages viewed, searches, cart additions, visits to checkout or quotation requests, source categories and device types. These statistics cover the last 30 days. Do not enter personal information in the product search. You can delete the website’s browser storage; this may remove your cart and preferences. Providers, including Stripe on its payment page, may use their own technologies. ACCESS, RETENTION AND SECURITY Record access is limited to people and providers who need it for their work. Protective measures include an encrypted website connection and protected administration access. Backup copies may be kept on the server and on a computer controlled by the business. Information is retained according to project needs, after-sales service and applicable recordkeeping obligations. There is no single retention period for every record; these obligations may restrict a deletion request. No electronic transmission or storage can be guaranteed entirely free of risk. YOUR REQUESTS You may request access to or correction of your information, or withdraw consent, subject to applicable exceptions and obligations. Contact Chrystopher Richard using the details above. Identity verification may be required. You may also direct a privacy complaint to him. UPDATES The date identifies the policy version. A new use requiring consent will be subject to the required consent.