Privacy policy

Last updated: September 13, 2026

1. Introduction

We place great importance on protecting your personal information. This privacy policy explains what data we collect, how we use it, and how you can exercise your rights in compliance with Québec's Law 25.

It applies to our websites (bunkers.co, jprovo.st, cyberbunkers.ca) and to our cybersecurity services.

2. Collection of personal data

We collect certain information in the following cases:

• When you write to us through the site's forms (contact, incident report): name, company (optional), email address, phone number and the content of your message. This information reaches us by email; the site keeps no database of your requests.
• When you browse the site: audience measurement without cookies or personal identifiers (pages viewed, country, device type, in aggregate). If you consent, Google Analytics is loaded as well and sets analytics cookies; without your consent it is not loaded.
• When using our AI-powered cybersecurity services: security-related data (suspicious login attempts, identified threats) used to continuously improve our AI-based protection.

Your IP address is used momentarily to protect the forms against abusive submissions, then discarded.

3. Cookies

Before you make a choice, a single cookie is set: cb_consent, which remembers your consent preferences for 12 months. Analytics cookies (_ga, _ga_*, Google Analytics, 2 years) are set only after you consent. You can change your choice at any time through the "Manage cookies" link at the bottom of every page.

4. Purpose of data collection

We use this data to:

• Answer your requests and handle the incidents you report to us.
• Measure site traffic and improve the user experience.
• Enhance our cybersecurity systems through artificial intelligence.
• Ensure data protection by detecting and preventing cyber threats.

We do not sell or share your personal information with third parties for commercial purposes.

5. Use of artificial intelligence and data anonymization

Our solutions use advanced artificial intelligence technologies to analyze threats and automate anomaly detection. All collected data:

• Is anonymized before processing.
• Is encrypted and protected against unauthorized access.
• Cannot be directly linked to a client to ensure confidentiality.

Our system relies on a network of sensors and the use of proprietary and open-source technologies to monitor and visualize threats in real-time.

6. Providers and processors

Some processing relies on providers that may handle data outside Québec, under a contractual framework compliant with Law 25:

• Vercel: site hosting and cookieless audience measurement.
• Resend: email delivery of the messages sent through the forms.
• Google: Google Analytics, only after your consent.
• Zoho Corporation: billing (see section 9).

7. Data retention

We retain your personal information only for as long as necessary for the purposes for which it was collected:

• Form messages: for as long as it takes to handle your request and follow up on our business relationship.
• Browsing data: 12 months (Google Analytics, after consent).
• Security logs and AI analysis: up to 36 months before full anonymization.

8. Your rights under Law 25

You have the following rights regarding your personal information:

• Right to access and rectify: You can request a copy of your data and correct any errors.
• Right to deletion: You can request the removal of your personal information.
• Right to object: You can refuse certain uses of your data, including withdrawing your consent to analytics cookies.
• Right to data portability: You can request your data in a structured, machine-readable format.

To exercise your rights, contact us at: security@bunkers.co

9. Billing and personal data

For billing management, we use the Zoho Invoice platform, a service provided by Zoho Corporation. Your personal information required to issue invoices, such as your name, address, email address, and transaction details, may be processed and stored on Zoho's servers. This provider is subject to industry-standard security measures and operates internationally. A contractual framework is in place to ensure the protection of your information, in accordance with the requirements of Law 25.

10. Security and data protection

We implement technical and organizational measures to protect your data from unauthorized access, alteration, or loss, including:

• Advanced encryption for sensitive data (AES-256).
• Secure storage with restricted access.
• Continuous monitoring and logging of access.
• A site served over HTTPS only, with strict security headers.

11. Data Protection Officer

In compliance with Law 25, we have designated a Data Protection Officer.

Name: Jonathan Provost

Email: security@bunkers.co

12. Policy updates

This policy may be updated to reflect legislative or technical changes. We encourage you to review it regularly.

Last updated: September 13, 2026