Privacy Policy
Who is responsible
LE SUNDAY Social Club is an independent Montréal event project. For privacy questions, access or correction requests, withdrawal of consent, deletion requests, or complaints, contact the person responsible for privacy at admin@lesunday.ca.
What we collect and why
The public waitlist asks for your first name and email to record your interest in future LE SUNDAY experiences. Your Instagram handle, interests and connection preferences are optional. The historical October 2 waitlist and its consent evidence remain separate. A private October invitation is tied to the invited email address and records the offered seat count, link status and response. A waitlist entry does not reserve a seat. Accepting an invitation confirms attendance only after the response is saved. We record your selected language and the wording, version, date, source and scope of each email choice.
Email choices
The new public waitlist has one optional, unchecked future-experiences email permission. It covers announcements, early access, invitations and important updates about future experiences. Historical October 2 event-email permission remains separate and is not expanded by this change. Early access does not guarantee an invitation or a place. Email permission is not bundled with registration, photo/video permission or tracking preferences. A factual receipt may acknowledge an action you requested.
Participation information
If invited, you may provide dietary or allergy information so we can accommodate you. This sensitive information is optional and requires specific permission for use and necessary sharing with the people responsible for the food. You can contact us directly if you prefer. Photo and video preferences are requested separately. Provide a companion’s first name only with their knowledge; your response does not give media consent on their behalf. A direct-invitation link is an email-bound bearer link; do not forward it. After confirmation, a separate private management link lets you update details or cancel.
Access and service providers
Access is limited to the organiser and authorised people who need information to perform a specific task. The website uses OpenAI Sites and its Cloudflare hosting infrastructure. Submissions are stored in the connected Supabase project, whose database region is Canada Central (Montréal). Resend processes email deliveries when enabled. A Canadian database region does not mean that every provider’s logs, support or processing stays in Québec. Service providers may handle information outside Québec or Canada under their applicable arrangements. We do not sell personal information or share it with collaborators for their own marketing.
Cookies and technical information
Necessary session technologies support form completion and private account access. Profile access expires after 30 minutes. Security controls use short-lived rate-limit identifiers; operational providers may also process request logs. Optional Meta advertising measurement (Pixel 1566939801875630) stays off unless you accept it in Cookie preferences. You can reject it and still join. Meta does not receive your form answers through our event tracking. Tracking is disabled on private RSVP and admin pages.
Retention
We keep personal information only while needed for the stated purpose or a justified legal obligation. The event-only profile retention target is 90 days after the event, subject to the approved retention schedule and any documented exception. An active future-experiences preference is retained until you withdraw it or until a periodic necessity review shows that it should no longer be kept. Allergy information should be removed promptly after its operational purpose ends. Consent evidence, minimal suppression records, financial records, incident records and protected backups may have different justified periods. We do not promise immediate deletion from every provider backup.
Your privacy rights
You may request access to your information, correction, withdrawal of consent, deletion where applicable, and a portable copy where the law provides it. We verify requests proportionately to protect you, without routinely asking for identity documents. We explain any lawful retention exception and respond within applicable deadlines. The email-preferences link lets you withdraw the October permission, the future-experiences permission, or both independently. Unsubscribing does not automatically cancel your attendance; use your private response link to cancel attendance.
Security and incidents
We use access restrictions and technical safeguards appropriate to the information. No system can guarantee absolute security. If a confidentiality incident occurs, we assess and contain it, keep the required record and notify the authorities and affected people where required by law. These terms do not waive your legal rights.
Changes and complaints
Effective date: September 13, 2026. Material changes will be communicated as appropriate. New wording does not retroactively expand previous consent. Contact admin@lesunday.ca first with a privacy concern. You may also contact Québec’s Commission d’accès à l’information.