Privacy Policy

Laboratoires Daya Inc., doing business as Daya Labs ("Daya Labs", "we", "us" or "our"), is a company based in Quebec, Canada. This Privacy Policy explains how we collect, use, share and protect personal information when you visit www.dayalabs.com (the "Website"), contact us, or deal with us as a business contact.

1. Scope

This Policy covers personal information we handle for our own purposes: Website visitors, people who contact us, and the business contacts of our clients, prospects and partners.

It does not cover information we process on behalf of our clients through the Dayacloud platform or our professional services, such as the records of a home care agency's clients, patients or employees. We handle that information only on our client's instructions and under our written agreement with them, which may include a business associate agreement under HIPAA. If your information is held by a home care agency that uses our services, please contact that agency; its privacy policy applies, and we will help it respond to your request.

2. Information we collect

Information you give us

• Contact form: your work email address, company name and message.
• Emails, calls and meetings: your name, job title, contact details and anything you choose to tell us.
• Business relationship: the contact and billing details of the people we work with at our clients and partners.

Information collected automatically

When you browse the Website, we and our analytics providers collect technical information through cookies and similar technologies: your IP address, browser and device type, pages viewed, the page that referred you, approximate location derived from your IP address, and the date and time of your visit. Our hosting provider also keeps standard server logs for security and troubleshooting.

We do not ask for, and ask you not to send us, health information or any other sensitive personal information through the Website.

3. How we use your information

• To answer your questions and set up the calls you request.
• To provide our services, manage our client and partner relationships, and send invoices.
• To send you business updates or marketing emails, where you have agreed to receive them or Canada's Anti-Spam Legislation (CASL) otherwise allows it. Every marketing email includes an unsubscribe link.
• To understand how the Website is used and improve it.
• To keep the Website and our systems secure, and to comply with our legal obligations.

We use your information only for these purposes or for purposes compatible with them, unless we ask for your consent or the law requires or allows otherwise. We do not sell personal information, and we do not use it for targeted advertising on other websites.

4. Cookies and analytics

The production Website uses the following tools, which set their own cookies:

• Google Analytics, to measure traffic and how pages are used. Google's privacy policy is at https://policies.google.com/privacy, and you can opt out with Google's browser add-on at https://tools.google.com/dlpage/gaoptout.
• HubSpot, to receive contact form submissions, manage our contacts, and understand which pages bring people to contact us. HubSpot's privacy policy is at https://legal.hubspot.com/privacy-policy.

We do not use advertising cookies. You can block or delete cookies in your browser settings; the Website will still work without them.

5. Who we share it with

We share personal information only with service providers that help us run our business, under contracts that require them to protect it and use it only to provide their services to us:

• HubSpot (contact management, forms and email)
• Google (Website analytics, email and productivity tools)
• Amazon Web Services (Website hosting and delivery)

We may also disclose personal information when the law requires it, to protect our rights or the safety of others, or as part of a merger, acquisition or sale of our business, in which case the recipient must continue to protect it as described in this Policy.

6. Where your information is stored

Our service providers may store and process personal information outside Quebec and Canada, including in the United States, where it may be accessible to local authorities under local law. Before communicating personal information outside Quebec, we assess whether it will receive adequate protection, as Quebec law requires, and we rely on contractual safeguards with our providers.

7. How long we keep it

We keep personal information only as long as we need it for the purposes above or as the law requires. Contact form submissions and business contact records are kept while the relationship is active and reviewed periodically. When we no longer need information, we delete it or anonymize it.

8. How we protect it

We protect personal information with administrative, technical and physical safeguards suited to its sensitivity, including access controls, encryption in transit, and security controls audited under SOC 2. No system is perfectly secure. If a confidentiality incident presents a risk of serious injury, we will notify the people affected and the Commission d'accès à l'information du Québec, and any other regulator when the law requires it.

9. Your rights

Depending on where you live, you may have the right to:

• Find out whether we hold personal information about you, and get access to it.
• Have inaccurate or incomplete information corrected.
• Withdraw your consent, for example to marketing emails.
• Have your information deleted, or stop its dissemination, where the law allows.
• Receive information you gave us in a structured, commonly used technological format.
• Be told how a decision about you was made, if it was made solely by automated processing.

Residents of some U.S. states have similar rights under their state privacy laws, including the rights to know, correct and delete their personal information and to opt out of its sale or use for targeted advertising. We do not sell personal information or use it for targeted advertising, and we will not discriminate against you for exercising your rights.

To make a request, write to us at the address in section 11. We may ask you to confirm your identity before we respond, and we will answer within 30 days. If you are not satisfied with our answer, you may complain to the Commission d'accès à l'information du Québec (https://www.cai.gouv.qc.ca), the Office of the Privacy Commissioner of Canada (https://www.priv.gc.ca), or the privacy regulator where you live.

10. Children

The Website is intended for businesses and is not directed at children. We do not knowingly collect personal information from anyone under 14.

11. Contact us

Jonathan Vallée, Chief Executive Officer, is the person in charge of the protection of personal information at Daya Labs. For any question or request about your personal information, contact him at [email protected].

12. Changes to this Policy

We may update this Policy to reflect changes in our practices or in the law. We will post the new version on this page with a new "Last updated" date, and we will tell you about significant changes by appropriate means.