Privacy Policy

Effective and last updated: August 27, 2026

This policy describes the personal information processed when you browse cogni6.com or its public subdomains newsletter.cogni6.com and infolettre.cogni6.com, contact us, submit a demo request, subsequently coordinate a meeting with us or subscribe to the newsletter. It does not govern data processed in the Cogni6 application on behalf of a customer. That data is governed by a separate service agreement and, where applicable, a data processing agreement.

1. Who is responsible

Cogni6 inc. is responsible for the personal information covered by this policy. Its head office is at 134 chemin de la Tourterelle, Suite A, Stoneham-et-Tewkesbury, Quebec G3C 1N4, Canada. It also operates an establishment at 805 rue Galt Ouest, Suite 304, Sherbrooke, Quebec J1H 1Z1, Canada.

The person responsible for the protection of personal information can be reached at francis@cogni6.com. Use this address for questions, complaints and requests to exercise the rights described below.

2. Information collected and sources

We collect information directly from you, automatically through your browser or from providers that help us operate the website. The categories actually used on this website are listed below.

  • Contact and demo qualification: full name, email address, company, practice size, topic of interest and message.
  • Meeting coordination after qualification: name, email address, date, time, time zone and information exchanged to arrange the meeting.
  • Newsletter: email address, language, confirmation status, signup source, audience tags, timestamps, and opens and clicks measured by the delivery platform.
  • Preferences: language, language confirmation, cookie choice, a local subscription indicator and temporary dismissal of a promotional message. The email address is not stored in the browser.
  • Technical data: IP address, browser type, device, requested pages, timestamps and logs needed to deliver, secure and diagnose the website.
  • Optional audience measurement: pages viewed, interactions, source of the visit and associated technical data, only after you accept analytics cookies.

3. Purposes and legal bases

We limit each use to a defined purpose. Where applicable law requires a legal basis, we rely on the bases described below.

  • Responding to a request, qualifying it and preparing a demo: steps taken at your request before entering into a contract and legitimate interests in managing business relationships.
  • Coordinating a meeting after qualification, creating the calendar event, sending the invitation and following up: pre-contractual or contractual steps.
  • Sending the newsletter and measuring website audiences: your consent, which you may withdraw for the future.
  • Remembering language, consent and interface choices: providing the requested service and retaining evidence of your choice.
  • Preventing abuse, securing the website, diagnosing an outage and defending legal rights: legitimate interests, network security and compliance with legal obligations.
  • Maintaining required records, responding to authorities and processing a rights request: applicable legal obligations.

4. What you must provide

Fields marked as required are necessary to understand and qualify your request. Without them, we cannot follow up or, when the request fits Cogni6, coordinate a meeting. Newsletter subscriptions and analytics cookies are optional and do not affect access to public pages.

Do not enter a customer secret, sensitive data, government identifier, financial information or engagement content into a public form. The forms are only intended to establish contact and provide a high-level understanding of your need.

5. Recipients and providers

Access is limited to Cogni6 personnel who need it and providers engaged for the purposes described here. Those providers may act as service providers or processors under applicable law.

  • Vercel: hosting, website delivery, technical logs and infrastructure security.
  • Resend and our email services: transmitting forms and coordination messages.
  • Mailchimp: double opt-in, list management, newsletter delivery, unsubscribes, and open and click measurement.
  • Google Calendar and Google Meet: calendar invitations and meeting links when we coordinate a meeting with you after qualification.
  • Google Analytics: audience measurement only after your consent.
  • Professional advisers, authorities or parties to a corporate transaction: only where permitted by law and with appropriate safeguards.

6. International transfers

Cogni6 is established in Quebec. Some providers process information in Canada, the United States or other countries where they operate. The laws in those countries may permit lawful access by local authorities.

Before disclosing information outside Quebec or making a transfer governed by applicable European, UK or Asian law, we assess the relevant protection factors and use the required mechanism, such as contractual clauses, an adequacy decision or separate consent where it is valid and necessary. We can provide information about applicable safeguards on request.

7. Retention

We retain information only for the period needed for the stated purpose, then destroy it or irreversibly anonymize it, unless a legal obligation or reasonably anticipated dispute requires longer retention.

  • Contact and demo requests: while discussions are active and for up to 24 months after the last substantive interaction.
  • Meetings, invitations and confirmations: up to 24 months after the meeting, unless the discussion becomes a contractual relationship.
  • Newsletter: until consent is withdrawn. A minimal suppression record may be retained to prevent further sending and demonstrate that the withdrawal was honoured.
  • Technical and anti-abuse logs: for the shortest configured period needed for security, then deleted under the provider’s cycle, unless an incident is being investigated.
  • Records of rights requests, complaints and consent: as long as needed to process the request and meet evidentiary obligations.

8. Sale, targeted advertising and automated decisions

We do not sell your personal information. We do not share it for cross-context behavioural advertising and do not use the website to make an automated decision that produces a legal or similarly significant effect on you.

Because the website does not sell or share information for targeted advertising, Do Not Track and Global Privacy Control signals do not currently change its behaviour. You may nevertheless decline or withdraw consent to analytics cookies below.

9. Security and incidents

We apply administrative, technical and physical safeguards proportionate to the sensitivity of the information and the risks, including access restrictions, protection of transmissions, provider selection and incident response procedures. No system is entirely risk-free.

Where an incident reaches the threshold set by applicable law, we notify the competent authority and affected individuals within the required time.

10. Children

The Cogni6 website and services are intended for professionals, not children. We do not knowingly collect personal information from anyone under 14 in Quebec or under the applicable age in their jurisdiction. If you believe a minor has provided information to us, contact us so we can assess its deletion.

11. Exercising a right or making a complaint

Email francis@cogni6.com with your request and enough information to locate the relevant record. We may verify your identity in a proportionate way before responding. We respond within the time required by applicable law and explain any refusal and available recourse.

You may also contact the competent data protection authority, including Quebec’s Commission d’accès à l’information, the Office of the Privacy Commissioner of Canada, a European or UK supervisory authority, or the authority where you live when the law gives it jurisdiction.

12. Changes

We may update this policy to reflect changes in our practices or the law. The date at the top identifies the current version. If a material change requires new consent, we will ask before applying the new processing.

13. Cookies and similar technologies

Essential and preference cookies support the functionality you request. Google Analytics loads only after you accept. You may change your choice at any time with the buttons below this table.

cookie-consent

Essential

Remembers whether you accepted or declined analytics cookies.

Duration: 12 months

NEXT_LOCALE and locale-confirmed

Preference

Remember your selected language and avoid asking you to confirm it again.

Duration: 12 months

v3-promo-dismissed

Preference

Avoids immediately redisplaying a promotional message you dismissed.

Duration: 7 days

_ga and _ga_<identifier>

Optional analytics

Distinguish visits and produce Google Analytics audience statistics after consent.

Duration: up to 24 months, or earlier if you withdraw consent

The periods shown are maximums. Deleting browser cookies may erase your choice and cause the consent request to appear again.

Current choice: analytics cookies declined

Declining disables Google Analytics and requests deletion of audience cookies set by this website in your browser.

14. Rights by region

The rights below supplement the general commitments in this policy when a law in your jurisdiction applies. Legal exceptions may limit a request.

Quebec and Canada

Under Quebec’s Act respecting the protection of personal information in the private sector, PIPEDA or a substantially similar provincial law, you may request access and correction, withdraw consent, challenge compliance with the principles and, where the conditions are met, request cessation of dissemination, de-indexing or computerized portability.

  • A written request is handled within the time required by law.
  • You may complain to Quebec’s Commission d’accès à l’information or the Office of the Privacy Commissioner of Canada, as applicable.

European Economic Area, Switzerland and United Kingdom

Where the GDPR, UK GDPR or applicable Swiss law governs processing, you may request access, correction, erasure, restriction, portability or objection, and withdraw consent without affecting prior lawful processing. You may also complain to your supervisory authority.

  • You may object to direct marketing at any time.
  • Where we rely on a legitimate interest, you may ask about our balancing assessment and object on grounds relating to your situation.
  • Before actively targeting a market that requires a local representative, we will publish the appointed representative’s contact information.

United States

If a state privacy law applies to Cogni6 and your request, you may have the right to know or obtain collected categories and specific pieces, correct, delete, obtain a portable copy, opt out of certain sales, sharing, targeted advertising or profiling, and appeal a refusal.

  • We do not sell or share personal information for cross-context behavioural advertising.
  • We do not discriminate against you for exercising a recognized right.
  • An authorized agent may submit a request where the law permits, subject to reasonable verification.

Asia-Pacific

Global availability of the website does not mean Cogni6 targets every country. When we actively offer a service or process information in a jurisdiction such as Japan, Singapore, South Korea or mainland China, that jurisdiction’s mandatory rights and formalities supplement this policy.

  • Rights may include notice, access or copy, correction, deletion, consent withdrawal, objection or cessation of processing.
  • Before any targeting that requires a representative, local officer, separate consent or transfer assessment, we will implement that measure and publish the required information.
  • Electronic marketing remains subject to local consent, identification and unsubscribe requirements.

A question about your information?

Contact the Cogni6 person responsible for the protection of personal information. To protect your identity, do not send a confidential document with your first request.

francis@cogni6.com