Privacy Policy

1. Who we are

DIMAH operates the website available at https://www.dimah.io. DIMAH is a creative agency and production studio based in Montreal, Quebec, Canada.

Any question about this policy or about your personal information may be sent to Shotbydimah@gmail.com.

2. Privacy Officer

Under Quebec law, the person with the highest authority within DIMAH is responsible for the protection of personal information, unless that function has been delegated in writing to another person.

For any privacy-related request, you can reach the Privacy Officer at Shotbydimah@gmail.com.

3. Personal information we collect

We collect three kinds of information:

1. Information you provide directly. When you submit the project-inquiry form or write to us by email, we receive what you choose to share:

• your name and, if provided, your company or organization;
• your email address and, optionally, your phone number;
• the project type, approximate budget, and desired timeline you select;
• your project description and how you heard about DIMAH;
• the content of any email or message you send us.

2. Information collected automatically. Like most websites, our hosting infrastructure records basic technical information when you visit — such as your IP address, browser and device type, and the pages requested — in server and security logs used to operate and protect the site. The site also stores your language preference (see the cookies section below).

3. Information received through third-party tools. If you book a discovery call through our booking link, the scheduling platform collects the information you enter there (such as your name, email, and chosen time) and shares the booking details with us.

4. Why we collect this information

We use personal information only for the following purposes:

• responding to your inquiries and communications;
• evaluating potential projects and preparing estimates or proposals;
• scheduling and holding discovery calls;
• communicating with you about services you have requested;
• operating, securing, and diagnosing technical issues with the website;
• improving the website's performance;
• measuring website usage — only if optional analytics are enabled and, where required, only with your consent;
• meeting legal obligations and preventing abuse or fraud.

We do not sell personal information, and we do not use it for purposes unrelated to the ones above.

5. How information is collected

Information reaches us through:

• the project-inquiry form on the contact page;
• email, when you write to us directly;
• the external booking link, if you schedule a call;
• a first-party cookie that remembers your language preference;
• server and security logs generated automatically by our hosting infrastructure.

6. Consent

We collect, use, and communicate personal information with appropriate consent, unless the law permits or requires otherwise. Submitting the inquiry form is a voluntary act: the information you provide is used to review and respond to your request, as stated next to the form.

Browsing the website does not, by itself, constitute consent to optional tracking. No optional analytics or marketing technology is currently active on this site. If optional tools are added in the future, they will not run before you are asked, refusing will be as easy as accepting, and you will be able to withdraw consent at any time.

7. Cookies and similar technologies

This website uses a deliberately minimal set of technologies:

• Language preference (necessary/functional) — a first-party cookie named NEXT_LOCALE remembers the language of your visit for approximately 12 months so the site opens in your language next time. It contains only the language code ("en" or "fr") and identifies nothing about you.
• Server and security logs (strictly necessary) — standard technical logs kept by our hosting provider to operate and protect the site.
• Analytics (optional — not currently active) — no analytics, advertising, or marketing cookies are set by this site today. If optional analytics are enabled in the future, a consent choice will be requested first and stored locally on your device, and this section will be updated to name the tool, its purpose, and its duration.

Fonts and media are served from our own domain — the site does not load external font services or third-party video embeds.

8. Service providers

To operate the website, personal information may be handled by a small number of service providers acting on our behalf:

• Hosting and content delivery — the website is hosted on Vercel, whose infrastructure serves the pages and keeps standard server logs.
• Inquiry storage — project-inquiry submissions are stored in a database operated by Supabase so we can review and respond to them.
• Scheduling — the discovery-call booking link directs to an external scheduling platform (currently Cal.com), which processes the booking information you enter there.

These providers are expected to use personal information only for the purposes for which it was entrusted to them and to protect it with appropriate safeguards. Because service providers process some information, we cannot say that information is "never shared" — but it is only shared as described here.

9. Information outside Québec

The service providers named above may process or store information on servers located outside Québec and outside Canada, including in the United States. When that is the case, the information may be subject to the laws of those jurisdictions and accessible to their authorities under those laws.

Before communicating personal information outside Québec, we take into account the sensitivity of the information, the purposes of its use, and the protections it will receive.

10. Retention and destruction

We keep personal information only as long as reasonably necessary for the purposes described in this policy and for our legal and business requirements. In practice:

• inquiry records are kept while we evaluate and respond to the request;
• communications related to an active project are kept for the duration of the engagement and any follow-up it requires;
• records of inquiries that do not lead to a project are not kept longer than needed;
• security and server logs are kept for the short operational periods set by our hosting provider;
• records of consent choices, where they exist, are kept as evidence of the choice made.

When personal information is no longer required, it is securely destroyed or anonymized, subject to applicable legal requirements.

11. Security safeguards

We protect personal information with safeguards proportionate to its sensitivity, including encryption in transit (HTTPS), access limited to the people who need the information to respond to you, authentication on the systems that store it, reputable hosting infrastructure, and regular software updates.

No website can guarantee absolute security, and we do not claim certifications we do not hold — but we take reasonable, concrete measures to reduce risk.

12. Confidentiality incidents

DIMAH maintains procedures for responding to confidentiality incidents involving personal information. If an incident presents a risk of serious injury, the affected individuals and the Commission d'accès à l'information du Québec will be notified as required by applicable law, and we will take reasonable measures to reduce the risk of harm.

13. Your rights

Subject to the exceptions provided by law, you may ask us to:

• access the personal information we hold about you;
• correct information that is inaccurate or incomplete;
• withdraw your consent to optional uses, where applicable;
• explain how your information was collected, used, or communicated;
• cease disseminating information or de-index it, where the law provides for it;
• receive computerized personal information you provided in a structured, commonly used technological format, where legally applicable and technically feasible;
• obtain a review of any decision based exclusively on automated processing, if such systems are ever used (they are not today).

To exercise any of these rights, write to Shotbydimah@gmail.com. We will respond within the timelines set by law. Some requests may be subject to legal exceptions; if we cannot grant a request, we will explain why.

14. Automated decisions and profiling

DIMAH does not use personal information to make decisions based exclusively on automated processing, and the website performs no profiling. If that ever changes, this policy will be updated first and any required consent will be requested.

15. Children

The website and DIMAH's services are intended for businesses and adults seeking creative or production services. We do not knowingly collect personal information from children through this website.

16. External links and social platforms

The website links to external services — including our Instagram and LinkedIn profiles and the booking platform. Once you leave dimah.io, the privacy practices of those providers apply. We encourage you to review their policies.

17. Updates to this policy

Material changes to this policy will be reflected on this page, and the "last updated" date shown above will be revised. The version published here is always the current one.

18. Contact and complaints

For any privacy question, request, or complaint, contact: Privacy Officer – DIMAH, Shotbydimah@gmail.com. We take every privacy concern seriously and will respond as promptly as we can.

If you are not satisfied with our response, you may also contact the Commission d'accès à l'information du Québec, the public body responsible for overseeing the protection of personal information in Québec.