Privacy Policy

This Privacy Policy applies to the website nasdrow.com (the « Site »), jointly operated by:

• 9506-8847 Québec inc. (Nasdrow), NEQ 1179405890, Unit #523 – 3450 Saint-Denis Street, Montréal, QC H2X 3L3, Canada;
• Nasdrow SAS, SIREN 942035940, 5 rue Fénelon, 33000 Bordeaux, France,

together, « Nasdrow », « we ». Depending on your place of residence, one or the other of these entities acts as the controller of your personal information (Canada/Québec) or as data controller within the meaning of the GDPR (France/EU); both entities consider themselves joint controllers of the Site and the processing activities described below.

Privacy Officer: Victoire Guglieri, Chief Executive Officer (CEO)
Contact: contact@nasdrow.com

Nasdrow is committed to processing your personal information in accordance with:

• in Canada: Québec's Act Respecting the Protection of Personal Information in the Private Sector ( « Law 25 ») and, where applicable, the Personal Information Protection and Electronic Documents Act (PIPEDA);
• in France/EU: the General Data Protection Regulation (GDPR — Regulation (EU) 2016/679) and the French Data Protection Act (Loi Informatique et Libertés);
• for our commercial communications: Canada's Anti-Spam Legislation (CASL).

As the Site is a brand-showcase site with no online store, we deliberately collect very little data. We collect:

We do not collect any payment or credit card data: since the Site does not process any direct sales, no financial transactions take place on it.

Your information is never sold. It may be disclosed to the following third parties, acting as processors on our behalf:

• Lovable Labs Incorporated (representative/DPO: Lovable Labs AB, Regeringsgatan 25, 111 53 Stockholm, Sweden): platform used to develop and host the Site, including storage of data submitted through our forms (newsletter, contact, co-creation).
• Authorized Nasdrow staff (Canada and France), strictly to the extent necessary for the performance of their duties.
• Any competent authority, if required by law.

No analytics tool (Google Analytics, Meta Pixel, etc.) or third-party marketing service is currently integrated into the Site. Should we decide to add one, this Policy and our cookie banner would be updated beforehand, and your consent sought in accordance with applicable law.

Given Nasdrow's structure (Canada and France) and our hosting provider (Sweden, European Union), your personal information may be transferred to and processed in a country other than your country of residence.

• Transfers between Canada and France/EU are carried out in compliance with the requirements of Law 25 and the GDPR, including through standard contractual clauses or any other recognized mechanism ensuring an adequate level of protection.
• The hosting of our data through Lovable Labs (European Union — Sweden) benefits from the protection framework offered by the GDPR for the data of Canadian residents transferred to the EU.

We retain your information only for as long as necessary for the purposes described above:

• Newsletter: until you unsubscribe, or after 24 months of inactivity (no email opens);
• Contact requests: 36 months from the last exchange;
• Co-creation data: 24 months, or until the launch of the relevant product, as applicable;
• Technical/log data: in accordance with our hosting provider's standard retention periods, generally 12 months.

If you reside in Canada (Québec)

Under Law 25, you have the right to:

• access your personal information and obtain a copy of it;
• have inaccurate, incomplete, or ambiguous information corrected;
• withdraw your consent at any time;
• request that the disclosure of your information cease or that it be de-indexed, in certain circumstances;
• file a complaint with the Commission d'accès à l'information du Québec (CAI) if you believe your rights have not been respected.

If you reside in France or the European Union

Under the GDPR, you have the right to:

• access, rectify, and erase your data;
• restrict and object to processing;
• data portability;
• withdraw your consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal;
• provide instructions regarding the fate of your data after your death;
• lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL) — www.cnil.fr.

To exercise your rights

Contact us at contact@nasdrow.com, specifying your request and, if possible, a means of verifying your identity. We will respond within a maximum of 30 days (Law 25) or one month (GDPR), which may be extended as permitted under applicable law.

Nasdrow implements reasonable technical and organizational measures to protect your personal information against unauthorized access, loss, disclosure, or destruction, including the security measures offered by our hosting provider. However, as no system is infallible, we cannot guarantee absolute security.

The Site is not intended for individuals under 18 years of age, and we do not knowingly collect personal information from minors. If you believe we hold information about a minor, please contact us so that we may delete it.

We may modify this Policy at any time, including to reflect changes to the Site, our practices, or applicable regulations. The date of the last update appears at the top of this document. In the event of a significant change, we will notify you via a notice on the Site or, if you are subscribed to our newsletter, by email.

For any questions regarding this Privacy Policy or the processing of your personal information:

Nasdrow — Victoire Guglieri
contact@nasdrow.com
Unit #523 – 3450 Saint-Denis Street, Montréal, QC H2X 3L3, Canada
5 rue Fénelon, 33000 Bordeaux, France