Privacy policy

Who this policy covers

This policy explains how Noctoptics Inc. handles personal information collected through noctopark.com. Noctoptics Inc. is a Canadian company with its head office at 4706 Louis-B.-Mayer, Laval, Québec H7P 0L9.

It applies to this website only.

If you parked at a site running NoctoPark

This is the section most people are looking for, so it is near the top. If you parked in a lot that uses NoctoPark, the operator of that property — the hotel, the building, the municipality — decides what is collected there and why. They are responsible for that information under privacy law; we supply and support the system on their behalf.

Contact the operator of the property first. If you cannot reach them, write to us at [email protected] and we will help you identify who holds the data.

What we collect on this website

What you give us. Our demo and contact forms ask for your name, company, work email, phone number, the solution you are interested in, and anything you write in the message field. That is all we ask for, and all of it is optional except a way to reply to you.

What is collected automatically. Cloudflare Web Analytics records page views without cookies and without building a profile of you. Our hosting keeps standard server logs, which include IP addresses, for security and troubleshooting.

Only if you accept. Google Analytics 4 runs only when measurement is on for you (see Cookies below). If you refuse, it does not run.

Only if you accept. Microsoft Clarity records how visitors use the site (clicks, scrolling and mouse movement) as session recordings that are not linked to your name or email, to show us where pages confuse people. It runs only when measurement is on for you, and sets cookies when it does.

If you arrive from a Google ad, the campaign tags in the link (source, medium, campaign and the search keyword) are sent with your enquiry or demo booking, so we can tell which ad led to it. The click identifier in the link (a code Google adds to ad links) is also kept for your visit and sent with your enquiry or booking, so it can be matched to the ad that led to it, including if you have not yet answered the cookie banner. We do not keep or send it if you have refused, or if your browser sends a Global Privacy Control signal.

Why we use it

To reply

Answering your enquiry and arranging a demo.

To follow up

Contacting you about the enquiry you made. We do not add you to a newsletter you did not ask for.

To improve the site

Understanding which pages are useful, in aggregate.

To keep it working

Blocking abuse, diagnosing faults, keeping the forms from being used by bots.

Our legal basis

We rely on your consent when you submit a form or accept analytics, and on our legitimate interest in running a secure website and responding to business enquiries. In the United States and in Canada outside Québec, measurement relies on notice and on your ability to refuse it. For the click identifier from an ad, we rely on our legitimate interest in measuring our advertising, and on this notice. You can withdraw consent at any time by writing to us.

Who else sees it

We do not sell personal information and we do not share it for advertising. A small number of service providers process data on our behalf:

• Cloudflare — hosting, security and cookieless analytics.
• Cloudflare Turnstile — checks that a form submission is not automated.
• Resend — delivers the email your form submission generates, and the confirmation we send back to you.
• Microsoft 365 — our business email and the spreadsheet our sales team works from, where a copy of your submission is kept so an enquiry is not lost in an inbox.
• Google (Tag Manager, Analytics and Ads) — only when measurement is on for you. Tag Manager loads our measurement tags; Analytics counts visits; Google Ads measures which of our ads led to an enquiry, using the click identifier from the ad link when you arrive from an ad. When measurement is off, these are loaded in a consent-denied state and set no cookies.
• Microsoft Clarity — only when measurement is on for you. Records how visitors use pages (clicks, scrolling, mouse movement) so we can improve them.
• Calendly — only on the booking page. The “Book a free demo” buttons are now plain links to that page, and nothing is loaded from Calendly anywhere else on the site. On the booking page the calendar loads as soon as you open it. We then receive what you enter in the booking form, and we pass the booking page the campaign tags and, if you came from a Google ad, the click identifier, so the booking can be matched to the ad.

Some of these providers operate outside Québec, including in the United States, which means your information may be stored or processed there and may be subject to the laws of that country. We use providers that commit to appropriate safeguards.

How long we keep it

Form submissions are kept for as long as we are in contact with you about your enquiry, and for up to 24 months afterwards, so that we can pick up a conversation where it left off. Server logs are kept for a short period for security. If you ask us to delete your information sooner, we will.

Cookies

We use a single first-party cookie to remember your answer to the consent banner, so you are not asked on every page. No cookie is set for analytics or ads unless measurement is on for you.

When measurement is on. In Québec, the European Union, the United Kingdom and Switzerland, and anywhere we cannot tell where you are, only after you accept in the banner. Elsewhere in Canada and in the United States, it is on by default and you can refuse at any time, in the banner or with Cookie settings in the footer. Refusing turns it off and removes the measurement cookies already set. We also treat your browser's Global Privacy Control signal as a refusal. We use your approximate location, worked out from your connection by our host Cloudflare, only to choose which rule applies; it is not stored.

The click identifier. This is a code in an ad link, not a cookie, so the rule above does not apply to it. If you arrive from a Google ad we keep it for your visit and send it with your enquiry or booking, unless you refuse or your browser sends a Global Privacy Control signal.

np_consent — records whether you accepted or refused measurement cookies, so we do not ask again. Set by us, kept for 12 months, and contains nothing but that answer. You can change it any time with Cookie settings in the footer.

Fonts are served from this site rather than from a font network, so loading a page does not tell a third party that you visited.

Your rights

Under Québec's Law 25 and Canadian federal privacy law you can:

• Access the personal information we hold about you.
• Correct it if it is wrong or incomplete.
• Withdraw consent and ask us to stop using it.
• Ask for deletion, and for de-indexing where the law provides for it.
• Receive a copy in a structured, commonly used technical format.
• Complain to the Commission d'accès à l'information du Québec if you are not satisfied with our answer.

We answer requests within 30 days. There is no charge.

Automated decisions

This website does not make automated decisions about you. Nothing on noctopark.com profiles you or decides anything based on your data.

If something goes wrong

If a confidentiality incident creates a risk of serious injury, we will notify the Commission d'accès à l'information and the people affected, and we keep a register of incidents as the law requires.

Who to contact

Write to us with any question about this policy, or to exercise any of the rights above.

Changes to this policy

If we change how we handle personal information, we will update this page and change the date at the top. Material changes will be flagged on the site.