PRIVACY
PRIVACY IN 60 SECONDS
We collect what we need
We limit collection to what is necessary for operations, analytics, and diagnostics.
We explain why
Every piece of data we collect has a specific purpose clearly explained in our registry.
You control optional tracking
You have full control over non-essential tracking via our cookie preferences.
Anonymous is not verified
We do not treat an anonymous browser as a verified person.
Limited Analytics
We do not send form PII into analytics unnecessarily.
Your rights respected
You can ask about or exercise rights over your data at any time.
YOUR DATA JOURNEY
Your Data Journey
Select a node in the journey above to understand what information is involved at each step.
Text Representation of Data Journey
- YOU: The visitor initiating the interaction..
- BERNIER WEBSITE: What you choose to share + Website / Device Signals. Information: Browser/device information, IP/network information, referrer, page requested, locale, consent state.. Purpose: Security, site operation, permitted analytics.. Conditions: IF ENABLED, WITH CONSENT WHERE REQUIRED..
- BERNIER SYSTEMS: Internal handling and processing.. Information: Diagnostic responses, aggregated analytics, lead forms.. Purpose: Business analysis, inquiry response, service improvement.. Conditions: WHEN YOU PROVIDE THIS INFORMATION..
- APPROVED PROCESSORS: Third-party infrastructure.. Information: Hosting providers, analytics platforms (if enabled), CRM.. Purpose: Service delivery and measurement.. Conditions: Only active processors receive necessary data..
- USE & RETENTION: Data lifecycle ending in deletion.. Information: Data is kept according to our retention policy.. Purpose: Compliance and operational necessity.. Conditions: See full policy for specific timeframes..
PROCESSING REGISTRY
| Activity / Purpose | Data Categories | Recipients / Processors | Retention & Control |
|---|---|---|---|
Essential Website Delivery Security, load balancing, basic site operation Necessary |
Source: Direct from browser |
Processors: Vercel (Hosting) Transfer: Standard Contractual Clauses | Retention: 30 days (Security Logs) Control: Cannot be disabled without breaking the site |
Visitor Operational Alerts Website security, bot detection, operational monitoring, and website improvement Necessary operational signal; no persistent identifier without analytics consent |
Source: Direct from request headers and a same-origin browser beacon |
Processors: Hosting Provider, MaxMind GeoLite2 (local database), Microsoft 365 Transfer: Standard Contractual Clauses where applicable | Retention: No application database retention. Delivered alerts follow Microsoft 365 mailbox retention policy. Control: Analytics identifier is only set after analytics consent. Contact Privacy Contact to exercise applicable rights. |
Cookieless Website Analytics and Session Replay Measure website usefulness and improve website experience Analytics consent; denied state uses provider no-consent behavior |
Source: Direct from browser through Google Tag Manager and Microsoft Clarity |
Processors: Google, Microsoft Transfer: Provider data-transfer terms and safeguards apply | Retention: Controlled in the respective analytics platforms; no application database retention Control: Manage analytics preferences through Cookie Preferences |
Find the Friction Diagnostic Provide business diagnostic, follow up on leads Action-based (Form submission) |
Source: Provided by user |
Processors: Payload CMS, Database Provider Transfer: Standard Contractual Clauses | Retention: Until deleted by user or 2 years Control: Submit data voluntarily, request deletion via Privacy Contact |
FULL POLICY
Welcome to the Bernier Group Privacy Policy. This document explains how we collect, use, protect, and share information when you interact with our website.
What We Collect
We collect information that you voluntarily provide to us (such as when you fill out the Find the Friction diagnostic) and information generated automatically by your use of our website (such as basic browser and device information). For website security, bot detection, operational monitoring, and website improvement, this may include IP address, country inferred locally from IP, browser and device information, referrer host, page path, consent state, and a bot or automation classification.
Why We Use It
Our primary purpose for processing data is to provide a secure, functioning website, understand aggregated usage patterns, and respond to your direct inquiries or diagnostic submissions. Operational visitor alerts are sent to our internal team and are not retained in an application database; delivered alerts follow the retention policy of our Microsoft 365 mailbox.
Cookies & Tracking Technologies
We may use cookies and similar technologies. You can control these through our cookie preference manager. Google Analytics and Microsoft Clarity receive the consent state selected in that manager. When analytics storage is denied, they use their documented no-consent or cookieless behavior and we do not create a persistent website visitor identifier. We do not treat an anonymous browser as a verified person.
Find the Friction
When you submit a Find the Friction diagnostic, we use the information to help you recognize and prioritize business friction. If you provide contact information, we may associate the diagnostic with your organization.
Retention & Security
We retain your information according to our retention schedule and employ industry-standard security measures to protect it.
Your Choices & Rights
Depending on your jurisdiction, you may have rights to access, correct, delete, or restrict the processing of your personal information. Please contact us to exercise these rights.
CONTACT & EXERCISE RIGHTS
Contact Information
- Data Controller
- Jean Bernier
- Registered Address
- Bogotá, Colombia
- Privacy Contact
- legal@berniergroup.com
- Legal Contact
- legal@berniergroup.com