Privacy Policy

This policy explains what personal information yesid.dev collects, why, where it goes, and the rights Quebec law gives you over it. I run this site myself and I wrote this policy to be read, so it is in plain language. The short version: the site collects very little, and what it does collect exists only so I can answer you.

Last updated: 2026-07-12

Who I am#

yesid.dev is the portfolio and contact site of Yesid Fernando Otalora, operating as a sole proprietor in Quebec, Canada. I am a freelance consultant in digital infrastructure: databases and SQL, data pipelines and automation, dashboards and analytics, and websites and e-commerce. The site itself sells nothing: there is no checkout, no user account, and no newsletter.

Which laws apply#

yesid.dev is a Quebec business, so this policy is written first for Quebec's Act respecting the protection of personal information in the private sector, as modernized by Law 25, which is recognized as substantially similar to Canada's federal law. When personal information crosses provincial or national borders, or when I work with clients elsewhere in Canada, the federal Personal Information Protection and Electronic Documents Act (PIPEDA) applies as well. I hold myself to whichever protection is stronger.

What I collect and how#

The site is prerendered and sets no tracking cookies. Personal information reaches me through contact, booking, and optional Plausible analytics. Plausible stays off unless you allow it.

Contact form#

If you use the form on the contact page, I receive your name, your email address, and your message. The form is relayed by Web3Forms, a third-party service, which delivers it to my email inbox.

Direct email#

If you write to contact@yesid.dev, I receive whatever you choose to send me.

Booking a call#

If you book a call, the booking runs on cal.com. You provide your name, your email address, and the meeting details; cal.com shares them with me so the meeting can happen.

Website analytics#

I use Plausible Analytics Cloud, operated by Plausible Insights OÜ in Estonia, to measure page paths, referral and campaign sources, browser, operating-system and device categories, approximate country, region and city, and four conversion events: a successful contact-form submission, a click to book a call, a click on a direct contact channel, and a click to inspect a project's live site or public source repository. I do not attach contact-form fields, destination URLs, link labels, or custom properties to those events. Plausible sets no cookies, uses no browser storage, does no cross-site tracking and creates no persistent identifier. Each request contains an IP address and User-Agent; Plausible combines them with a value that changes daily to count visitors for that day, then discards the raw values. Visitor data is processed and stored in the European Union. I see site-usage reports, not named people. Plausible is off until you allow it.

Preferences stored in your browser#

The site remembers a few functional preferences (theme, language, collapsed sections, a draft of your form message) in your browser's localStorage. This information never leaves your device and is never transmitted to me or to anyone else.

Why I collect it#

  • To respond to your message.
  • To prepare and hold the meeting you booked.
  • To carry out work you hire me for.
  • To understand, in aggregate, how the site is used.

I use your information for nothing else. If I ever needed it for a new purpose, I would ask for your consent first.

Where it goes#

I use a small number of service providers, and some are located outside Quebec, in the United States and the European Union. Your personal information may therefore be communicated outside Quebec. Before relying on each provider, I assessed whether your information would receive adequate protection there, as section 17 of the Act respecting the protection of personal information in the private sector requires.

  • Vercel: hosts the site (US company, global content delivery network).
  • Web3Forms: relays the contact form to my email.
  • cal.com: handles call booking.
  • Railway and Neon: run the backend of my content system. They never process visitor data; the published site is static and makes no calls to them.
  • Plausible Analytics (Plausible Insights OÜ, Estonia): processes the limited site-measurement data described above. Visitor data is processed and stored in the European Union.

I do not communicate your personal information to anyone else.

What I do not do#

  • No advertising and no ad networks.
  • No selling, renting, or trading of personal information. Ever.
  • No tracking cookies. Optional Plausible analytics is off by default and runs only after you allow it; you can reopen Analytics preferences from the footer.
  • No profiling and no automated decision-making.

Retention#

I keep emails, form messages, and booking details for as long as our exchange, and any work that follows from it, requires; then I delete them. As a rule, correspondence and booking details are kept for up to three years after our last exchange, which tracks Quebec's general limitation period; records tied to an actual engagement (contracts, invoices, and the correspondence that supports them) are kept as long as tax and accounting law requires, at least six years. Plausible retains site-measurement data while my account is active. It does not store raw IP addresses or full User-Agent values, and I can permanently delete the site's stats.

Security#

I reduce risk first by collecting little. Beyond that: only I have access to the inbox and the booking account, both are protected by strong multi-factor authentication, and my providers encrypt data in transit. No system is perfectly secure, and I will not pretend otherwise, but these measures are proportionate to the sensitivity of what I hold: names, email addresses, and messages.

Your rights#

Quebec's Law 25 gives you the following rights over the personal information I hold about you:

  • Access: obtain a copy of your information (s. 27).
  • Rectification: have inaccurate or incomplete information corrected (s. 28).
  • Withdrawal of consent: withdraw your consent to a use or communication of your information.
  • De-indexing: ask that a hyperlink attached to your name be de-indexed where the law provides for it (s. 28.1).
  • Portability: since September 2024, receive the computerized personal information you provided to me in a structured, commonly used technological format, or have it sent to another organization.

To exercise any of these rights, write to contact@yesid.dev. I may need to verify your identity, and I will respond in writing within 30 days, as the law requires. There is no fee for a reasonable request.

Confidentiality incidents#

I keep a register of confidentiality incidents, and if an incident involving your personal information presents a risk of serious injury, I will notify you and the Commission d'accès à l'information du Québec, as the law requires.

Privacy Officer#

I am the person in charge of the protection of personal information for this site. Title: Privacy Officer. Name: Yesid Fernando Otalora. Contact: contact@yesid.dev.

Complaints#

If anything about how I handle your personal information concerns you, please contact me first at contact@yesid.dev; I take this seriously and will respond quickly. If my answer does not satisfy you, you may file a complaint with the Commission d'accès à l'information du Québec (CAI), the public body that oversees the protection of personal information in Quebec. For matters that fall under federal law, for example if you are outside Quebec, you may also contact the Office of the Privacy Commissioner of Canada (OPC).

Changes to this policy#

If I change this policy, I will update this page and the date at the top. If a change materially affects how your personal information is handled, I will say so plainly here.

Contact#

For any question about this policy or about your personal information: contact@yesid.dev, or the form on the contact page (/contact). You are welcome to write in English, French, or Spanish.