Privacy policy
Last updated: October 19, 2026
Who we are
Blue Black Purple (BBP) Corp. ("BBP", "we") is a company based in Montréal, Québec. We are responsible for the personal information described in this policy.
This policy explains what we collect through bbp.community, why, on what basis, how long we keep it, and your rights under Québec's Act respecting the protection of personal information in the private sector, Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, for visitors in the European Union, the General Data Protection Regulation (GDPR).
Person in charge of the protection of personal information
The person in charge of the protection of personal information at BBP is the company's Chief Executive Officer. Write to info@bbp.community, subject "[Confidentialité / Privacy]".
What we collect and why
Visiting the site. Our host, Google Cloud, records technical information about each request: IP address, date and time, page requested, and browser and device type. We use it only to deliver the site, keep it secure and fix problems. Basis: our legitimate interest in running a secure site (GDPR art. 6(1)(f)). These logs are kept for 30 days, then deleted.
Messages. When you write to us, by email or through our contact form, we receive your email address, your name, your organization if you give it, and your message. Contact form answers are collected through Microsoft Forms (Microsoft Corporation), which processes them on our behalf. We use this information to reply and to follow up on your request. Basis: the steps you ask us to take, or our legitimate interest in answering you (GDPR art. 6(1)(b) and (f)). We keep correspondence as long as needed to handle your request and any relationship that follows, then delete it, unless the law requires us to keep it longer.
Build the Loop applications. They are collected through Microsoft Forms (Microsoft Corporation), which processes your answers on our behalf: contact details and information about your company, project and team. We use them only to assess your application and contact you. Basis: steps you ask us to take before a possible agreement (GDPR art. 6(1)(b)). Applications that don't lead to a partnership are deleted once they are no longer needed for the assessment and its follow-up.
Language and privacy choices. When you switch languages, make privacy choices or close the privacy notice, your browser stores them (bbp_lang, bbp_consent). They stay on your device and are not sent to us. They are strictly necessary for the features you ask for, so they don't require consent.
We don't sell your personal information, don't use it for advertising, and make no decisions about you by automated means.
Service providers and transfers outside Québec
Service providers process some information on our behalf: Google Cloud (hosting, on servers in the United States), Microsoft (Forms), our email provider and, if you accept audience measurement, Google Analytics. Some information is therefore stored or processed outside Québec and Canada, including in the United States, where local authorities may be able to access it under local law.
For visitors in the European Union: the European Commission recognizes Canada as providing adequate protection for organizations subject to PIPEDA, and Google and Microsoft take part in the EU-U.S. Data Privacy Framework.
Links to WhatsApp, Instagram, LinkedIn, Microsoft Forms and other external sites lead to services governed by their own privacy policies.
Security
The site is only served over an encrypted connection (HTTPS), and access to messages and applications is limited to the people at BBP who need it. If a confidentiality incident presents a risk of serious injury, we will notify the people concerned and the Commission d'accès à l'information du Québec, as the law requires.
Your rights
You can ask to access your personal information and to have it corrected or deleted. You can also ask us to stop disseminating it or to de-index it, to send it to you or to another organization in a structured, commonly used format, and, under the GDPR, to restrict its processing or object to it. You can withdraw your consent at any time.
Write to info@bbp.community. We reply within 30 days and may need to confirm your identity first.
If you're not satisfied with our answer, you can file a complaint with the Commission d'accès à l'information du Québec, the Office of the Privacy Commissioner of Canada or, in the European Union, the data protection authority of your country.
Changes to this policy
If our practices change, we will update this page and the date at the top.