Legal
Privacy policy
What this website collects, why, who receives it and how to exercise your rights.
Effective
In short. This website presents the TB Autosports racing team. It is operated by an independent webmaster based in Québec, with the permission of TB Auto Sports S.E.C. We collect as little as possible: what you write in a contact form, technical data needed for security and, only if you accept, visit statistics through Google Analytics. Your information is used to reply to you and to improve the site. It is never sold, never used for advertising and never added to a mailing list. You can ask at any time to access, correct or delete it, or withdraw your consent, using the .
Who we are
The tbautosports.com website (the "site") is designed, built and operated by an independent webmaster based in Québec (the "Operator"), with the permission of TB Auto Sports S.E.C. ("TB Autosports"), a limited partnership registered in Québec (Québec enterprise number 3382423765).
TB Auto Sports S.E.C. does not operate the site and is not responsible for it. The Operator is responsible for the site, its technology and the personal information collected through it, in accordance with Québec's Act respecting the protection of personal information in the private sector ("Law 25").
To protect their privacy, the Operator's identity is not published. The Operator acts as the site's person in charge of the protection of personal information and can be reached at any time through the .
Scope
This policy applies to personal information collected on the site, in English and French. It does not apply to third-party sites and services the site links to (such as Instagram, YouTube or IMSA), which have their own policies.
When you write to the team about a general question, sponsorship or media, your message is passed on to TB Auto Sports S.E.C., which replies directly and then handles those exchanges under its own practices.
Information we collect
What you send us
When you use a contact form:
- your first and last name;
- your email address;
- your phone number, if you choose to give it;
- the topic you choose and your message;
- the language of the page.
Technical data
- Form security: Google reCAPTCHA receives technical data about your visit (IP address, browser, interactions with the page) to tell people from bots.
- Hosting: like any website, our host keeps technical logs (IP address, browser, page requested, date and time) to run and protect the site.
- Your cookie choice: a cookie remembers whether you accepted or refused analytics.
Visit statistics (only with your consent)
If you accept analytics, Google Analytics records the pages viewed, visit length, device and browser type, language and approximate location (city or region, never your address), using an identifier stored in your browser. Google Analytics never receives your name, your email or the content of your messages.
We collect no payment information, create no user accounts and collect no sensitive information.
How we collect information
- Directly from you, when you fill in a contact form.
- Automatically, through hosting logs, and through reCAPTCHA when a form is displayed.
- Through cookies, as described in our cookie policy. Analytics cookies are only set after you consent.
No technology that can identify, locate or profile you is turned on by default: analytics stays off until you accept it.
Why we use your information and on what basis
- Replying to your message and sending you an acknowledgment (contact form): your consent, given by sending the form.
- Passing your message to the right person, the team or the webmaster (contact form): your consent.
- Protecting the site and its forms from spam and abuse (technical data, reCAPTCHA): our legitimate interest in keeping the site secure.
- Measuring visits to improve the site (visit statistics): your consent, which you can withdraw at any time.
- Meeting our legal obligations, where applicable: legal obligation.
When a form is sent by someone who accepted analytics, the site's server tells Google Analytics that a message was sent (the topic and language only, never your name, email or message).
We make no decision based exclusively on automated processing of your information.
Sharing and disclosure
We do not sell or rent your personal information. It is shared only with the following people and providers, as far as needed:
- TB Auto Sports S.E.C.: messages about the team (general questions, sponsorship, media).
- Vercel Inc. (United States): website hosting.
- SiteGround: hosting of the mailboxes the messages travel through.
- Google LLC (United States): reCAPTCHA (form security), Google Analytics (visit statistics, with consent) and YouTube (embedded videos, when you press play).
These providers use your information only to provide their services, under their own privacy commitments. We may also disclose information when the law requires it.
Transfers outside Québec
Some providers store or process information outside Québec, notably in the United States. Before using them, we assessed that they protect personal information adequately, as Law 25 requires. For visitors from the European Union, these providers rely on recognized mechanisms such as the EU–U.S. Data Privacy Framework or standard contractual clauses.
Cookies and similar technologies
The site uses a small number of cookies: those needed for it to work and stay secure and, only with your consent, those of Google Analytics. Statistics go through the site's own domain. You can change your mind at any time in the . All the details are in our cookie policy.
Retention
- Messages to the webmaster or about privacy: 24 months after the last exchange, then deleted.
- Messages to the team: kept by TB Auto Sports S.E.C. under its own practices once passed on.
- Google Analytics statistics: 14 months.
- Cookies: 12 months for your cookie choice, 13 months for the Google Analytics cookies.
- Hosting logs and reCAPTCHA data: for the limited period set by each provider.
Information may be kept longer if the law requires it.
Security measures
- HTTPS (TLS) encryption on every page and every exchange.
- No database: messages are not stored on the site; they are delivered by email.
- Password-protected mailboxes, accessible only to the people who answer the messages.
- Spam and abuse protection on the forms (reCAPTCHA, limits on repeated sends).
- Technical keys and passwords kept in the host's secure environment, never in the code.
If a confidentiality incident occurs, the Operator takes steps to reduce its consequences, keeps a register of incidents and, if the incident presents a risk of serious injury, notifies the Commission d'accès à l'information and the people concerned, as Law 25 requires.
Children
The site is not directed at children under 14, and we do not knowingly collect information about them. A person under 14 should not use the forms without the consent of a parent or guardian. If you believe a child has sent us information, use the and we will delete it.
Your rights and how to exercise them
Under Law 25, you can:
- access the personal information we hold about you;
- have it corrected if it is inaccurate, incomplete or ambiguous;
- withdraw your consent at any time (for example to analytics, in the );
- ask that your information stop being disseminated or be deleted where the law allows;
- receive your information in a structured, commonly used technological format (portability).
If you live in the European Union, you also have the rights set out in the GDPR, including erasure, restriction and objection.
To exercise a right, use the . We may need to verify your identity before acting on it. We reply within 30 days.
If you are not satisfied with our answer, you can file a complaint with the Commission d'accès à l'information du Québec. Residents of other provinces can contact the Office of the Privacy Commissioner of Canada, and residents of the European Union, their country's data protection authority.
Changes to this policy
We may update this policy, for example if the site starts using a new tool. The effective date at the top of the page shows the current version. If a change affects the cookies that need your consent, we will ask for your choice again.
Contact
For any question about this policy or your personal information, write to the person in charge of the protection of personal information through the . For a question about the website itself, .
Effective date and governing law
This policy is in effect from the date shown at the top of the page. It is governed by the laws of Québec and the federal laws of Canada that apply there. If the English and French versions differ, the French version prevails.