Privacy Policy

1) Who we are

Site operator / controller: [LEGAL ENTITY NAME] (“Valorium X”, “we”).
Address: [FULL POSTAL ADDRESS].
Privacy Officer (Québec / Law 25): [NAME, TITLE] • privacy@valoriumx.org

2) What we collect

• Contact info: name, email, message content when you email us or submit a form.
• Account / community info (if you choose to share it): handles/usernames (e.g., Discord/Telegram) and messages you send to us.
• Technical data: IP address, device/browser information, log data, and security events (e.g., rate-limit triggers).
• Cookies: essential cookies and (if enabled) analytics/preferences cookies. See our Cookie Policy.

3) Why we use personal information

• To respond to you and provide requested information.
• To operate, secure, and improve our website (including fraud/abuse prevention).
• To manage community, research collaboration, and responsible disclosure programs (if applicable).
• To meet legal obligations and enforce our Terms.

4) Legal bases (global)

Depending on where you live and how you interact with us, we rely on consent, contract necessity, legitimate interests (site security and improvement), and legal obligations. For the EU/UK, we provide the information required in GDPR privacy notices (Articles 13–14).

5) Sharing

We do not sell your personal information. We may share it with:

• Service providers (hosting, email, security) under contractual confidentiality and security requirements.
• Legal/Compliance when required to comply with law, respond to lawful requests, or protect rights and safety.

6) International transfers

Your information may be processed outside Québec/Canada depending on our service providers. We use contractual and technical safeguards appropriate to the sensitivity of the information.

7) Retention

We keep personal information only as long as needed for the purposes above (or longer if required by law), then delete or anonymize it.

8) Security

We use reasonable administrative, technical, and physical safeguards (access control, least-privilege, logging, and security monitoring). No system is 100% secure; please do not send sensitive secrets by email.

9) Your privacy rights

• Québec (Law 25): access, rectification, withdrawal of consent, and other rights under applicable law. Law 25 also requires a clear privacy policy when collecting information by technological means.
• Canada (PIPEDA): rights aligned with fair information principles.
• California (CCPA/CPRA): notice-at-collection requirements and consumer rights may apply depending on business thresholds and activity.

To exercise rights, email privacy@valoriumx.org. We may ask for verification to protect you.

10) Children

Our site is not intended for children under 13, and we do not knowingly collect their personal information.

11) Changes

We may update this policy. If required, we will provide notice of material changes.