Privacy Policy
Last updated: August 2, 2026
Operated by Ara Ghahramanyan under the TradeCatch name (Greater Montreal, Quebec). Counsel review is recommended before material changes to these policies. Contact: ara.ghahramanyan07@gmail.com.
Who this policy covers
This policy applies to TradeCatch, operated by Ara Ghahramanyan from the Greater Montreal area, Quebec, Canada, with respect to personal information collected through this website and the systems we manage on behalf of contractor clients. It is written to reflect Quebec's private-sector privacy legislation (the Act respecting the protection of personal information in the private sector, as amended by Law 25) and applicable federal privacy law (PIPEDA).
Information we collect
We collect information you provide directly, such as your name, company, trade, email, phone number, city, and answers to qualification questions when you book an audit. We also collect basic technical and analytics data about how the website is used, gated behind the cookie consent described in our Cookie Policy.
Purposes and legal basis for collection
We use your information to respond to your audit request, schedule and conduct calls, prepare proposals, and, if you become a client, to design and operate your revenue recovery system. Collection is based on your consent (for optional communications) and on what is necessary to take steps at your request before entering a service agreement. We do not sell your personal information.
SMS and email communication consent
Contacting you about your specific audit request (by phone, email, or text) is a necessary service communication, not optional marketing. It is covered by the required consent checkbox on our forms. Marketing emails (tips, offers, updates) are separate, optional, opt-in, and never pre-checked, consistent with Canada's Anti-Spam Legislation (CASL). Message and data rates may apply to SMS. We record the exact wording, source form, and timestamp of each consent given, and honour opt-out or unsubscribe requests without delay.
Data sharing and service providers
We share information with service providers that support our operations under agreements requiring them to protect your data and use it only for the purpose we specify. As of this writing that includes: Resend (transactional email delivery), Google Analytics 4 (site analytics, only after cookie consent), Cloudflare Turnstile (bot-abuse prevention on our forms), Twilio (SMS/voice for missed-call recovery when enabled), and Vercel (website hosting). We do not share your information for third-party advertising.
Cross-border data transfers
Some service providers listed above may process or store data outside Quebec or Canada, including in the United States. Where this occurs, we require contractual protections comparable to Quebec law. Privacy impact assessments for out-of-Quebec providers are conducted before those providers are used for client personal information in a live engagement; this public site alone does not constitute completion of every PIA.
Data retention schedule
Our target retention for audit-request and contact-form submissions is up to 24 months after your last interaction with us, unless you become a client (in which case client records are retained per our service agreement and applicable tax/accounting requirements) or you request earlier deletion. Automated purge jobs for that schedule are being rolled out; until then, deletion and access requests are handled manually via our privacy contact. Missed-call operational records, when a durable store is enabled, follow the same target unless a client agreement specifies otherwise. Analytics data is retained per Google Analytics' default retention settings.
Your privacy rights
Under Quebec and Canadian privacy law you may request access to, correction of, or deletion of your personal information, and may withdraw consent to non-essential processing at any time, by contacting our privacy contact below. We will respond within the timelines required by law.
How to reach us or file a complaint
For any privacy question or request, contact our privacy contact at ara.ghahramanyan07@gmail.com. If you believe we have not resolved your concern, you may file a complaint with the Commission d'accès à l'information du Québec (CAI).
Security and incident reporting
We apply technical and organizational safeguards (encryption in transit, access restrictions, security headers, and the controls described in our security practices) appropriate to the sensitivity of the information involved. In the event of a confidentiality incident presenting a risk of serious harm, we will notify affected individuals and the CAI as required by Law 25.
Changes to this policy
We may update this policy as our practices or legal obligations change. Material changes will be reflected in the "last updated" date above.