Legal
Privacy Policy
Last updated: October 8, 2026
The short version
- We collect what we need to sell and run your hosting, email and domains: your email, name, billing address, plan and payment status.
- Your card details are handled by Stripe only. We never see or store your full card number.
- We don’t sell personal information, and our website uses no cookies, analytics or ads.
- Some of our service providers are outside Quebec and outside Canada. They are named below.
- You can ask to see, correct or move your information by emailing hello@digital-market-club.com.
1. Who is responsible
Digital Market Club is the business name of Nicholas Gagnon, a sole proprietor in Ontario, Canada.
Nicholas Gagnon is responsible for the personal information we handle and is the person in charge of the protection of personal information. Contact: hello@digital-market-club.com.
This policy follows the Personal Information Protection and Electronic Documents Act (PIPEDA). It also follows Quebec’s Act respecting the protection of personal information in the private sector, as amended by Law 25.
2. What we collect
When you buy a hosting plan
- You enter on Stripe’s checkout page: your email address, name, billing address and card details.
- Stored in our own records (our ledger):
- your email address and the plan you chose;
- the payment status;
- the amounts charged, including any discount;
- Stripe’s reference numbers for your customer record, subscription and checkout;
- dates such as when you subscribed, last paid or cancelled.
- Card details are handled by Stripe only. We never receive or store your full card number.
When you register a domain
The registrant contact details that domain registration requires. They are sent to the registrar (NameSilo) and the registry for the domain’s extension.
When you set up email
- the domain you use for email and the names of your email addresses;
- your mailbox password, stored only in a scrambled one-way (hashed) form that we can’t read. We never email it to you;
- a verification value you add to your domain’s DNS;
- when your setup link was issued and used; and
- a log of the setup steps we perform, such as when your mailbox was created.
To check your setup, we look up your domain’s public DNS records.
When you use our services
The website files stored in your hosting plan, and the contents of your mailboxes. Your mailboxes hold your actual email: the messages you send and receive, including attachments, stored on our server. We access these only as needed to run, secure, back up or support the service, or when the law requires it.
When you visit our website
- Server logs: our web server records each request. This includes your IP address, the date and time, the page or address requested, and your browser’s user-agent and referring page.
- Domain searches: the names you search for are sent to NameSilo to check availability. They also appear in the requested address our web server logs.
- Theme setting: if you choose light or dark mode, the choice is saved in your own browser’s local storage. It is not sent to us.
- No cookies: our website doesn’t set cookies and doesn’t use analytics or advertising tools.
When you email us
Your email address and what you send us.
3. Why we use it
- To sell, set up and provide your hosting plan, mailboxes and domains.
- To take payments, send receipts, and send a renewal reminder 30 days before each renewal.
- To register and renew domains, as the registry and ICANN rules require.
- To answer your questions and give support.
- To keep our services secure and to prevent fraud, spam and abuse.
- To meet our legal obligations, such as tax and accounting records, and to respond to lawful requests.
We use your information only for these purposes, or for a new purpose with your consent or where the law allows it. You consent to these uses when you give us your information to buy or use our services. You can withdraw consent, subject to legal and contract limits. Some services can’t be provided without certain information; for example, a domain can’t be registered without registrant contact details.
4. Who we share it with
We don’t sell or rent personal information. We share it only with the service providers we use to run the business, and only what each one needs:
| Provider | What they do for us | Information involved |
|---|---|---|
| Stripe | Payment processing and Stripe Checkout | Email, name, billing address, card details, payment and subscription records |
| NameSilo, and the registry for your domain’s extension | Domain registration, renewal and availability checks | Registrant contact details; names searched |
| OVHcloud | The servers our website, our records, and your hosting and email run on | Everything we store, including our ledger, server logs, and your website files and email |
| Postmark | Sending our transactional email, such as receipts and renewal reminders | Your email address and the content of those emails |
These providers may use the information only to provide their service to us, or as their own legal obligations require. Domain registration data may be published or disclosed under registry and ICANN rules. We may also disclose information when the law requires it, for example in response to a court order.
5. Information processed outside Quebec and Canada
- Our servers at OVHcloud are in Canada.
- Stripe and Postmark may store or process information outside Quebec and outside Canada, including in the United States.
- Domain registration data may be held by NameSilo and the registry in other countries, depending on the extension.
- Information processed in another country is subject to that country’s laws, and the authorities there may be able to access it.
- Before communicating personal information outside Quebec, we assess the privacy risks as Quebec law requires. We work only with providers that protect it adequately.
6. How long we keep it
- We keep personal information only as long as we need it for the purposes above, or as long as the law requires, such as tax and accounting records.
- Server logs are rotated and deleted regularly.
- When your hosting service ends, its website files and mailboxes are deleted.
- When we no longer need personal information, we securely delete or anonymize it.
7. How we protect it
- Connections to our website are encrypted with HTTPS.
- Our servers are hardened and firewalled, and access is restricted to what is needed.
- Payment card details stay with Stripe.
- Our payment records are stored in files only our service can read.
- Secret keys are kept out of our code and logs.
- No method is perfectly secure, but we use safeguards appropriate to how sensitive the information is.
8. Your rights
You can ask us to:
- tell you what personal information we hold about you, how we use it and who we have shared it with;
- give you a copy of it;
- correct it if it is inaccurate or incomplete;
- withdraw your consent, subject to legal and contract limits; and
- delete it when we no longer need it.
Email hello@digital-market-club.com. We may need to confirm your identity first, and we reply within 30 days. If we can’t fully meet a request, we explain why.
9. Privacy incidents
- We keep a register of every confidentiality incident, also called a breach of security safeguards, involving personal information.
- If an incident creates a real risk of significant harm, we notify the people affected and the Office of the Privacy Commissioner of Canada.
- For Quebec residents, if an incident presents a risk of serious injury, we notify the people affected and the Commission d’accès à l’information du Québec.
10. Quebec residents (Law 25)
If you live in Quebec, the following also applies under the Act respecting the protection of personal information in the private sector:
- Person in charge: Nicholas Gagnon is the person in charge of the protection of personal information. Contact: hello@digital-market-club.com.
- Incident register: we keep a register of confidentiality incidents and report incidents that present a risk of serious injury, as described in section 9.
- Providers outside Quebec: the providers that may process your information outside Quebec are Stripe, NameSilo and the domain registry, and Postmark, as described in sections 4 and 5. We assess the privacy risks before any such transfer.
- Your extra rights: you can ask for your personal information in a structured, commonly used technological format. You can also ask us to stop disseminating it or to de-index it, where the law allows.
- No automated decisions: we don’t make decisions about you based only on automated processing.
- Complaints: you can complain to the Commission d’accès à l’information du Québec (cai.gouv.qc.ca).
11. Children
Our services are for businesses and adults. They are not directed to children, and we don’t knowingly collect children’s personal information.
12. Changes to this policy
We update this policy when our practices change. The date at the top shows the latest version. If a change significantly affects how we use your information, we tell you by email before it takes effect.
13. Questions and complaints
Please contact us first at hello@digital-market-club.com, and we will try to resolve your concern. You can also complain to:
- the Office of the Privacy Commissioner of Canada (priv.gc.ca); or
- if you live in Quebec, the Commission d’accès à l’information du Québec (cai.gouv.qc.ca).