This policy describes how MRMT NEXTGen Conseils & Associés Inc., publisher of the MovoRight platform, handles the data collected on the movoright.com public website. It does *not* cover data processed within the application platform on behalf of a client company — that is governed by a data processing agreement signed separately with each company.
1. Data controller
MRMT NEXTGen Conseils & Associés Inc., reachable at contact@movoright.com, is the controller for the processing described in this document.
2. Data collected through the demo form
When you fill in the "Request a demo" form, the following data is collected and stored:
- Full name
- Business email address
- Company name
- Fleet size (declared range)
- Free-text message (optional)
- Technical metadata: IP address, user agent, date and time of submission, and the intent behind the request
- Source of your visit, when known: campaign parameters (utm_*), Google (gclid) or Meta (fbclid) ad click identifier, landing page and referring site. This information stays in your browser during the visit and is only sent to us with your request.
3. Purpose and legal basis
This data is collected in order to respond to your demo request and prepare a commercial discussion. The legal basis is the legitimate interest of MRMT NEXTGen Conseils & Associés Inc. in following up on inbound enquiries from business prospects.
The data is neither sold nor transferred to third parties for commercial prospecting.
4. Recipients
The data is accessible only to authorised staff within MRMT NEXTGen Conseils & Associés Inc., for commercial follow-up. The following technical providers are involved:
- OVHcloud — application hosting and PostgreSQL storage, in a data centre located in Quebec, Canada.
- Cloudflare, Inc. — DNS resolution, TLS termination and traffic filtering for the public website. Cloudflare therefore carries the exchanges between your browser and our servers.
- Resend — sending the acknowledgement email and the internal notification, with only the necessary fields.
- Google (Google Analytics, Google Ads) and Meta — only if you accepted measurement cookies; they receive neither your name, nor your email, nor the content of your request (see section 7).
5. Retention period
Demo form data is kept for up to three years from the last interaction. After that it is deleted, unless a longer legal retention obligation applies.
Application logs relating to the form submission (operations log, IP address, user agent) are kept for ten years for traceability.
6. Your rights
You have the right to access, rectify, erase, restrict, port and object. To exercise any of these rights, write to contact@movoright.com with "GDPR request" in the subject line. You will receive a reply within thirty days at the latest.
7. Cookies and trackers
Without your consent, the MovoRight public website only sets cookies that are strictly necessary for it to work.
With your consent ("Accept" button in the banner), we use on the public pages of movoright.com — never inside the application or our customers' portal:
- Google Analytics 4 (Google) — audience measurement: page views, origin, device. Cookie lifetime: up to 14 months.
- Google Ads and Meta ad measurement — whether a visit from an ad led to a demo request or a WhatsApp contact. The events sent contain no name, email or phone number, only the type of action.
- Sentry — detection of technical errors on the site.
If you decline, these tools are not loaded and nothing is sent to them. You can withdraw or change your choice at any time with the "Manage cookies" link at the bottom of the page. Google and Meta may process this data outside your country under their own contractual safeguards.
8. Security
Data is stored in a PostgreSQL database hosted on OVHcloud infrastructure located in Quebec, Canada. Exchanges with the site take place exclusively over TLS.
A daily backup of the database and of the files is taken, its integrity is verified automatically, and it is kept for 30 days. These backups reside on the same infrastructure as the service: we do not currently hold an application-level copy with a separate storage provider. The server disk is not encrypted at volume level; only certain sensitive fields are, at database level.
9. Changes
This policy may be updated to reflect changes to the platform or to the regulatory framework. The date of the latest update appears at the top of the page.
