This policy describes how MRMT NEXTGen Conseils & Associés Inc., publisher of the Movoright platform, handles the data collected on the movoright.com public website. It does *not* cover data processed within the application platform on behalf of a client company — that is governed by a data processing agreement signed separately with each company.
1. Data controller
MRMT NEXTGen Conseils & Associés Inc., reachable at [email protected], is the controller for the processing described in this document.
2. Data collected through the demo form
When you fill in the "Request a demo" form, the following data is collected and stored:
- Full name
- Business email address
- Company name
- Fleet size (declared range)
- Free-text message (optional)
- Technical metadata: IP address, user agent, date and time of submission, and the intent behind the request
3. Purpose and legal basis
This data is collected in order to respond to your demo request and prepare a commercial discussion. The legal basis is the legitimate interest of MRMT NEXTGen Conseils & Associés Inc. in following up on inbound enquiries from business prospects.
The data is neither sold nor transferred to third parties for commercial prospecting.
4. Recipients
The data is accessible only to authorised staff within MRMT NEXTGen Conseils & Associés Inc., for commercial follow-up. The following technical providers are involved:
- OVHcloud — application hosting and PostgreSQL storage, in a data centre located in Quebec, Canada.
- Cloudflare, Inc. — DNS resolution, TLS termination and traffic filtering for the public website. Cloudflare therefore carries the exchanges between your browser and our servers.
- Resend — sending the acknowledgement email and the internal notification, with only the necessary fields.
5. Retention period
Demo form data is kept for up to three years from the last interaction. After that it is deleted, unless a longer legal retention obligation applies.
Application logs relating to the form submission (operations log, IP address, user agent) are kept for ten years for traceability.
6. Your rights
You have the right to access, rectify, erase, restrict, port and object. To exercise any of these rights, write to [email protected] with "GDPR request" in the subject line. You will receive a reply within thirty days at the latest.
7. Cookies and trackers
The Movoright public website uses no third-party advertising tracking cookies. The only cookies set are strictly necessary for the technical operation of the site.
8. Security
Data is stored in a PostgreSQL database hosted on OVHcloud infrastructure located in Quebec, Canada. Exchanges with the site take place exclusively over TLS.
A daily backup of the database and of the files is taken, its integrity is verified automatically, and it is kept for 30 days. These backups reside on the same infrastructure as the service: we do not currently hold an application-level copy with a separate storage provider. The server disk is not encrypted at volume level; only certain sensitive fields are, at database level.
9. Changes
This policy may be updated to reflect changes to the platform or to the regulatory framework. The date of the latest update appears at the top of the page.