Legal & privacy

Overview

This page summarises how KinkVoices processes personal data and the privacy rights that may apply depending on where you live (including the EU GDPR, UK GDPR, selected US state privacy laws and Canadian and Quebec privacy laws). It is not legal advice; if you need certainty for your situation, consult a qualified professional.

Data controller

The data controller for KinkVoices is the project owner, Vilain Garçon Design inc., a Canadian company based in Montreal, Quebec. Depending on your jurisdiction, we may also be described as the organization responsible for your personal information. For privacy-specific requests, contact privacy@kinkvoices.com. If you are making an opt-out request under applicable US state privacy laws, include the word “opt-out” in your message.

What we process

• Account & profile. If you register: email, username, profile fields you provide, and related authentication data held by our hosting provider.
• Voices (contributions). Survey answers, optional demographics, visibility settings, and any display name, photo, or social links you choose to attach. AI-generated imprints and enhancement requests are derived from your text as part of providing the service.
• Technical data. Server logs, security-related data, and cookies or similar technologies needed to run the site and keep accounts secure.

Purposes & legal bases

We process data to operate KinkVoices, publish content you choose to make public, provide accounts and contributions, improve security, and comply with law. Depending on the activity, we rely on performance of a contract, legitimate interests (running a community platform with appropriate safeguards), and, where required, your consent (for example for non-essential cookies if we use them). Where US state laws or Canadian law applies, we process personal information only as permitted under those frameworks.

Retention

We keep data only as long as needed for these purposes: for example, while your account exists, while a voice remains published, or as required by law. You can request deletion of your account or contributions subject to any overriding legal obligation.

Your rights

Where GDPR applies, you may have the right to access, rectify, or erase your personal data, restrict or object to certain processing, data portability, and to withdraw consent where processing is based on consent. You may also lodge a complaint with a supervisory authority in your country of residence or in the UK (for example the ICO).

Where applicable US privacy laws apply (for example California’s CCPA/CPRA), you may have the right to know/access, delete, correct (in some cases), and data portability, and to opt out of the “sale” or “sharing” of personal information where those concepts apply under the law. You can also ask for limits on the use or disclosure of certain sensitive personal information where required by law. To exercise these rights, contact us at the email below.

Where Canadian and Quebec privacy laws apply, you may have rights such as access, correction, and (where applicable) deletion or erasure and withdrawal of consent, subject to legal exceptions. You may also lodge a complaint with the applicable privacy authority: in Canada, the Office of the Privacy Commissioner of Canada; in Quebec, the Commission d’accès à l’information (CAI).

To exercise any of these rights, contact us at the email above and describe your request. We may need to verify your identity before responding.

Transfers

Our infrastructure providers (for example database and hosting) may process data in the UK, the EEA, the United States, Canada, or other regions. Where data is transferred outside the UK/EEA, we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions, as applicable. Cross-border transfers involving Canada are handled in line with applicable Canadian requirements.

Changes

We may update this page when our practices or the law change. The “Last updated” date at the top will change when we do.