Data and privacy

A clear framework before you entrust us with data.

How we handle website inquiries, and the separate arrangements required before a client integration.

Last updated September 4, 2026. This policy covers the RueLoop website and requests sent to our team.

Who provides the service?

RueLoop is an unregistered business project operated by Shafkat Rahman, who is responsible for privacy. Contact Shafkat at [email protected] about your personal information.

Hosting and providers

Cloudflare Pages hosts this website. Cloudflare processes technical connection information, including IP addresses and browser information, to deliver and protect it. Fonts are served with the website. No advertising or audience analytics has been added. Inquiries pass through Cloudflare Workers and Turnstile for validation and spam protection, Resend for email delivery, and Google Workspace for our monitored inbox. Resend's sending region is North Virginia, United States. These providers may process information outside Québec and Canada under their own service and privacy terms.

What the form collects and why

Name, company, work email, sector and your consent are used to respond to your request and arrange a conversation. Submission is optional. A verification token and request identifier protect against spam and duplicate sending. We do not add you to a marketing list. Never include health information or confidential records. You can also contact [email protected] by email.

Retention and deletion

Shafkat reviews and deletes unsuccessful inquiries 12 months after the last exchange. This is a manual process covering inquiry emails and any working copies we control. Provider backups and technical records follow the providers' retention schedules. The website handler does not store a separate inquiry database or log message contents. If an inquiry becomes an engagement, its agreement defines the necessary records and retention period.

Website inquiries and future engagements

The website inquiry handler does not call an AI model. Any later client engagement requires its own agreement covering purposes, providers, access, retention and model settings before data is shared. The illustrative workflows on this website are not active client integrations.

For clinics

The intake and recall workflows described are administrative. Any access to personal or health information requires prior scoping with the clinic: necessity, authorization, limited access, providers and applicable obligations. The site’s examples contain no patient data.

Your privacy requests

Email [email protected] to request access, correction or deletion, withdraw consent, or raise a concern. We may need to verify your identity before acting. Withdrawing consent stops optional follow-up; it does not undo processing already completed. We explain any applicable limits on a request. Our team aims to acknowledge inquiries within 24 hours.

Official reference : Commission d’accès à l’information du Québec: business obligations (French) ↗

Back to RueLoop ↑