Protection of personal information
Privacy Policy
Last updated: August 24, 2026
EXPOSÉ respects your privacy and limits the collection of personal information to what is necessary to answer requests, develop its products and communicate with its community.
1. Scope
This policy explains how EXPOSÉ collects, uses, discloses, retains and protects personal information obtained through its website, forms and related communications.
2. Privacy officer
Carl O’Brien is responsible for the protection of personal information at EXPOSÉ. Questions, access or correction requests, withdrawals of consent and complaints may be sent to contact@expose.is.
3. Information we collect
Depending on your interaction, we may collect your name, email address, telephone number, city, country, studio, website or Instagram account, number of artists, language, FRAME preferences, tattoo placement, desired garment, project description, timeline, budget and the content of your communications. Anonymous prototype votes do not require your identity.
4. Purposes
We use this information to answer requests, evaluate and organize ATELIER projects or a fitting residency, manage the FRAME list, improve prototypes, communicate with you, administer professional relationships, prevent fraud and secure the site. We do not sell personal information.
5. Consent
We request consent at collection when required. You may withdraw consent to future communications by writing to contact@expose.is. Withdrawal does not affect prior processing and may limit our ability to complete an active request.
6. Service providers and disclosures
We may use providers that support hosting, databases, authentication, email or text notifications and security, including Sites/OpenAI and Cloudflare hosting services, and Resend or Twilio when configured. Some providers may process information outside Québec or Canada, where other laws may apply. We may also disclose information when required by law or to protect our rights and people’s safety.
7. Cookies and tracking
The public site currently uses no advertising cookies or behavioural analytics tools. Strictly necessary technical mechanisms may be used for security, site operation or protected administration access. If non-essential cookies are added later, an appropriate consent mechanism will be implemented before activation.
8. Retention and disposal
We retain information only as long as necessary for the purposes described, to manage the relationship or to meet legal, tax and accounting obligations. When no longer required, information is securely deleted, destroyed or anonymized, subject to backups and applicable legal requirements.
9. Safeguards
We use administrative and technical measures appropriate to the information, including limited authenticated administration access, encrypted communications, form validation, abusive-submission protections and search-index restrictions for private areas. No system can guarantee absolute security.
10. Your rights
You may request access to or correction of your personal information and, where permitted by law, deletion. You may also question or challenge our practices. We may verify your identity before responding. If you are not satisfied, you may contact Québec’s Commission d’accès à l’information.
11. Minors
EXPOSÉ’s site and services are not intended to knowingly collect personal information from anyone under 14 without the required consent of a parent or guardian.
12. Changes
We may update this policy to reflect changes in our practices, providers or the law. The date of the latest version appears at the top of this page.