Privacy

The principle

We collect what is needed to sell you a domain and to keep it registered, and nothing else. We do not sell personal information, we do not share it for advertising, and we do not use your data to train models. Where data can be deleted, it is deleted on a schedule the software enforces rather than on a promise a person has to remember.

What we hold, and why

• Account data: your email address and a hash of your password (never the password itself). Needed to give you an account and to write to you about your domains.
• Registrant contact: name, optional organization, email, phone, and postal address. This is a registry requirement, not a Havre preference. A domain cannot be registered without a real registrant contact, and the registry keeps it for as long as the name exists.
• Canadian Presence declaration (.ca only): the legal-type code you select and your confirmation that you meet CIRA's requirement. Required by CIRA for every .ca.
• Payment metadata: the amount, currency, and a payment reference. Card numbers are entered directly into Stripe's hosted field and never reach a Havre server, so we could not store one if we wanted to.
• Operational logs: ordinary server logs needed to run and secure the service. They record that a request happened, not the content of anything you have sealed.

What we publish

Domain ownership records are public by design. WHOIS privacy is enabled where the extension allows it, which masks your contact details in the public record. The registry still holds your real details, and so do we, and a lawful order can still compel disclosure. For .ca, CIRA masks individual registrants by default but publishes organizations.

Where it lives

Canadian customer data is stored in Beauharnois, Quebec, on infrastructure operated by OVHcloud, a French company with no United States parent. European customer data stays on the European footprint. Data does not move between regions.

Who else processes it

• OVHcloud (French, European): the servers and storage. It hosts, it does not read.
• OpenSRS, operated by Tucows (Canadian, Toronto): the registrar back end that submits your registration to the registry. It receives the registrant contact because the registry demands it.
• The registry for your extension (CIRA for .ca, and the relevant operator for each other extension): receives and keeps the registrant contact under its own rules.
• Stripe (United States): card payment. It receives payment and billing metadata. It does not receive your workload data or anything you have sealed. This is the one United States party in the chain and we name it plainly rather than burying it.
• Transactional email is sent from our own mail infrastructure. Order receipts, delivery confirmations, and renewal reminders are not handed to a third party marketing platform.

The full sub-processor list, including infrastructure detail, is on the security page.

How long we keep it

• An order you never paid for: the registrant details attached to it are deleted after 7 days. There is no reason to hold contact data for a registration that will never happen, so a scheduled job removes it whether or not anyone is watching.
• A completed order: the contact copy on the order is deleted as soon as the domain is delivered. The registrant contact then lives in one place only, attached to the domain, because that is the copy the registry requires us to keep current.
• A registered domain: the registrant contact is kept for as long as we sponsor the name, plus the period registry and accreditation rules require after that.
• Billing records: kept as long as Canadian tax and accounting law requires.

Annual accuracy reminder

For generic extensions, ICANN requires us to send you your registrant contact once a year and ask you to confirm or correct it. That message is a requirement, not marketing, and you cannot unsubscribe from it while you hold the name. Inaccurate contact data can cost you the domain.

Analytics

This website uses our own analytics (Illumino) to count page views. It does not set advertising cookies and does not build a profile of you across other websites.

Your rights

Under Quebec's Law 25, the federal PIPEDA, and the GDPR where it applies, you can ask for a copy of the personal information we hold about you, ask us to correct it, ask us to delete what we are not required to keep, and withdraw consent where the processing rests on consent. Write to account@havre.cloud and we will answer within thirty days.

One honest limit: we cannot delete the registrant contact for a domain you still hold, because the registry requires it to exist. If you no longer want that data held, the domain has to be transferred away or allowed to expire, and we will tell you exactly what that means before you decide.

If you are not satisfied with our answer, you can complain to the Commission d'acces a l'information du Quebec, to the Office of the Privacy Commissioner of Canada, or to your own supervisory authority in the European Union.

Security and breaches

Access to personal data is restricted and logged. If a breach creates a risk of serious harm, we notify the affected customers and the relevant regulator within the timelines the law sets, and we tell you what was affected rather than issuing a vague statement.

Changes

If this policy changes in a way that affects how your personal information is handled, we tell you by email before the change takes effect. Every version carries the date it was last updated.