Privacy policy
Last updated: November 4, 2026
1. Who we are
Les Productions Milestone Ltée (NEQ 1175656793), with its head office at 2116, avenue De Lorimier, Montréal (Québec) H2K 3X1, runs the jalon.milestone.uno app and the Milestone studios and Les Ateliers Dola / Le Lad, at 451, rue de l'Église, Verdun (Québec) H4G 2M6. This policy explains what personal information we collect, why, who we share it with and how long we keep it, under Québec's Act respecting the protection of personal information in the private sector (Law 25). Person in charge of the protection of personal information: James, privacy@milestone.uno.
2. What we collect and why
• Account: email and password (the password is encrypted; we never see it), preferred language. To sign you in and write to you about your account. • Profile: name, bio, city, company, skills and links (Instagram, Spotify, etc.), only if you fill them in. Your profile is visible only to you and the Milestone team, unless you turn on your public profile: then your name, role, city, company, bio, skills and links are visible to anyone at jalon.milestone.uno/u/<your handle>. It's off by default and you can turn it off any time. • Studio bookings and equipment rentals: dates, times, studio, options and status. To manage your booking and bill you. • ID and waiver: to book a studio, we check a photo of your ID and your name signed on the liability waiver. For the safety of the space and the equipment. • Session photos: at the start and end of each studio session, the app asks you for a photo of the room and the equipment, taken with the app's camera. We keep the photo, the time, the device used and your phone's location when the photo was taken, only to check it was taken at the studio. To prove the room was safe and in good shape, and to settle any damage. Photograph the room, not people. • Workshop and event tickets: the buyer's name and email, and each attendee's name. To issue and send the tickets and check people in at the door. No ID is asked for a ticket. • Payments: amounts, taxes, status and refunds. Card payments are handled by Stripe: Milestone never sees your card number. • Newsletter: your email, your first name if you give it, your language, the topics you chose (studios, podcasts, coworking, academy, events, Le Lad workshops, agency, shop), the exact wording of the box you ticked and the date, only if you ticked it. To send you our news and offers on those topics. Every email has a one-click unsubscribe. • Contact form: name, email, the service you're asking about and your message. If you choose to answer: your approximate budget, your timeline and your role in the decision. To answer you, prepare our reply or a quote, and follow up on your request for up to 6 months. • Project estimator: who you are (business, artist, etc.), the service, the goal of the project and where it will run, your approximate budget, your timeline, your role in the decision, your region, your name and email, and if you give them, your company, website and phone. If a call is booked, the project brief: deliverables, channels, references, assets, dates, who attends and who signs, and whether the price range fits. To give you an estimate, reply to you, and prepare the call and our proposal. • Priority score (only if you tick the box in the estimator; it is unticked by default): from these answers and from what you do next (book a call, fill in the brief, visit the studio, reply to our emails, pay an invoice), the app computes a score from 0 to 100 and a grade (A, B, C or partner). The main factors are your budget, your timeline, your role in the decision, your type of project and your region. The score is only used to decide who we call back first and which next step to suggest. No request is refused automatically: a person on the team reviews every file and can change the grade. You can ask for your score, the reasons behind it, and a review: write to hello@milestone.uno. • Welcome offer (shop): how you heard about us, your email and, if you give it, your phone, the language, which site you were on, the landing page and, when present, the campaign parameters in the address (utm). To send you your discount code and, if you tick the offers box, our offers (at most 2 a month, by email or by text message if you left your number; unsubscribe by replying to the email or writing to hello@milestone.uno). The "where did you hear about us" answers are used in counts only, to see which channels bring visitors. • Milestone offers: if you tick the box (never ticked in advance), your email, the exact text of the box, the date and where you ticked it. To send you at most 2 emails a month about our studios, podcasts, video and agency work. One-click unsubscribe in every email. • Offers to clients: if you bought from us (studio booking, membership, coworking, ticket or paid invoice), we may email you our offers, discounts and packages for 2 years after your last purchase (implied consent, Canada's anti-spam law). One-click unsubscribe in every email; once you unsubscribe we don't write again, even if you buy again. • Optional questions when buying a ticket: who you are (business, artist, creator, etc.) and what interests you at Milestone. To understand who comes to our events and, if you ticked the offers box, to choose better what we offer you. • Event photos: your name and email, if you leave them by scanning the event's QR code. To send you the photos. • Client management: members' and clients' names and emails are also kept in our internal client-management tool, hosted on our own server in Canada. To follow up on your services and appointments. Only the Milestone team has access. • Client space: if we carry out a project for you, we may invite you to your client space. It holds the project's stage, the getting-started list (brief, contract, deposit, kickoff meeting), your next meeting and its Google Meet link, the project documents (proposal, contract), your invoices and your messages with the team. To carry out the project and keep you informed. You open it with your account, at the email address of the invitation. • Abuse prevention: an encrypted fingerprint (hash) of your IP address and the email entered when you reserve a ticket. To block bots and seat hoarding. • Measuring our ads (only if you accept): on milestone.uno and on the Estimator page, with your consent, we load the Meta pixel and the Google Ads tag. They record the pages visited and when a form is sent, so we know whether our ads work. Meta and Google set their own cookies and receive your IP address and browser details. We do not send them your name, email or answers. If you refuse, nothing loads. You can change your mind at any time with the "Cookies" button at the bottom of the page. • Where your visit came from: the campaign name in the link, the page that sent you to us and the first page you saw are saved with your form, without cookies, so we know which ads bring us clients. We use advertising cookies only with your consent, and we never sell any information. The only profiling is the estimator's priority score, described above, and it stays off until you turn it on. Without your consent, no score is computed and a person on the team reads your request. You can withdraw your consent at any time: write to hello@milestone.uno. • Follow-up file (CRM): the name and email of members, studio clients, ticket buyers, people who write to us and waitlist subscribers, how each is linked to Milestone, our follow-up notes and, for the welcome offer, the channel you found us through and, for requests made through the estimator, the priority score, the grade and the recommended package. For clients it also shows your studio bookings (date, studio, option and status), your tickets (event, date and status), your membership (plan, status and renewal date), the payment status of each (paid, due or refunded, never the amounts) and whether your ID was verified (yes or no, and the date, never the ID photo or the waiver). To reply to you and follow up on your inquiries, bookings, memberships and tickets. The app stays the official record and updates this file every hour. It runs on our own server in Canada (OVHcloud) and only the Milestone team can see it.
3. Cookies and similar technologies
• A session cookie to keep you signed in (needed for the app to work). • A flag in your browser so the opening animation plays only once per visit. • Cloudflare Turnstile checks that you're not a robot when you book a ticket, write to us or ask for an event's photos, with no advertising cookie.
4. Who can see it
• Front desk and operators: names, emails, bookings and ticket status, never amounts. • Owner and administrators: all of the above, plus amounts, refunds and the IDs waiting for review. Every time an ID is viewed, and every staff action, is written to a log. • Session photos: front desk, operators and administrators see them; you see yours. • Team alerts: an alert in our internal team chat (hosted on our server in Canada) shows the person's name and the service they're interested in, never their email, phone or message. • Client space: the owner and administrators only. The front desk can't see it.
5. Service providers and hosting outside Québec
Some information is handled by service providers, bound by contract, who may use it only to provide their service to us: • Supabase: database, accounts, ID photos and client space documents (United States, Virginia) • Stripe: card payments (Canada and United States) • Resend: sending emails (United States) • Kit: sending the newsletter; receives your email, first name and chosen topics (United States) • Cloudflare: bot check (global network) • OVHcloud: app server (Canada) • Meta Platforms and Google: ad measurement, only if you accept (United States) Before these transfers outside Québec, we assessed the risks (privacy impact assessment) and found the protection adequate, given these providers' contractual and technical safeguards.
6. How long we keep it
• Account and profile: as long as your account exists. Deleted within 30 days of a request to close it. • Record in the client-management tool: as long as you're a member or client. Deleted within 30 days of a request, like your account. • ID photo: deleted 30 days after it is verified or rejected. Only the status is kept. • Session photos and location: 90 days, then deleted. • Bookings, paid tickets and payments: 6 years after the end of the financial year (tax rules), then anonymised. • Free or complimentary tickets: 12 months after the event. • Event waitlist: 30 days after the event. • Abuse-prevention IP fingerprints: 30 days. • Contact form messages: 2 years. • Estimates, project briefs and score: 2 years after your last activity (request, call or brief), then deleted. • Welcome-offer signups: 2 years after you sign up or your last order, then deleted. • Client space (project, documents): 7 years after the project is delivered (contracts and tax rules). • Client space messages: 2 years after the project is delivered. • Newsletter: until you unsubscribe. Your email stays on a do-not-contact list so we don't write again. • Proof of consent to offers: 3 years after the last email sent under that consent. • Event photo requests: 12 months after the event. • Client list (offers): 2 years after your last purchase, then removed automatically.
7. Your rights
You can ask to access your information, correct it, delete it, get a copy in a common format, or withdraw your consent, by writing to privacy@milestone.uno. We reply within 30 days. If you are not satisfied with our answer, you can file a complaint with the Commission d'accès à l'information du Québec (cai.gouv.qc.ca). You must be 14 or older to create an account or hold a ticket. People aged 14 to 17 may take part in a studio session only if an adult aged 18 or older stays with them for the whole session, makes the booking, signs the waiver and is responsible for them. Self-serve use, memberships, equipment rental and payments are for people 18 and over. Some events are 18+; age is checked at the door.
8. Security and incidents
Data is encrypted in transit and at rest, and each staff role sees only what it needs. If a confidentiality incident creates a risk of serious harm, we notify the people affected and the Commission d'accès à l'information, and we keep a register of incidents.
9. Changes
Any change is posted on this page with its date. If a change is significant, we will let you know by email.