This policy explains what personal information Field Note collects, why, and what you can do about it. Our privacy officer is Zoé Beaudry, reachable at hello@fieldnotemag.com.
Last updated September 9th, 2026
1. What we collect
Orders: name, email, shipping and billing address, order contents. Newsletter: email address and language preference. Pitches: name, email, the pitch itself and any portfolio link you include. Site use: pages viewed, referring page, approximate region, browser type.
We do not collect payment card numbers. Card data goes directly to the payment provider and we never see or store it.
2. Why we collect it
To take and ship your order, answer your message, send the newsletter you asked for, meet our tax and bookkeeping obligations, and understand which stories are read. We do not sell personal information and we do not use it for advertising.
3. Consent
We tell you why we need information at the moment we ask for it. Newsletter signup is express opt-in, and every email carries an unsubscribe link that works immediately. Withdrawing consent does not affect processing already carried out.
4. Who else handles it
Only the services that make the site work: hosting (IT Génération), email delivery (MailerLite, payments, shipping and analytics (Google LLC). Each receives only what its job requires.
Some of these providers store data outside Québec. Before entrusting personal information outside the province we assess the privacy protection it will receive, as Québec law requires, and we can tell you where your information is held.
5. How long we keep it
Order records for seven years, as tax rules require. Newsletter addresses until you unsubscribe. Pitches for two years, then deleted. Analytics in aggregate, with raw logs kept no longer than 14 months.
6. Your rights
You can ask to see the information we hold about you, correct it, have it deleted, withdraw consent, or receive it in a portable computerised format. Write to hello@fieldnotemag.com and we will answer within 30 days.
If our answer doesn’t satisfy you, you may complain to the Commission d’accès à l’information du Québec, and if you are outside Québec, to the Office of the Privacy Commissioner of Canada.
7. Security and incidents
Access is limited to the people who need it, connections are encrypted, and accounts use two-factor authentication. If a confidentiality incident creates a risk of serious injury we will notify you and the Commission d’accès à l’information, and keep a register of incidents as required.
8. Changes
If this policy changes materially we will post the new version here with a fresh date and, for anything significant, say so in the newsletter.