Privacy & Law 25

01What we collect

• What you write to us. Name, company, role, e-mail, phone, departments involved, correspondence language and the content of your message.
• Technical server logs. Truncated IP address, page requested, timestamp: the minimum needed to serve the site and detect abuse.
• Your language preference, kept in your browser only. It is never sent to us.

We neither ask for nor store sensitive information on this site. We don’t buy lists and we don’t enrich your details through third parties.

02Why

To answer your request, prepare the thirty-minute call and, if you want one, send you a proposal. That’s all. No profiling, no resale, no targeted advertising.

03For how long

04Where the data lives

The site is static and hosted on infrastructure where Canadian regions are preferred. Form submissions are processed on a Canada-hosted endpoint. Our working tools (e-mail, document management) are listed in the processing register, with the country each is hosted in.

05Your rights under Law 25

Québec’s Act to modernize legislative provisions as regards the protection of personal information (Law 25) gives you the following rights. We answer any request within thirty days.

• Access: know what information we hold about you.
• Correction: fix inaccurate or incomplete information.
• Withdrawal of consent: at any time, going forward.
• Portability: receive your information in a structured, commonly used format.
• De-indexing or cessation of dissemination, in the cases provided by the Act.
• Complaint to the Commission d’accès à l’information du Québec, if our answer doesn’t satisfy you.

06Privacy officer

07Cookies and analytics

This site uses no advertising cookies and no third-party trackers. Your language preference is stored locally in your browser. It is not a cookie sent to a server. If analytics are ever added, they will be cookieless, without a persistent identifier, and announced here before going live.

No consent banner appears on this site because there is nothing to consent to.

08Our clients’ data

During an engagement we work inside our clients’ systems, under their own policies. Our access goes through named keys and is logged; the log belongs to the client and is handed over on request. We don’t export their data out of their systems, and we never use their content for another client.

Every engagement produces a processing register, retention periods and a designated officer on the client side. That is an assessment deliverable, not an end-of-project formality.

See what the assessment contains