Legal
Privacy & Law 25
We sell governance, so this page holds us to the same standard: what we collect, why, for how long, where it’s stored, and how to have it removed.
Last updated · October 10, 2026
01
What we collect
- What you write to us. Name, company, work email and the content of your message, sent through the contact form or by email.
- Technical server logs. Truncated IP address, page requested and time: the minimum needed to serve the site and detect abuse.
This site does not ask for or store sensitive information. We don’t buy contact lists, and we don’t enrich your details with third-party data.
02
Why
To answer your request, prepare a first call and, if you wish, send you a proposal. That’s all: no profiling, no resale, no targeted advertising.
03
How long
| Data | Kept for | Then |
|---|---|---|
| Request with no follow-up | 12 months | Deleted |
| Active client file | Engagement + 7 years | Accounting and tax obligations |
| Technical logs | 90 days | Deleted automatically |
04
Where data is stored
The site is static and served from infrastructure that favours Canadian regions. Messages sent through the form are delivered to our inbox. Our work tools (email, document management) are listed in our register of processing activities, with the country where each one is hosted.
05
Your rights under Law 25
Québec’s Act to modernize legislative provisions as regards the protection of personal information (Law 25) gives you the following rights. We answer every request within 30 days.
- Access: know what information we hold about you.
- Correction: correct information that is inaccurate or incomplete.
- Withdrawal of consent: at any time, for the future.
- Portability: receive your information in a structured, commonly used format.
- De-indexing or cessation of dissemination, in the cases provided for by law.
- Complaint to the Commission d’accès à l’information du Québec if our answer doesn’t satisfy you.
06
Person in charge of the protection of personal information
08
Our clients’ data
During an engagement, we work inside our clients’ systems, under their own policies. Our access goes through named keys and is logged; the log belongs to the client and is handed over on request. We don’t export their data outside their systems, and we never use their content for another client.
Every engagement produces a register of processing activities, retention periods and a designated person on the client’s side. It’s part of the readiness review, not a formality at the end of a project.
See what the review includesLet’s talk about your business.
Tell us what your team is working on and where you need support.
Contact usContact
Write to us.
We answer in French or English, whichever you prefer.
