Privacy Policy
Last updated: June 18, 2026. This policy explains what information Loi25Soumission collects and how it is used.
1. Who we are
Loi25Soumission (operated by AI Consultant SL) is a marketplace that connects Quebec and Canadian organizations with certified compliance firms (Law 25, SOC 2, ISO 27001, PCI DSS, CASL, ISO 42001). We are the data controller for the information collected through our quote request form.
2. What we collect
When you submit a quote request, we collect:
- Organizational data: company name, sector, size, compliance needs, timeline and budget.
- Professional contact data: your name, business email, phone number and role within your organization.
- Technical data used solely as evidence of consent: IP address and browser user agent, recorded at the moment you submit the form.
We do not collect health, financial or other sensitive personal information, and we do not ask for personal data unrelated to your professional capacity.
3. Why we collect it
- To qualify your request and route it to the right partner firms.
- To match and share your request with up to 3 partner compliance firms best suited to your profile.
- To send you a confirmation and the list of firms contacted on your behalf.
4. Who receives it
Your information is shared only with the partner firms matched to your request, and only after you have given explicit, separate consent to that sharing. We never sell your information to unrelated third parties. Partner firms act as data processors under contract with us and must comply with applicable privacy and anti-spam laws, including Quebec's Law 25 and Canada's Anti-Spam Legislation (CASL).
5. How long we keep it
We retain your information for as long as needed to complete the matching process, and no longer than 60 days after your last interaction, unless you ask us to delete it sooner or a longer period is required to comply with a legal obligation.
6. Your rights
Under Quebec's Law 25 and applicable Canadian privacy law, you may request access to, rectification of, or deletion of your information, or withdraw your consent at any time. We respond to all such requests within 30 days.
Privacy Officer
Stéphane Laforest is the Privacy Officer for Loi25Soumission. You can reach him at confidentialite@loi25soumission.ca for any privacy-related request.
7. Breach notification
If a confidentiality incident creates a serious risk of injury, we will notify the Commission d'accès à l'information du Québec (CAI) and affected individuals as soon as reasonably possible, in accordance with Law 25.
8. Anti-spam (CASL)
Any commercial electronic message we send includes an unsubscribe mechanism, processed within 10 business days. We keep records of consent for a minimum of two years.
9. Contact us
For any question about this policy, write to confidentialite@loi25soumission.ca.