Privacy Policy

1. Who we are

Loi25Soumission (loi25soumission.ca) and ComplianceQuote (compliancequote.com) are two sites operated by AI Consultant SL. This policy applies to both.

Loi25Soumission (operated by AI Consultant SL) is a marketplace that connects Quebec and Canadian organizations with compliance firms (Law 25, SOC 2, ISO 27001, PCI DSS, CASL, ISO 42001). We are the data controller for the information collected through our quote request form.

We use Vercel Web Analytics, an aggregate audience measurement tool, with no cookie and no persistent identifier.

2. What we collect

When you submit a quote request, we collect:

• Organizational data: company name, sector, size, compliance needs, timeline and budget.
• Professional contact data: your name, business email, phone number and role within your organization.
• Technical data used solely as evidence of consent: IP address and browser user agent, recorded at the moment you submit the form.

We do not collect health, financial or other sensitive personal information, and we do not ask for personal data unrelated to your professional capacity.

Where your visit comes from

When you reach our site from an ad or a tracked link, we record with your request the campaign parameters in the page address (utm_source, utm_medium, utm_campaign, utm_term) and, for Google ads, the click identifier (gclid). They are used only to measure which campaigns generate requests. The click identifier may be sent back to Google, without your name or contact details, to measure the performance of our ads. They are not stored in your browser or in a cookie, are never shared with a firm, and are recorded only if you submit your request.

3. Why we collect it

• To qualify your request and route it to the right partner firms.
• To match and share your request with up to 3 partner compliance firms best suited to your profile.
• To send you a confirmation and the list of firms contacted on your behalf.

4. Who receives it

Your information is shared only with the partner firms matched to your request, and only after you have given explicit, separate consent to that sharing. We never sell your information to unrelated third parties. Partner firms act as data processors under contract with us and must comply with applicable privacy and anti-spam laws, including Quebec's Law 25 and Canada's Anti-Spam Legislation (CASL).

5. How long we keep it

We retain your information for as long as needed to complete the matching process, and no longer than 60 days after your last interaction, unless you ask us to delete it sooner or a longer period is required to comply with a legal obligation.

6. Your rights

Under Quebec's Law 25 and applicable Canadian privacy law, you may request access to, rectification of, or deletion of your information, or withdraw your consent at any time. We respond to all such requests within 30 days.

Visitors outside Quebec (PIPEDA)

If you reside elsewhere in Canada, the processing of your personal information is also governed by the Personal Information Protection and Electronic Documents Act (PIPEDA). You can exercise your rights of access, correction and withdrawal of consent through the My data page or at confidentialite@loi25soumission.ca, and may file a complaint with the Office of the Privacy Commissioner of Canada.

Privacy Officer

Stéphane Laforest is the Privacy Officer for Loi25Soumission. You can reach him at confidentialite@loi25soumission.ca for any privacy-related request.

7. Breach notification

If a confidentiality incident creates a serious risk of injury, we will notify the Commission d'accès à l'information du Québec (CAI) and affected individuals as soon as reasonably possible, in accordance with Law 25.

8. Anti-spam (CASL)

Any commercial electronic message we send includes an unsubscribe mechanism, processed within 10 business days. We keep records of consent for a minimum of two years.

9. Contact us

For any question about this policy, write to confidentialite@loi25soumission.ca.