Privacy Policy

1. Privacy Officer

auditloi25.ca is operated by a digital compliance specialist based in Montréal, Québec. The Privacy Officer may be reached at:

2. Information Collected

When you submit the pre-audit request form, the following information is collected:

• Full name — to personalize communications.
• Professional email address — to send you the pre-audit result and, if requested, a proposal for a full audit.
• Website URL to be audited — to perform the technical analysis of your site.
• Main pages to analyze — optional, to guide the analysis.

3. Purposes

Your information is used solely to:

• Perform the Law 25 pre-audit of your website and communicate the results by email.
• Provide, where applicable, a full audit proposal.
• Respond to any question or request submitted by email.

Your information is not used for unsolicited commercial prospecting, profiling, or automated decision-making.

4. Third Parties and International Transfers

Your information is not sold or rented to third parties. It may be shared with the following service providers:

• Email delivery (Brevo, Resend) — your email address may be transmitted to an email service provider for communications related to your request.
• Payment processing (Stripe) — full audit orders are processed via Stripe Inc. (United States). No card data passes through our servers.
• Artificial intelligence — Anthropic (Claude) — PDF report generation uses Anthropic PBC's Claude API (San Francisco, CA, USA). Only the score, domain, and analyzed zones are transmitted — no personally identifiable information. Data is not used to train Anthropic's models.
• Data hosting (Supabase) — analysis reports and order data are stored on Supabase Inc. (AWS infrastructure, USA).
• Application hosting (Vercel) — auditloi25.ca is deployed on Vercel Inc. infrastructure (USA).
• Analytics (Google Analytics 4) — loaded only after your explicit consent.

Transfers outside Quebec and Canada are made with appropriate safeguards under Law 25 art. 17 and PIPEDA.

5. Retention

Your information is retained for a maximum of 12 months following your last interaction with our services, after which it is securely deleted or anonymized.

6. Your Rights

Under Law 25 and PIPEDA, you have the right to access, correct, delete, and port your personal information, and to withdraw your consent at any time. To exercise these rights, contact us at contact@auditloi25.ca. We will respond within 30 days.

7. Cookies

This site uses a custom consent management system. On your first visit, a banner allows you to accept or refuse analytics cookies. Plausible Analytics (cookieless) is always active and does not require consent. Google Analytics 4 is loaded only after explicit consent.

8. Complaints

If you believe your rights have not been respected, you may file a complaint with our Privacy Officer at contact@auditloi25.ca. We will acknowledge your complaint within 5 business days and respond within 30 days.

You may also file a complaint with:

• Commission d'accès à l'information du Québec (CAI)
• Office of the Privacy Commissioner of Canada (OPC)