Privacy Policy

Last updated: 2026-04-23

This policy is published under the Personal Information Protection and Electronic Documents Act (PIPEDA), Quebec's Act respecting the protection of personal information in the private sector (Law 25), and Canada's Anti-Spam Legislation (CASL).

1. What we collect

Through our forms and consultation requests, we collect:

• name;
• email address;
• phone number (if provided);
• preferred language;
• country of residence;
• general subject of your request;
• and your consent.

2. Why we collect it (purpose)

• To handle your request and respond to you.
• To schedule a paid consultation.
• To deliver professional services under a written retainer agreement, where applicable.
• If you separately consent, to send you educational content (newsletter, regulatory updates).

3. Legal basis for processing

• Performance of a contract or pre-contractual steps: handling your request, scheduling a consultation, delivering retained services.
• Express consent (CASL s. 10): newsletter and educational communications. Consent is recorded with timestamp, source URL, and consent text version.
• Legal obligation: file retention under the CICC Code of Ethics (minimum 10 years for retained-client files after file closure).

4. How long we keep it (retention)

• Contact details (prospective clients): kept for 36 months after the last meaningful contact, then deleted.
• Retained-client files: kept as required by the CICC Code of Ethics, minimum 10 years after file closure.
• Consent register: 36 rolling months, or the duration of the active consent, whichever is longer.
• Cookie consent records: 24 months minimum.

5. Who we share it with

No commercial sharing of your data. Service providers (hosting, transactional email, marketing tool) process data under contract, in Canada or outside Canada. Specifically:

• Hosting and infrastructure providers.
• Transactional email provider (form notifications, appointment confirmations).
• Marketing platform (Mautic) for newsletter delivery, when you have opted in.
• Online booking system for paid consultations.
• Payment processor (Stripe or Square) for invoiced amounts after retainer signature.

Where data leaves Canada, we apply contractual safeguards consistent with PIPEDA and Law 25.

6. CASL consent (newsletter and commercial electronic messages)

Newsletter signups are opt-in with a double opt-in confirmation email. The consent checkbox is not pre-checked and the purpose is clearly stated next to it.

Express consent remains valid until withdrawn. Implied consent from a paid consultation expires 2 years after the transaction; implied consent from an information request expires 6 months after the request (CASL s. 10(9)).

Every commercial electronic message we send includes:

• our identification (Dr. Kamdjou, RCIC-IRB Licence R1053678, business mailing address);
• a one-click unsubscribe link, processed within 10 business days (CASL s. 11(3));
• a clear statement of who is sending and on whose behalf.

7. Your rights

Under PIPEDA and Law 25, you have the right to:

• Access your personal information.
• Correct inaccurate data.
• Withdraw consent for any non-essential processing at any time.
• Portability (Law 25): receive your data in a structured, commonly used technical format.
• De-indexing of personal information from search engines, where applicable (Law 25).
• Be informed of any decision based exclusively on automated processing (Law 25). The office does not use automated decision-making for client matters.

8. How to exercise a right or withdraw consent

To exercise any of the rights above, ask a question about your data, or withdraw a consent:

• Privacy Officer: Dr. Alexis Noel Kamdjou
• Email: [email protected]
• Phone: (438) 680-0434

To unsubscribe from the newsletter, click the unsubscribe link at the bottom of any email. Your request is honoured within 10 business days.

9. Supervising authorities

• Office of the Privacy Commissioner of Canada (PIPEDA): priv.gc.ca
• Commission d'accès à l'information du Québec (Law 25): cai.gouv.qc.ca
• Canadian Radio-television and Telecommunications Commission (CRTC) for CASL enforcement: crtc.gc.ca

10. Changes to this policy

This policy is reviewed at least annually and after any change to applicable law or processing practices. The "Last updated" date at the top reflects the most recent change.

---