We sell Law 25 compliance work. It would be embarrassing to run a site that collects names and emails without saying what it does with them. So here it is, in plain language: what we collect, why, how long we keep it, who else sees it, and what you can require of us.
Last updated: 21 August 2026 · Conseil Modus inc. · NEQ 1182420712
The short version
There is no database behind this site. Our two forms send an email: that's the whole mechanism.
We don't sell, rent or trade your address. Ever.
No advertising cookies, no social-network pixels. Google Analytics only if you say yes in the banner, and nothing turns on before that.
No automated decisions about you. A human reads every message.
Want to know what we hold on you, have it corrected or have it deleted? Write to info@modusconseil.ca.
01
What we collect
When you fill in the contact form
The “Book a call” window sends us your name, your email, your company name if you give it (it's optional) and your message. It also sends the page you wrote from, its title and the site language, so we know what you were looking at when we call you back.
When you ask for a guide
The download form in Resources sends us your first name, your email, your company name if you give it, which language of the guide you chose, and whether or not you ticked the box for future guides. We also record the date, the time and the page, because if you ever ask us why we're writing to you, we need to be able to show you.
What gets collected on its own
Our host keeps server logs, and those logs contain your IP address. That's how the web works: your browser has to tell a server where to send the page back. We don't go through those logs to identify anyone.
We also measure traffic with Vercel Web Analytics: how many people read which page. According to Vercel, that tool uses no cookies and builds no individual profile.
Since 21 August 2026 we also offer Google Analytics 4, and that one does use cookies. It only turns on if you click "Accept" in the banner: before that click your browser does not contact Google, and if you click "Refuse" it never will. When active it records pages read, time spent, scrolling, outbound clicks, guide downloads, form submissions (the fact, not the contents), device type and an approximate city. It receives neither your name nor your email. The data is processed by Google in the United States and kept for 14 months. Your choice is stored in your browser only; you can change it here at any time:
What we don't collect
No accounts, no passwords, no payment information. The site never asks for any of it and has nowhere to put it. The law says you may only collect what is necessary for purposes determined before collecting: the short list above is that.
Law 25 · Act respecting the protection of personal information in the private sector, s. 5.
02
Why we collect it
To answer you, and to send you the guide you asked for. That's it. If you ticked the box for future guides, your address is also used for that, and nothing else. If you didn't tick it, you won't hear from us after our reply.
The box is never pre-ticked, and it is separate from the guide itself: getting the guide subscribes you to nothing. That's deliberate. The law requires consent to be clear, free, informed, given for specific purposes and requested for each of those purposes: consent bundled in with something else is without effect.
Law 25, s. 14.
03
How long we keep it
Contact message
Three years from our last exchange, then we delete it.
Guide request
Three years, then we delete it.
Proof of consent
If you ticked the box: as long as you stay subscribed, and three years after you unsubscribe, so we can show the consent existed.
Server logs
Kept by our host under its own policy, not ours.
These emails live in our info@modusconseil.ca inbox. There is no other copy anywhere else.
04
Who else sees it
Five suppliers, each for a single technical reason. None of them is a business partner and none receives your information for its own purposes.
Resend
Delivers the emails from both forms. So it sees everything you typed into them.
Vercel
Hosts the site and runs both forms. Sees your IP address and the form contents in transit.
Google Fonts
Delivers the site's two typefaces. Your browser hands it your IP address and your device type, on every page.
Google Analytics
Only if you accepted. Then receives the pages viewed, your (truncated) IP address and a random browser identifier, processed in the United States. Nothing before your yes.
Cloudflare cdnjs · jsDelivr
Deliver the animation libraries. Same thing: your IP address and your device type, on every page.
We say it plainly because it's true and most sites don't: three of those five suppliers see your IP address simply because you opened a page, without you filling in anything. The fourth, Google Analytics, sees nothing until you've said yes.
05
What leaves Quebec
The four suppliers above are American companies and their servers are not in Quebec. So your information leaves the province the moment it passes through them.
Law 25 frames the communication of personal information outside Quebec and requires an assessment before doing it. The exact scope of that obligation for a site like ours, and the assessment that goes with it, are being verified with our lawyer.
06
Your rights
Law 25 applies to every private enterprise in Quebec, whatever its size. There is no headcount threshold: a three-person shop carries the same duties as a three-hundred-person one. There are two of us.
Access
You can ask us what information we hold about you and get a copy of it.
Correction
If something is inaccurate, incomplete or ambiguous, you can require us to correct it.
Withdrawal of consent
You can withdraw your consent at any time. Every email we send carries an unsubscribe link, and a note to info@modusconseil.ca does the same thing.
De-indexing
You can ask us to stop disseminating information about you, or to have the link to it de-indexed from search engines. In practice we publish nothing about you, but the right exists and we're naming it.
Complaint
If our answer doesn't satisfy you, you can complain to the Commission d'accès à l'information du Québec.
One address for all of it: info@modusconseil.ca. We respond within the timeframe the law provides.
07
The person responsible for privacy protection
The law requires that someone be responsible for protecting personal information within the enterprise, and that their title and contact information be published on the website. This paragraph is that.
Nicholas Ford
Person in charge of the protection of personal information · Conseil Modus inc.
Law 25, s. 3.1. By default the function falls to the person exercising the highest authority in the enterprise, who may delegate it in writing. Modus being owned equally by two partners, the formal designation is being confirmed.
08
What this site does not do
No decision about you is made automatically here. No form scores you, sorts you, accepts you or rejects you: a human reads every message and decides what to answer. If that ever changed, the law would require us to tell you no later than when we tell you the decision, explain the factors behind it, and let you have a person review it. We would tell you.
Law 25, s. 12.1.
There are also no advertising cookies, no social-network pixels, and nothing that follows you from one site to another. The only non-essential cookie is Google Analytics', and it is only set after your "Accept" in the banner. Your answer itself is kept in your browser's local storage, on your side, so we don't ask again on every page.
09
If something goes wrong
Unauthorized access to, use of, or communication of personal information, or its loss, is a confidentiality incident. If such an incident presents a risk of serious injury, we must notify you promptly, notify the Commission d'accès à l'information as well, and keep a register of those incidents. We keep that register.
Law 25, ss. 3.5 and 3.8.
10
When this page changes
The update date at the top of the page is the real date. If we change something material, a new category of information, a new supplier, a new purpose, we'll name it here rather than slip it into the text, and if the law requires your consent for that change, we'll ask you before.
21 August 2026 — Added Google Analytics 4, a new supplier and a new purpose (detailed audience measurement). Off by default; we ask for your consent in a banner before any collection, as promised above.
This page describes this website. The confidentiality commitments that apply to a client engagement are in that engagement's contract, not here.
A question about this page?
Ask it. This is exactly the work we do for our clients: writing down what actually happens to a business's data, in language people understand, with someone named to answer for it.