I. Preamble

1. These governance rules and the privacy policy regarding the protection of personal information (the "Policy") aim to determine the principles that ConTaxTech Inc. (the "Firm") and its representatives must follow when collecting, using, communicating, storing, and destroying personal information.
2. The Policy provides, among other things, for the framework of obligations incumbent upon the Cabinet, particularly regarding the roles and responsibilities of the individual responsible for access to and protection of personal information (the "Privacy Officer") and their employees in the handling of information. The rights of individuals concerned by the personal information collected, used, disclosed, retained, and destroyed by the Cabinet are included, as well as the process for handling complaints related to the protection of personal information.
3. The Policy applies to all personal information related to clients, suppliers, staff, and employees (the "Data Subjects").

II. Consent

---

By communicating with the Firm, you agree to be bound by this Policy and consent to the collection, use, disclosure, retention and destruction of your personal information in accordance with the terms described in the Policy.

II. Responsibilities of the firm and the PRP manager

1. The Firm is responsible for protecting the personal information it holds, whether it is held by the Firm or by a third party, and regardless of the form in which it is held (written, graphic, sound, visual, computerized or other).
2. As such, Cabinet takes the necessary security measures to protect this information in a manner commensurate with its sensitivity, and has adopted this Policy.
3. The Firm's PRP Manager ensures compliance with and implementation of these rules and the Firm's privacy obligations. In particular, he/she participates in the prevention and appropriate management of privacy incidents, the complaint handling process and Privacy Impact Assessments (“PIAs”) as required.

IV. Policy Modifications

The Firm reserves the right to make changes to the Policy at any time by notifying affected Individuals through any contact information available to us. If the changes affect the original consent, the Firm will collect a new consent, if applicable 

V. The information that the office collects

I collect the following information, in whole or in part, when you contact me, in particular for accounting, tax and consulting services:

1. First and last name(s)
2. Social Insurance Number (SIN)
3. Date of birth
4. Personal mailing address
5. Personal phone number
6. Personal email address
7. Banking information
8. Marital status and details of your spouse and dependants​
9. Accounting  records
10. Your tax returns and financial documents
11. Your business numbers and tax identifiers
12. Your investment and asset information

VI. Accessibility and Correction

To access the personal information that the firm holds about you, to obtain a copy, or to request the correction of any inaccurate personal information that the firm holds about you, you may make a written request. You may also inquire about how this information is used and ensure that it is accurate and complete, and update it as necessary, to the extent permitted by law.

VII. The purposes of data collection

I am requesting personal information for a number of purposes, including:

1. Perform bookkeeping
2. Perform withholding and tax remittances
3. Prepare financial statements
4. Complete your income or information returns including tax slips
5. Manage a condominium association
6. Communicate with tax authorities
7. Respond to various standards and requirements of the Ordre des CPA du Québec
8. Access an online platform to file, view, and sign documents
9. Meet the requirements of the legislation
10. Perform financial analyses and projections
11. Provide tax optimization advice
12. Represent your interests with tax authorities
13. Manage tax disputes

VIII. Security Measures

1. The firm implements very strict security measures to protect your personal information against any unauthorized access, use, communication, modification, loss, theft, or any other breach of information security. The information collected is protected by reasonable computer security measures considering its sensitivity.

2. Physical and material security measures include:

   1. 1. Restriction of access to your personal information to a selected group of individuals

      2. Secure offices with controlled access
      3. Secure destruction of paper documents

3. Computer security measures include:

   1. 1. Use of complex passwords and two-factor authentication

      2. Use of secure platforms and electronic communications with AES-256 encryption
      3. Encrypted off-site backups
      4. TLS protocols for all electronic communications
      5. Regular security audits

IX. Communication to Third Parties

1. The personal information collected is accessible by me for the purposes set out in this Policy and with which I must comply, or to third parties under service, business or limited mandate contracts.
2. As mentioned in the previous section on security measures, in such cases, the contracts ensure that they respect the confidentiality and security of your personal information and use it only for the purposes of the contract, mandate or service they are performing.

3. Third parties with whom the firm may share information include:

   1. Canada Revenue Agency and Revenu Québec
   2. Financial institutions for payment processing
   3. Other professionals (lawyers, notaries) when required for your file
   4. Providers of secure accounting software
   5. Secure cloud storage services

4. The information regarding mobile sign-up data and emails for the newsletter (opt-in data) will not be shared with third parties.

X. Withdrawal of Consent

You can modify or withdraw your consent to the collection, use, and communication of your personal information at any time by sending a written notice to the Privacy Officer. The firm will process your request as soon as possible. You understand that certain features may no longer be accessible or may be restricted following the withdrawal of your consent related to this Policy.

XI. Destruction or anonymization

If the purposes for which the information was collected are achieved, the firm will securely destroy it or anonymize it according to the methods permitted by law for serious and legitimate purposes, subject to a retention period provided by law.

The retention period is 6 years after the last activity.

XII. Portability of Personal Information

At your request, I may disclose to a third party certain personal information I hold, subject to legal limitations and the requirements of the Ordre des CPA du Québec.

XIII. Registers

The Firm takes all reasonable steps to minimize any risk of your information being compromised, and keeps a record of any incident that could compromise its confidentiality. In the event of a serious risk to the confidentiality of your information, you will be notified as follows.

XIV. Evaluation Process

The Firm will carry out a PIA assessment in the event of any acquisition project or redesign of my IT systems involving personal information. This will be done in consultation with the PRP Manager, taking into account the sensitivity, quantity and purpose of the information concerned..

XV. Complaint and Processing Procedure

1. Any Person concerned by personal information collected, used, communicated or retained by the Firm may file a complaint with the PRP Manager. The complaint must be made in writing and indicate the nature of the alleged facts, the date on which the incident occurred, as well as expectations as to the outcome of the complaint. The PRP Manager acknowledges receipt of the complaint and processes it within a maximum of 20 working days.
2. The firm investigates all privacy complaints and takes appropriate steps to resolve them. For further information on how I handle personal information, please contact:

​Alexandre Martel, LL.M. Tax, MBA, CPA

Responsible for access and protection of personal information

1321 Providence Street

Longueuil, QC J4K 1B3

Téléphone: 450-897-0909

Email:info@contaxtech.ca

XVII. Cookies and tracking technologies

1. The firm uses cookies and similar technologies to:

   1. 1. Ensure the proper functioning of the website (essential cookies)
      2. Analyze the audience and improve the user experience
      3. Personalize content for returning visitors

2. Cookies are classified into several categories:

   1. 1. Strictly necessary cookies: Essential for the operation of the site
      2. Performance cookies: To analyze site usage
      3. Functionality cookies: To remember your preferences
      4. Marketing cookies: To display targeted ads (with consent)
3. You can manage your preferences through our consent banner or your browser settings.

XVIII. Analysis Tools

1. Google Analytics: The firm uses this service to:

   1. 1. Measure website audience

      2. Analyze visitor behavior

      3. Improve the firm's online services

2. Meta Pixel: The firm uses this service to:

   1. 1. Measure the effectiveness of the firm's Facebook/Instagram ads
      2. Understand visitor actions after seeing the firm's ads

Data is anonymized and retained for a maximum of 26 months.

XIX. Online Advertising

1. Google Ads : Le cabinet utilise:

   1. 1. Conversion tracking to measure the effectiveness of the firm's campaigns
      2. Remarketing to target visitors who have shown interest in our services
      3. Similar audiences to reach new potential customers

2. Social media: Our campaigns on Facebook, Instagram, LinkedIn may use :

   1. 1. Conversion tracking
      2. Visitor retargeting
      3. Customer journey analysis

You can disable personalized advertising through the settings of each platform.

XX. Professional Tools

1. Odoo: The firm's integrated management system uses:

   1. 1. Session cookies for secure authentication
      2. Activity tracking for billing and case management
      3. Internal analytics to improve the firm's processes

2. Accounting software: The platforms used by the firm (e.g., QuickBooks, Sage) can:

   1. 1. Record metadata on usage
      2. Collect technical data for support
      3. Generate anonymized usage reports

3. Cloud services: Our storage providers (e.g., Odoo, OneDrive) implement:

   1. 1. Access logs for security
      2. Usage analytics for maintenance

XXI. Preference Management

You can control tracking technologies via:

1. La bannière de consentement aux cookies du Cavbinet

2. Your browser settings (disabling cookies)

3. Advertising preference management platforms:

   1. 1. Google Ads Preferences

      2. Facebook Ad Preferences

      3. Opt-out of the Network Advertising Initiative (

4. Some site features may be limited if you disable essential cookies.
5. For any specific questions about these technologies, contact the PRP manager.

XXII. Newsletters and electronic communications

1. Subscription: When you subscribe to the Cabinet's newsletter:

   1. 1. The Office only collects your full name, email address, and phone number
      2. We use double opt-in consent in accordance with the Canadian Anti-Spam Legislation (CASL)
      3. You will receive a confirmation email before any communication

2. Content: The Cabinet's newsletters may include:

   1. 1. Tax and accounting news
      2. Practical financial tips
      3. Relevant service offers
      4. Invitations to webinars or events

3. Tracking: The Cabinet analyzes:

   1. 1. Open rates (with tracking pixels)
      2. Clicks on links (with tracked redirects)
      3. Unsubscribes and complaints

This data is used to improve the Cabinet's communication and is not shared.

XXIII. Outbound Marketing

1. Professional approach: Our outbound campaigns (calls/emails):

   1. 1. Target exclusively professionals/businesses (B2B)
      2. Respect do-not-call lists (DNCL)
      3. Rely on existing relationships or expressed interests

2. Contact sources: The Cabinet may use:

   1. 1. Your public professional contact information (website/LinkedIn)
      2. Referrals from existing clients (with consent)
      3. Lists of professional events you have registered for

3. Preference management :

   1. 1. All communications include a clear unsubscribe option
      2. Withdrawal requests are processed within 48 hours
      3. You can specify your preferred communication channels

XXIV. Legal Basis for Marketing

1. The Cabinet's marketing activities are based on:

   1. 1. Explicit consent(for newsletters)

      2. Legitimate interest(for relevant B2B communications)
      3. Existing contractual relationship(important updates)

2. Compliance with:

   1. 1. Canadian Anti-Spam Legislation (CASL)
      2. Bill 25 of Quebec (clear consent and easy withdrawal)
      3. Ethical rules of the CPA Order

This Policy complies with Canadian laws on the protection of personal information, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and Bill 25 of Quebec.