1. Officer responsible for personal information
The designated officer is Nadim Chaar, CPA. For any question, request for access, rectification, withdrawal of consent or complaint regarding your personal information, contact: nadim.chaarcpa@outlook.com — (514) 224-2995.
2. Information collected
We collect only the information needed to deliver our services: name, email, phone number, message submitted via the contact form, and — for clients using the client portal — the email used for authentication and the tax documents you upload yourself. Anonymized technical data (device type, page viewed) is collected only with your explicit consent via the cookie banner.
3. Purposes
Your information is used solely to: (a) respond to your contact request; (b) prepare and execute your tax or accounting engagement; (c) communicate relevant tax deadlines; (d) meet our legal and professional obligations as a CPA. No information is sold, rented or used for third-party marketing.
4. Consent
You provide informed consent by submitting the contact form or creating a client account. For non-essential cookies (analytics), consent is collected separately and can be withdrawn at any time via the site settings, without any impact on essential services.
5. Retention
Contact form messages are kept for a maximum of 24 months. Client files are kept in accordance with the professional requirements of the Quebec CPA Order and federal/provincial tax obligations (generally 7 years after the last engagement). Cookie consent logs are kept for 13 months.
6. Sharing with third parties
Your information is only shared with vendors necessary to deliver the service: Resend (transactional email, hosted in the United States), Supabase (secure client portal hosting, data stored in Canada), GoHighLevel (client file management, hosted in the United States), Vercel (site hosting, global infrastructure). Each is bound by contractual confidentiality commitments. No transfer outside Quebec takes place without a prior privacy impact assessment as required by Law 25.
7. Security
Transfers between your browser and our servers are encrypted (HTTPS). The client portal uses passwordless magic-link authentication, and each document is protected by strict access rules preventing any other client from accessing it.
8. Your rights
You have the right to access your personal information, have it corrected, request its deletion (subject to professional retention obligations), withdraw consent for non-essential uses, and file a complaint with Quebec's Commission d'accès à l'information (cai.gouv.qc.ca).
9. Cookies
We only use essential cookies to run the site. Analytics cookies (Vercel Analytics, Google Analytics) are activated only if you explicitly consent. Refusing is just as easy as accepting.
10. Changes
This policy may be updated. The date of the last revision is indicated at the top of the page. Any substantial change will be communicated to active clients.