Law 25: An Act to modernize legislative provisions as regards the protection of personal information

Waked & Blanchette CPA Inc. has implemented the necessary measures and policies to ensure compliance with Law 25 regarding the modernization of legislative provisions for the protection of personal information. They also continuously adhere to ethical obligations and all other applicable laws. The firm considers respecting the rights of its clients and other individuals regarding personal information protection as essential and important.

The firm is committed to protecting personal information as defined by Article 2 of the ARPPIPS: "is any information which relates to a natural person and directly or indirectly allows that person to be identified." in addition to maintain the security, confidentiality, and accuracy of personal information collected by the firm, so clients and other individuals feel comfortable providing their personal information necessary for certification work.

Examples of such information could include, but are not limited to, your name, age, gender, marital status, medical information, address, email address, phone number, social security number, financial information, credit history, etc. Personal information also includes the names, titles, and addresses of employees of any organization.

The firm's privacy policy has been developed to ensure compliance with Law 25, ethical obligations, and all other applicable laws. The privacy policy outlines the firm's commitment to respecting these laws / obligations and clearly presents the principles and procedures implemented by the firm.

The privacy policy indicates the types of personal information the firm collects, explains how they are protected and used throughout the personal information life cycle, and explains the choices available to clients and other individuals regarding the collection, use, and disclosure of their personal information.

Consent

If you continue to use our website or services or submit your personal information to Waked & Blanchette CPA Inc., you are deemed to have given your consent for the purposes stated below, for which Waked & Blanchette CPA Inc. collects and shares your personal information.

Disclosure / Sharing and Communication of Information

Waked & Blanchette CPA Inc. can only transmit your personal information to other entities with your consent. Waked & Blanchette CPA Inc. may disclose your personal information without your consent if required by law, but in such cases, we will only provide the information that is required and notify you.

What Types of Personal Information Does Waked & Blanchette CPA Inc. Collect and Why?

The decision to provide or not provide your personal information is entirely up to you. Generally, you can contact us without providing personal information. However, in some cases, it will be necessary to do so. When necessary, personal information is collected using reliable and secure means.

The personal information collected and maintained / recorded in the firm's files is limited to the information necessary for certification work.

Waked & Blanchette CPA Inc. collects information that is recorded in files to provide certification services that meet accounting standards and those of the CPA order, to its clients and potential clients, and for other purposes permitted or required by law.

How Do We Collect Personal Information?

Waked & Blanchette only collects the information necessary for the specific purposes mentioned above.

The collection of personal information is done only when it is freely provided by the client or through other means compliant with applicable laws. Waked & Blanchette CPA Inc. only collects personal information from third parties after obtaining the client's consent or when permitted by law.

We ask clients or other individuals not to provide unsolicited personal information. If Waked & Blanchette CPA Inc. receives unsolicited personal information, we will return it, destroy it, or ensure you are no longer identifiable, as appropriate and at our sole discretion.

If you choose to provide such information in an email, you consent to its collection and processing in accordance with this policy.

How Long is Personal Information Retained?

Personal information necessary for certification work is kept in files. The files and the personal information contained therein are retained only for the duration necessary to achieve the purposes for which they were created or collected and for the time required to achieve the pursued objectives and meet applicable legal and regulatory requirements.

Example of Applicable Laws and Regulations

Regulation on the Keeping of Records and Consulting Firms and on the Cessation of Practice of a Member of the Order of CPAs of Quebec: "8. The member must keep each file for at least 5 years from the date on which the mandate was executed. They may use any system or archiving process that gives them access to the information contained in the file at the date of its closure."

How Do We Protect Personal Information?

Waked & Blanchette CPA Inc. uses protective measures appropriate to the nature of the information through:

Personal Information Protection Officer within the Firm

Sébastien Rosato Blanchette: contact@wbci.ca

When and How Does Waked & Blanchette CPA Inc. Obtain Your Consent?

An engagement letter is sent to clients for all services offered by our firm. This letter outlines your responsibility to obtain the necessary consents under applicable laws (this includes the collection, use, and disclosure of information). By signing this letter or freely providing personal information to the firm, you formally acknowledge this responsibility.

How to Review or Access Your Personal Information Held by Waked & Blanchette CPA Inc.

Only personal information necessary for certification work is collected and retained. The firm ensures that all information in its possession or under its control is complete and error-free.

Please contact the personal information protection officer listed above to access and/or update the personal information held in the firm's files.

You can withdraw your consent to the collection, use, or disclosure of your personal information at any time, subject to legal and contractual restrictions. If this results in any consequences, the firm will notify you and cease collecting and using your personal information. See the section "How Long is Personal Information Retained?" for legal and ethical limitations related to the retention and destruction of personal information.

Complaint Handling Process for Personal Information Protection and Response Times

Please contact the personal information protection officers listed above by email or in writing at the following address: 203-460 19e Avenue, Montreal, Quebec H8S 3S2. The firm will conduct the necessary verifications, investigations if necessary, and propose solutions.

The firm will respond within a reasonable time, 30 days, following the receipt of the request, to any requests, questions, or complaints related to the personal information of clients or other individuals.

Notification and Recording of Privacy Incidents

In case of an incident, a record will be kept and communicated to the Commission d’accès à l’information du Québec and to the affected individuals if it concerns their information and poses a risk of serious harm.

Conducting Privacy Impact Assessments (PIAs) for Certain Personal Information Processing

Assessments will be conducted when necessary.

Destruction and Anonymization of Personal Information

Once the firm has achieved the purposes for which it collected personal information, it will proceed with the final destruction of this information without the possibility of recovery.