Finance JF takes the protection of your personal information very seriously. This page explains, in plain terms, how we comply with Quebec's Law 25 and what your rights are.
1. What is Law 25?
Law 25 (formerly Bill 64) is the Act to modernize legislative provisions as regards the protection of personal information, adopted by the Government of Quebec in September 2021. It came into force gradually between 2022 and 2024.
This law considerably strengthens the obligations of Quebec organizations regarding the collection, use, retention and disclosure of personal information. It also grants new rights to citizens.
1.1 Key principles
- Transparency: organizations must clearly explain their practices
- Consent: the user must explicitly consent to the collection of their data
- Minimization: only the necessary information must be collected
- Security: data must be protected by reasonable measures
- Accountability: a designated officer must oversee compliance
- Strengthened rights: access, rectification, de-indexing, portability
2. Our officer in charge of the protection of personal information
In accordance with section 3.1 of Law 25, Finance JF has designated a person in charge of the protection of personal information within the organization.
Jonathan Filion
Director of Operations
Finance JF
📧 comptable@financejf.com
📞 +1 438-812-0735
🕗 Monday to Friday, 8 a.m. to 5 p.m. (ET)
The officer ensures compliance with the obligations of Law 25, oversees the company's practices regarding the protection of personal information, and is your point of contact for any question or request to exercise rights.
3. What information we collect
As part of our accounting services, we may need to collect:
| Category | Examples |
|---|---|
| Identification | Name, address, email, phone, date of birth |
| Government identifiers | SIN, NEQ, GST/QST numbers (for tax services only) |
| Financial data | Income, expenses, T4, T5, invoices, account statements |
| Technical data | IP, browser, portal access logs |
| Communication data | Emails exchanged, call notes |
Minimization principle: we collect only the information strictly necessary to provide the service you request from us. If you hire us only for your personal taxes, we will not ask for information about your business.
4. Your rights under Law 25
4.1 Right of access
You have the right to obtain, upon request, a copy of all the personal information we hold about you, within a maximum of 30 days.
4.2 Right to rectification
If certain information is inaccurate, incomplete or ambiguous, you may request its correction.
4.3 Right to portability
You may request to receive your personal information in a structured, commonly used and machine-readable format, in order to transmit it to another organization if you wish (section 27).
4.4 Right to withdraw consent
You may withdraw at any time the consent you have given to the collection or use of your personal information. This withdrawal has no retroactive effect and may affect our ability to provide you with certain services.
4.5 Right to cessation of dissemination / de-indexing
In certain circumstances, you may request that we cease disseminating certain information about you or that we proceed with its de-indexing (section 28.1).
4.6 Right to be informed about automated decisions
We currently do not use any exclusively automated decision having legal effects for our clients. Should this change, you would be informed of the fact and would be entitled to explanations about the logic and the consequences.
5. How we obtain your consent
Consent to the collection and use of your personal information must be clear, free, informed and given for specific purposes (section 14 of Law 25).
We obtain your consent in several ways:
- Signing the service agreement: when subscribing to a package
- Explicit forms: checkbox on our contact form
- One-time requests: specific authorization to communicate with the CRA, Revenu Québec, etc.
For sensitive personal information (SIN, detailed financial data), we collect explicit and separate consent.
6. Transfers outside Quebec
Some of our technical providers (cloud hosting, accounting software) may process your data from outside Quebec. In accordance with section 17 of Law 25, before any transfer, we carry out:
- A privacy risk assessment
- A verification of the adequacy of the protection offered in the destination jurisdiction
- The implementation of contractual measures guaranteeing a level of protection equivalent to that of Quebec
Upon request, we can provide you with the list of jurisdictions where your data may be processed.
7. Retention period
We retain your personal information only for as long as necessary to accomplish the purposes for which it was collected, as well as to meet our legal obligations.
| Type of information | Retention period | Justification |
|---|---|---|
| Tax documents | 6 years | Federal Income Tax Act |
| Accounting books | 6 years | Civil Code of Quebec, CRA |
| Active client data | Duration of the relationship | Service delivery |
| Inactive client data | 2 years after end of relationship | Possible resumption of service |
| Access logs | 12 months | Security and audit |
Once these periods have expired, the data is securely destroyed (cryptographic deletion, physical destruction of media) or irreversibly anonymized.
8. Confidentiality incidents
In accordance with section 3.5 of Law 25, in the event of a confidentiality incident presenting a serious risk of harm:
- We immediately take measures to limit the harm
- We assess the severity of the incident
- We notify the Commission d'accès à l'information du Québec (CAI) without delay
- We directly inform the persons concerned
- We keep an incident register in accordance with the law
Finance JF maintains an up-to-date register of confidentiality incidents, accessible to the competent authorities upon request. As of the last update of this page, there is no incident to report.
9. How to exercise your rights
To exercise one of your rights provided for by Law 25:
- Send your request by email to comptable@financejf.com
- Clearly specify:
- Your identity (we may ask you for identification for verification)
- The right or rights you wish to exercise
- The information concerned (if you know it)
- We acknowledge receipt of your request within 30 days and respond within the same period (an extension of up to 30 additional days is possible for complex requests)
The processing of your request is free, unless it is manifestly abusive or repetitive, in which case we may charge reasonable fees.
10. Filing a complaint
If you believe that your rights are not being respected, you may:
10.1 Write to us directly
First contact our officer at comptable@financejf.com. We will take any complaint seriously and try to resolve the situation quickly.
10.2 Refer the matter to the Commission d'accès à l'information
You may also file a formal complaint with the Commission d'accès à l'information du Québec (CAI), the independent supervisory authority for the protection of personal information:
Website: cai.gouv.qc.ca
Phone: 1-888-528-7741 (toll-free)
Email: cai.communications@cai.gouv.qc.ca
11. Updates to this page
We update this page to reflect developments in Law 25, in our internal practices or in the tools we use. The date of the last update appears at the top of the page.
For any substantial change in our practices affecting your rights, we will inform you directly by email.
Our commitment: at Finance JF, protecting your data is not an administrative obligation, it is a fundamental principle of our relationship with you. We are committed to going beyond the strict legal minimum to earn your trust.
To learn more, see our full privacy policy as well as our terms of use.