Privacy and protection of personal information

Person in charge of the protection of personal information

The person in charge of the protection of personal information is:

Éric Gagné, CPA
Person in charge of the protection of personal information
Email: egagne@ericgagnecpa.ca
Phone: 367 467-2008
Rimouski, Quebec

This website

• The site has no forms: it does not collect any information you would have to enter.
• It uses no cookies, and no analytics, advertising or tracking tools.
• Fonts are hosted on the site itself: your browser does not contact any third-party service when you visit it.
• Like any website, the host keeps technical logs (IP address, date and time, page visited, browser type) to ensure the site works and stays secure. These logs are kept by the site's host, Netlify (United States), whose servers are located outside Quebec.

Information collected and purposes

When you email or call me, I receive the information you choose to provide (name, contact details, content of your message). It is used only to reply to you and, where applicable, to prepare a service proposal.

As part of an engagement, I collect, with your consent, the information needed to carry it out (for example financial, tax or identity information). It is used only:

• to carry out the engagement entrusted to me;
• to meet my legal, tax and professional obligations.

Your information is never sold or used for advertising purposes.

Disclosure to third parties

As a CPA, I am bound by professional secrecy. Your information is disclosed to a third party only with your consent, or when the law requires or permits it (for example, filing returns with tax authorities as part of your engagement).

To carry out my engagements, I use technology providers (email, software, storage) bound by confidentiality. Some may store information outside Quebec. In that case, a privacy impact assessment is carried out beforehand, and a written agreement governs the protection of the information.

Main providers:

• Intuit QuickBooks (cloud accounting software);
• Thomson Reuters DT Max (preparing and filing tax returns);
• Microsoft 365 (email and documents);
• Fongo Works (telephone);
• Netlify (website hosting).

Retention and destruction

• Client files are kept for 7 years after the end of the engagement, in accordance with my professional and tax obligations.
• Exchanges that do not lead to an engagement are kept for no more than 1 year.
• At the end of the retention period, information is securely destroyed.

Security

I take reasonable security measures, suited to the sensitivity of the information, to protect it against loss, unauthorized access and unauthorized disclosure. Access to files is limited to those who need it to perform their duties.

Any confidentiality incident is recorded in a register. If it presents a risk of serious injury, the Commission d'accès à l'information and the persons concerned are notified.

Your rights

By writing to the person in charge, you may:

• ask to access the personal information I hold about you;
• ask that it be corrected if it is inaccurate, incomplete or equivocal;
• withdraw your consent, subject to my legal and professional obligations;
• ask that your computerized information be provided in a structured, commonly used technological format.

I respond to requests in writing within 30 days.

Complaints

For any question or complaint about the protection of your personal information, write to the person in charge. Your complaint will be handled promptly, and you will receive a written response within 30 days.

If you are not satisfied with the response, you may contact the Commission d'accès à l'information du Québec.

Changes

This policy may be updated. The current version is always published on this page.

Last updated: October 19, 2026