Privacy policy

This policy describes the personal information Nova Gestion collects through this website, why it collects it, where it is kept, for how long, and how to exercise your rights.

Last updated: 17 October 2026

Privacy officer

Québec’s Law 25 requires a business to designate a person responsible for the protection of personal information and to publish that person’s title and contact details. This is the person to address any request for access, correction, or withdrawal of consent.

Name: Jessica Janyk
Title: Partner
Email: info@novagestion.ca

Information collected

This site collects no personal information passively. It uses no cookies, no audience analytics, and no advertising tracking pixel. No data is sent to a social network or an ad network.

The only information collected is what you voluntarily enter in the contact form:

Your name
Your company name
Your email address
Your phone number, if you choose to provide it
The number of employees in your business
The nature of your situation
The content of your message

IP address

The IP address of the connection that submits the form is not kept as such. It is turned into an irreversible fingerprint (salted hash) before being recorded with the request, for one purpose only: limiting repeated automated submissions, since the site uses no CAPTCHA. That fingerprint cannot be reversed to the original address and is never cross-referenced with other sources.

Why this information is collected

This information is never sold, rented or traded. It is used for no newsletter and no advertising. No decision based exclusively on automated processing is made from it.

To answer your request and, where applicable, arrange a consultation.
To establish whether your business falls within the scope of our services.
To limit automated submissions and spam.

Consent

The form includes a consent checkbox that is never pre-ticked. Without that consent, the form cannot be submitted.

You may withdraw your consent at any time by writing to the privacy officer named above. The request is then deleted, unless a legal obligation requires it to be kept.

Where the information is kept

Requests sent through the form are stored in a database hosted by Supabase, in its Canada (Central) region. The information therefore resides in Canada.

The site is served by Vercel. Processing the form — validating the fields and writing to the database — runs in a Vercel function whose servers are located in the United States. The information therefore transits outside Québec before being stored in Canada.

A copy of each request is also sent by email to the firm, through the Resend delivery service, whose servers are located in the United States. It is received in the firm’s Gmail inbox, hosted by Google outside Québec.

Such a transfer outside Québec requires, beforehand, the privacy impact assessment set out in the Act respecting the protection of personal information in the private sector.

Retention period

Request with no follow-up: Twelve months from receipt, then deleted.
Request that led to a meeting: Three years from the last contact, then deleted.
Request that led to a mandate: Kept for the duration of the mandate and seven years after it ends, in line with tax and accounting obligations.

Your rights

Québec law gives you the following rights over the personal information we hold about you:

Access the information we hold about you.
Have inaccurate, incomplete or ambiguous information corrected.
Request deletion of information that is no longer necessary for the purposes it was collected for.
Withdraw your consent at any time.
File a complaint with the Commission d’accès à l’information du Québec if our answer does not satisfy you.

Privacy incident

In the event of a privacy incident presenting a risk of serious injury, Nova Gestion notifies the individuals concerned and the Commission d’accès à l’information, and records the incident in a register, as required by law.

Changes

Any change to this policy is published on this page, with the update date shown at the top.