Privacy Policy

Lexgestio lawyers inc.  ("Lexgestio") is a business law firm. For these purposes, we may occasionally receive certain personal information when it is necessary for the processing of a case.   The processing of personal information collected by lexgestio, including that obtained through third-party platforms, is governed by the Act respecting the protection of personal information in the private sector.

This Privacy Policy (the "Policy") describes our practices for the collection, use, disclosure and retention of personal information. In the event that you are required to provide us with personal information (see the section "How does lexgestio collect personal information?"), you agree that your personal information will be processed in accordance with this Policy and you authorize lexgestio, its third-party partners and service providers to process your personal information for the purposes set out below in accordance with this Policy.

 

This Policy does not apply to third-party websites that can be accessed by clicking on links on our website. If you follow a link to a third-party website, the third-party website will have its own privacy policies. We encourage you to carefully review any personal information policy before submitting your personal information.

 

In addition, please note that our website collects basic technical information related to Internet browsing. For more details, see Managing Cookies and Personal Information.

 

What personal information does lexgestio collect?

We may collect and process different types of personal information as necessary depending on the nature of the activities and the nature of our relationship with the individual concerned in accordance with the law and the extent of their consent, as required by law, including:

 

• Relevant personal contact information, such as a first name, last name, address, email address, date of birth, photograph and telephone number, history and other relevant information about the parties involved in the processing of a case;

• Recruitment-related information, such as a Social Insurance Number, passport, work permit, driver's license and registration, resume, education information such as university numbers, diplomas and transcripts, employment history, details of professional affiliations, job title, name of employer, employment and/or personal history, references, criminal history, credit history, and others information relevant to a potential recruitment and employment follow-up by Lexgestio;

• Tax and financial information such as billing or payment information, a void cheque;

• Evidence of consent given to us (date, time, means) for the processing of personal information, when required;

• Any other personal information provided.

 

Please note that if you provide us with personal information about other individuals (such as your clients, employees or candidates), you must ensure that you have duly notified them that you are providing us with their information and that you have obtained their consent to such disclosure;

 

How does lexgestio collect personal information?

We collect the personal information you provide to us during your interactions with us, as follows:

• When you open a file and receive professional services;

• When you apply as an employee, student or consultant and, if applicable, when your application is selected and thereafter in order to create and update your file;

• When you fill out forms through our website;

• As part of relevant audit processes, in particular for the purpose of managing conflicts of interest of our employees and professionals.

 

We also collect publicly available information, including on public platforms and social media.

 

How does lexgestio use your personal information?

We may use personal information in any of the ways set out below, with your consent or, where applicable, as permitted by law. In each case, we will disclose the purposes for which we are using your personal information:

• To render services to you;

• For the purposes of recruiting employees, consultants, to allow us to assess whether an individual meets the requirements of lexgestio;

• To prevent fraud or conduct other background or conflict of interest checks that may be required from time to time under applicable law or regulation and/or best practices (if false or inaccurate information is provided or fraud is found or suspected, information may be passed on to fraud prevention organizations and may be recorded by us or such organizations). organizations);

• To comply with our legal or regulatory obligations, including information disclosure, or to protect the rights of third parties;

• To facilitate the use of our websites and to ensure that content is relevant and is presented in the most effective manner for you and for your device.

 

We will use personal information for the sole purpose of fulfilling the primary purpose and applicable legitimate purpose for which it was collected, or for purposes consistent with that primary purpose.

With whom does Lexgestio share personal information?

The personal information we collect may be transferred to certain third-party service providers of lexgestio in order to be processed in the following ways:

• For the purposes of managing and retaining professional records;

• For human resources recruitment, hiring and employment file purposes, including payroll, vacation, insurance, leave, etc.;

• For database and website analysis, application development, hosting, maintenance and related services;

• For processing by government authorities or agencies and law enforcement agencies where required by applicable laws. For greater certainty, we may disclose personal information and other information if we are required to do so by law, including under tax laws, or if we believe in good faith that such disclosure is necessary to comply with applicable laws, in response to a court order or subpoena or government search warrant,  or otherwise to cooperate with such government authorities and law enforcement agencies.

 

We limit the information we provide in this way to only that information that is reasonably necessary to enable such third parties to perform their functions and they are required to protect and maintain the confidentiality of such information under contract or legal obligation; These third parties have an obligation to destroy such information when it is no longer relevant to the Services, unless there is a legal obligation to retain it.

 

When does lexgestio assess privacy risks?

Lexgestio assesses privacy risks and ways to mitigate risks identified prior to processing or sharing personal information deemed to be higher risk in accordance with the law, including:

• Before undertaking a project to acquire, develop or redesign an information system or electronic service delivery system that involves personal information;

• Before collecting or disclosing personal information to an organization with which it collaborates for the provision of services or for the achievement of a common mission;

• Before communicating personal information without the consent of the persons concerned, in particular to a person or organization wishing to use the information for study, research or statistical purposes;

• Before disclosing personal information outside of Canada.

 

For how long and where does lexgestio keep personal information?

We will only retain personal information for as long as necessary for the purposes set out in this Policy and to comply with our legal and regulatory obligations.

Personal information is stored by lexgestio on its internal network or on the servers of its computer suppliers.

When the purposes for which the personal information was collected have been achieved, the information is destroyed or anonymized, in accordance with the time limits and mechanisms provided for by law.

 

How does lexgestio protect personal information?

We ensure that our practices align with generally accepted industry standards in order to comply with our privacy obligations. We maintain administrative, physical and technological measures to protect the personal information we process and to comply with obligations under applicable privacy laws. We also ensure that the people who have access to your personal information are the ones who need to know it in the course of their duties.

In addition, despite the precautions taken, an incident remains possible and we cannot guarantee the security of the information you knowingly provide to us. Members of our community and third-party partners are required to report any privacy incidents to us that they may become aware of in accordance with our privacy incident management procedure. If a confidentiality incident occurs that poses a risk of serious harm to your personal information, we will notify you and the Commission d'accès à l'information as soon as possible following our knowledge of the incident, in accordance with applicable law. We will take reasonable steps to reduce the risk of harm and prevent similar incidents from occurring in the future. In addition, any person who violates this Policy is liable to sanctions according to the applicable rules.

If you have reason to believe that your personal information has been compromised, please contact us using the contact information provided in the "How to Contact Us" section.

 

What rights does an individual have with respect to his or her personal information?

In certain circumstances and in accordance with applicable privacy laws, an individual has the following rights with respect to his or her personal information:

• The right to access and receive a copy of the personal information about the person that they have provided, whether in an electronic or non-electronic format;

• The right to request rectification of any incomplete or inaccurate personal information about them;

• The right to be informed if he or she is the subject of a decision based solely on automated processing of his or her personal information;

• The right to withdraw consent to the use and disclosure of personal information.

 

To exercise any of these rights, please contact us as described in the "How to Contact Us" section.

 

Finally, it is also possible to lodge a complaint with a data protection supervisory authority, more specifically in the country, province or state in which you normally reside (in Quebec, the designated authority is the Commission d'accès à l'information), in which we are located or in which an alleged violation of data protection laws has been committed.

 

How do we use cookies and similar technologies?

For detailed information about the cookies we use, please refer to the Managing Cookies and Personal Information section of our website.

 

How to contact us?

To make a request or report under this Policy with respect to your personal information, we invite you to contact our responsible person at the following address:

 

privacy@lexgestio.ca

 

Update

In order to keep up with the evolution of applicable privacy practices and legislation, this policy may be updated as necessary.

 

This policy was last updated on September 15, 2023.