Quebec Law 25 & Canadian Privacy

ALMA Intelligence serves businesses across Canada. Our privacy practices are designed to align with the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and, for Quebec, with Law 25 — the law that modernized Quebec's Act respecting the protection of personal information in the private sector. This page summarizes our approach.

Last updated: June 7, 2026

Template notice: This page provides a starting template and should be reviewed and finalized with qualified legal counsel before being relied upon.

What Law 25 Is

Law 25 (formerly Bill 64) strengthened the rights of individuals and the obligations of organizations that handle personal information in Quebec, with requirements phased in between 2022 and 2024 — including designating a person responsible for privacy, breach reporting, privacy impact assessments, clearer consent, anonymization, and rights to erasure and portability. It can apply to organizations outside Quebec that offer goods or services to Quebec residents.

Person Responsible for Privacy

We have designated a point of contact for the protection of personal information. They can be reached at contact@almaintelligence.ca.

Consent & Transparency

We aim to collect personal information for clearly identified purposes, seek consent where required, and explain in plain language how data is used. Call audio and transcripts handled by our AI voice agents are processed to deliver and improve the service.

Data Residency & Security

Data is protected with encryption in transit and at rest, access controls, and ongoing security practices. Where data is stored or processed outside Quebec or Canada, we seek to ensure it receives adequate protection consistent with Law 25’s requirements.

Your Rights

Subject to applicable law, you may request access to, correction of, and deletion of your personal information, withdraw consent, and request portability where Law 25 applies. We aim to respond to verified requests within the timelines set out by law.

Privacy Incidents

We are building our processes to assess and record confidentiality incidents and, where there is a risk of serious harm, to notify affected individuals and the appropriate regulator — the Commission d'accès à l'information du Québec for Law 25, or the Office of the Privacy Commissioner of Canada under PIPEDA.