1. Purpose and Scope
CORLEV Legal Inc. (“Firm,” “we,” “us,” or “our”) is a law firm established in Quebec, Canada. We are committed to protecting the privacy and confidentiality of personal information entrusted to us.
This Privacy Policy explains how we collect, use, disclose, retain, safeguard, and otherwise process personal information in connection with:

• our website at www.corlevlegal.com;

• communications with us by email, telephone, text message, online forms, or other means;

• our legal services and client relationships;

• recruitment and employment activities;

• relationships with suppliers, professional contacts, and other individuals; and

• other activities conducted by the Firm.

This Policy is intended to comply with applicable Québec privacy legislation, including the Act respecting the protection of personal information in the private sector, as amended by Law 25, and other applicable privacy laws.
This Policy does not replace the terms of any engagement letter, retainer agreement, mandate, professional obligation, or other agreement between the Firm and a client.
 
2. Professional Secrecy and Confidentiality
As lawyers, members of the Firm are subject to professional secrecy, confidentiality obligations, and applicable rules governing the legal profession.
Personal information obtained in the course of a legal mandate may be subject to professional secrecy and may receive protections beyond those described generally in this Policy. Where applicable, professional secrecy and other legal or contractual obligations continue to apply even after a mandate or relationship with the Firm has ended.
Nothing in this Policy limits any rights or obligations arising from professional secrecy, solicitor-client privilege, litigation privilege, or other applicable legal protections.
 
3. What Is Personal Information?
For purposes of this Policy, “personal information” generally means information about an individual that allows the individual to be identified, directly or indirectly.
Depending on the circumstances, this may include:

• name, address, telephone number, and email address;

• identification and contact information;

• information concerning a legal matter or dispute;

• information contained in correspondence, documents, contracts, pleadings, evidence, or other records;

• financial, billing, and payment information;

• information concerning employment or professional activities;

• information provided through our website or online forms;

• technical information associated with use of our website;

• information contained in applications for employment or internships; and

• other information that is protected under applicable privacy legislation.

We collect only the personal information that is reasonably necessary for the purposes for which it is collected, subject to applicable legal and professional obligations.
 
4. How We Collect Personal Information
We may collect personal information directly from you or, where permitted by law, from other sources.
For example, we may collect information when you:

• contact the Firm;

• request or receive legal services;

• become a client or prospective client;

• communicate with a lawyer or member of our staff;

• submit information through our website;

• subscribe to communications from us;

• provide documents relating to a legal matter;

• apply for employment, an internship, or another position;

• interact with us in a professional capacity; or

• otherwise provide information to the Firm.

Depending on the circumstances and applicable law, we may also obtain information from third parties, public sources, courts, government authorities, opposing parties, witnesses, experts, professional advisers, service providers, or other sources relevant to a legal matter.
 
5. Purposes for Which We Use Personal Information
We may collect, use, and disclose personal information for purposes including:
Legal services

• providing legal advice and representation;

• opening, administering, and managing client files;

• conducting conflict-of-interest checks;

• investigating and analyzing legal matters;

• preparing legal documents;

• communicating with clients, courts, tribunals, government authorities, opposing counsel, experts, witnesses, and other parties;

• conducting discovery, litigation, negotiations, transactions, and other legal proceedings;

• protecting and exercising the Firm's legal rights; and

• complying with applicable professional, legal, regulatory, and court requirements.

Administration and business operations

• managing billing, accounting, collections, and payments;

• maintaining business and client records;

• managing our information technology and security systems;

• administering contracts and relationships with service providers;

• responding to inquiries and requests;

• preventing fraud, unauthorized access, and other unlawful activity;

• maintaining and improving our website and services; and

• managing Firm operations.

 
6. Consent
Where required by applicable law, we will obtain your consent before collecting, using, or disclosing personal information.
Consent may be express or, where permitted by law, implied from the circumstances.
You may withdraw consent where permitted by law. However, withdrawing consent may not affect information that we are permitted or required to collect, use, or disclose without consent, including information necessary to provide legal services or comply with legal, professional, regulatory, or court obligations.
Where personal information is processed as part of a legal mandate, the Firm may rely on legal and professional obligations and other lawful grounds in addition to, or instead of, consent.
 
7. Sensitive Personal Information
Certain personal information may be considered sensitive because of its medical, biometric, financial, legal, professional, or other nature, or because of the context in which it is used or disclosed.
The Firm recognizes that personal information relating to legal matters may be particularly sensitive.
We take appropriate measures to protect sensitive personal information and limit access to individuals who require access for legitimate purposes.
Where required by applicable law, we will obtain express consent for the collection, use, or disclosure of sensitive personal information.
 
8. Disclosure of Personal Information
We do not sell personal information.
We may disclose personal information where reasonably necessary and permitted or required by law, including to:

• lawyers and employees of the Firm who require the information to perform their duties;

• professional consultants, experts, investigators, translators, and other persons assisting with a legal mandate;

• courts, tribunals, government authorities, regulators, law-enforcement authorities, or other public bodies where required or permitted by law;

• opposing counsel and parties involved in a legal matter where appropriate or required for the representation of a client;

• technology, hosting, cloud-storage, document-management, communications, accounting, payment-processing, cybersecurity, and other service providers;

• insurers and professional liability organizations where appropriate;

• auditors, accountants, or other professional advisers; and

• other persons where authorized by the individual or otherwise permitted or required by applicable law.

We require service providers handling personal information on our behalf to implement appropriate safeguards and to use personal information only for authorized purposes, subject to applicable law and contractual requirements.
 
9. Service Providers and Transfers Outside Québec
Some service providers used by the Firm may process or store personal information outside Québec or Canada.
Before communicating personal information outside Québec, the Firm will take the measures required by applicable Québec privacy legislation, which may include conducting a privacy impact assessment and entering into appropriate contractual arrangements or implementing other safeguards where required.
The laws of another jurisdiction may apply to information processed or stored in that jurisdiction and may permit access by governmental or regulatory authorities in accordance with applicable law.
 
10. Website and Technical Information
When you visit our website, certain technical information may be collected automatically, such as:

• IP address;

• browser type;

• device type;

• operating system;

• pages viewed;

• approximate time and duration of visits; and

• information concerning website interactions.

We may use this information to operate, maintain, secure, and improve our website and to understand general website usage.
 
11. Cookies and Similar Technologies
Our website may use cookies and similar technologies.
Cookies may be used for purposes such as:

• enabling website functionality;

• remembering preferences;

• understanding website traffic and usage;

• maintaining security; and

• measuring or improving website performance.

Where required by law, we will obtain consent before using non-essential cookies or similar technologies.
You may be able to control cookies through your browser settings. Disabling certain cookies may affect website functionality.
If the Firm uses specific analytics, advertising, or other third-party technologies, the Firm should identify them here:
 
12. Artificial Intelligence and Automated Processing
The Firm may use technological tools, including artificial intelligence or automated systems, in connection with administrative, research, document-management, drafting, cybersecurity, or other authorized activities.
The Firm will take reasonable measures to ensure that such tools are used in accordance with applicable legal, professional, confidentiality, privacy, and security obligations.
Personal information subject to professional secrecy or other confidentiality obligations will not be submitted to an artificial-intelligence or other third-party system unless the Firm has determined that doing so is appropriate and legally and professionally permissible, and has implemented appropriate safeguards.
If the Firm makes decisions based exclusively on automated processing that produce legal or similarly significant effects concerning an individual, the Firm will comply with applicable legal requirements regarding notice, explanation, review, and access to information.
 
13. Retention of Personal Information
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, to satisfy legal and professional obligations, and to establish, exercise, or defend legal rights.
Client files may be retained for periods determined by applicable legislation, professional requirements, the nature of the mandate, limitation periods, and the Firm's records-retention policies.
When personal information is no longer required, we will securely destroy it or anonymize it in accordance with applicable law.
 
14. Security Measures
The Firm uses reasonable administrative, technical, and physical safeguards appropriate to the sensitivity of personal information.
These measures may include:

• access controls and authentication;

• confidentiality obligations applicable to personnel;

• secure storage and transmission technologies;

• safeguards for physical records;

• cybersecurity measures;

• backups and business-continuity measures;

• monitoring and security procedures; and

• employee training and privacy practices.

No method of electronic transmission or storage is completely secure. Accordingly, while we take reasonable precautions, we cannot guarantee absolute security.
 
15. Privacy Incidents
If the Firm determines that a confidentiality incident involving personal information presents a risk that serious injury could result, the Firm will take the measures required by applicable law, which may include notifying affected individuals and the Commission d'accès à l'information du Québec.
The Firm maintains procedures for assessing, containing, documenting, and responding to privacy incidents.
 
16. Your Privacy Rights
Subject to applicable legal limitations, you may have rights concerning your personal information, including the right to:

• request access to personal information held by the Firm;

• request correction of inaccurate or incomplete personal information;

• withdraw consent where consent is the legal basis for processing;

• request information concerning the Firm's handling of your personal information;

• request, in circumstances provided by law, the portability of certain personal information;

• request that certain information be de-indexed or cease dissemination where applicable; and

• exercise other rights provided by applicable privacy legislation.

Certain information may be exempt from access or other requests because of legal privilege, professional secrecy, litigation privilege, legal restrictions, or other applicable exceptions.
 
17. Right to Data Portability
Where required by applicable Québec legislation, an individual may request that computerized personal information collected directly from them be provided in a structured, commonly used technological format or be communicated to another organization, subject to applicable legal exceptions.
Requests concerning information contained in a legal file may be subject to professional-secrecy, privilege, legal, or other restrictions.
 
18. Privacy Complaints
If you believe that the Firm has not handled your personal information appropriately, you may submit a written complaint to our Privacy Officer using the contact information above.
We will investigate complaints in accordance with our internal procedures and applicable law.
You may also have the right to submit a complaint to the Commission d'accès à l'information du Québec.
 
19. Minors
Our services are generally provided to adults and organizations. Where we collect personal information concerning a minor, we will handle that information in accordance with applicable privacy laws and any other applicable legal and professional obligations.
 
20. Communications
If you communicate with us by email, text message, website form, or other electronic means, the information contained in those communications may be retained as part of our records.
Electronic communications may not be completely secure. Please avoid sending highly sensitive information through an unsecured communication channel unless you have been instructed by the Firm to do so.
 
21. Third-Party Websites
Our website may contain links to websites operated by third parties. We are not responsible for the privacy practices, content, or security of third-party websites.
We encourage you to review the privacy policies of any third-party websites that you visit.
 
22. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our practices, technology, legal requirements, or professional obligations.
The current version will be posted on our website with its effective or updated date.
 
23. Contact Information
For questions, concerns, requests, or complaints concerning privacy or personal information, please contact us via our website.