Privacy policy

Who we are

TTC Nantel inc. is a firm of chartered professional accountants (CPAs) specializing in mergers and acquisitions, located at 1200 McGill College Avenue, Suite 2000, Montréal, Québec H3B 4G7. We place great importance on protecting the personal information entrusted to us by visitors to our website, our clients and the people we deal with in the course of our mandates. Information received in the course of a mandate is also protected by the professional secrecy to which CPAs are bound.

This policy explains what information we collect, why, how we protect it and what your rights are. It applies to information collected through our website, our forms, our emails and our meetings, as well as in the course of our mandates.

Information we collect

When you use our website or contact us: name, email address, phone number, business name and address, your situation (for example, a plan to sell or acquire), the content of your messages and information about your appointments. When you book a call on our website, we also keep the page through which you arrived and, where applicable, the originating advertising campaign, so we can understand how people find us.

If you consent, we also collect website usage data (pages viewed, length of visit, type of device, approximate location) using audience measurement and advertising cookies. This data does not include your name, email address or phone number.

In the course of a mandate (sale, purchase, valuation, due diligence or advisory services): contact information for officers and shareholders, financial, tax and business information, employee information required for the transaction, as well as recordings, transcripts and notes of our meetings.

We do not ask for social insurance numbers, health information or full bank account numbers, except where necessary.

Why we use it

We use your information to manage your appointments and our communications; prepare our meetings; carry out our mandates and prepare our deliverables; meet our legal and professional obligations, including those owed to the Ordre des CPA du Québec; send you information about our services, if you consent; and improve our website, our services and, with your consent, our advertising.

How we collect it and your consent

We collect information directly from you (forms, emails, calls and meetings) or from our clients and the other parties to a transaction, who represent that they have the right to share it with us. When you book a call on our website, we ask for your express consent before recording your information. Some meetings are recorded and transcribed using Fireflies.ai; participants are notified in advance.

Audience measurement and advertising rely on separate consent, requested through the banner displayed on your first visit. Each category is chosen separately, nothing is turned on by default, and declining has no effect on your use of the website.

Where your consent is required, you may withdraw it at any time, without affecting processing already carried out.

Disclosure to third parties and technology tools, including artificial intelligence

We never sell your personal information. We disclose it only to the extent necessary:

• to the other parties to a transaction and their advisors, under a confidentiality agreement;
• to our professional advisors and to the authorities, where required or permitted by law;
• to our service providers, bound by written confidentiality and data protection agreements, listed below.

• Microsoft 365: hosting of our files and emails in Canada, the Copilot Chat assistant and appointment booking. The time slots offered on our website come from Microsoft Bookings and our Outlook calendar; booking creates a Teams meeting and an email invitation.
• Pipedrive: our customer relationship management tool. The information provided when booking an appointment (name, email, phone, business, answers, appointment date and source of the visit, such as the advertising campaign) is recorded there. It may be processed outside Québec; this processing is governed by contract (data processing agreement).
• Google (Google Analytics 4, and Google Ads once enabled): website usage data only, and only with your consent. Servers in the United States.
• Meta Platforms (Facebook, Instagram): measuring the effectiveness of our ads, website usage data only, and only if you consent to the Advertising category. Servers in the United States.
• Cloudflare: hosting and security of our website and, later, protection of our forms against spam.
• Anthropic: Claude artificial intelligence assistant and agent.
• Fireflies.ai: meeting transcription.

Some of these providers, including Google, Meta Platforms and Pipedrive, host or process information outside Québec, notably in the United States. Before any disclosure outside Québec, we assess the privacy factors involved and govern the disclosure by contract.

We use only professional versions of artificial intelligence tools, whose terms prohibit the use of your information to train their models. Any analysis produced with the help of AI is reviewed by a TTC Nantel professional, and no decision about you is made solely through automated processing.

Job applications

When you apply through our Careers page (in French), we collect your name, contact information, profile, the position you are applying for, school and program or years of experience, LinkedIn profile, your message and your resume.

Purpose. This information is used only to assess your application and to communicate with you about it. It is not used for any other purpose, including prospecting.

Transmission. The form sends your application, with your resume attached, by email to our person in charge of the protection of personal information, through Microsoft 365. Our host, Cloudflare, only relays the transmission: the resume is not stored on its servers.

Retention period. No more than 12 months after it is received, after which it is securely destroyed, unless you join our team or ask us in writing to keep it longer.

Your rights. At any time, you may access the information in your application, have it corrected or withdraw your application by writing to thierry@ttcnantel.com. The other rights described in the “Your rights” section also apply.

Retention period

We keep information for as long as necessary for the purposes for which it was collected. Mandate files are kept for seven years after the end of the mandate, to meet our professional and tax obligations; recordings and transcripts of meetings, for the duration of the mandate. Audience measurement data (Google Analytics 4) is kept for 14 months. Information is then securely destroyed or anonymized.

Your rights

You may:

• access the information about you and obtain a copy of it, including, for computerized information you provided to us, in a structured, commonly used technological format;
• have inaccurate, incomplete or equivocal information corrected;
• withdraw your consent or object to commercial prospecting;
• request that the dissemination of information cease or that it be de-indexed, in the cases provided for by law.

To exercise these rights or for any question, write to our person in charge of the protection of personal information (contact information below). We respond within 30 days. You may also contact the Commission d'accès à l'information du Québec.

Person in charge of the protection of personal information

This person's title and contact information are published in accordance with Law 25 (Act respecting the protection of personal information in the private sector).

Data security

We protect information with measures suited to its sensitivity: multi-factor authentication, encryption provided by our service providers, access limited to the people and applications that need it, and confidentiality undertakings signed by our team. Our practices are governed by an internal policy on the governance of personal information and artificial intelligence. Every confidentiality incident is entered in our register; if it presents a risk of serious injury, we notify the Commission d'accès à l'information and the persons concerned.

Cookies

No measurement or advertising cookie is placed before you consent. You can change your mind at any time using the “Manage my cookies” link at the bottom of every page. Declining does not prevent you from using the website or booking a call.

Google Analytics 4 data is kept for 14 months. Google signals and ad personalization are used only if you accept the Advertising category.

For the duration of your visit only (session storage, cleared when you close the tab), appointment booking also keeps your landing page and the originating advertising campaign. This data is sent only with your appointment request, never to Google or Meta.

Manage my cookies

Changes to this policy

We may update this policy; the version in force is always published on this page.