Introduction and Scope

Twin Lisbet Inc. (hereinafter referred to as “TL,” “we,” or “us”) is a law firm that values your privacy and ensures the appropriate management of your personal information. Confidentiality and professional secrecy are at the core of our mission, and we are fully committed to protecting the personal information we collect in the course of our professional and business activities. This Privacy Policy outlines how we collect, use, store, disclose, retain, and destroy your personal information, as well as the security measures in place to ensure its protection and integrity, in accordance with privacy laws.

This document aims to inform you about our practices and provide guidance on how to object to any of our methods. It also details your data protection rights.

This Privacy Policy covers the following: the types of personal data collected (e.g., name, address, email, location, IP address), how this data is collected and processed, your rights regarding this information, the entity responsible for processing the data, the use and potential transfer of this data, and our cookie policy.

This policy complements the General Conditions of Use available at: https://twinlisbet.ssquarestech.com/conditions-and-policies/general-conditions-of-use/.

Our policy complies with the Personal Information Protection and Electronic Documents Act (PIPEDA) and, for EU residents, the General Data Protection Regulation (GDPR). In case of any inconsistency between this policy and the GDPR, the GDPR shall prevail.

By providing personal information through our website, secure links, email, in person, or by phone, you consent to its processing as described in this policy and authorize TL, its third parties, and service providers to process your personal information for the purposes stated.

Types of Personal Information Collected

• Identification and Contact Information: We collect various personal information, such as your name, address, phone number, date of birth, marital status, passport number, driver’s license, health insurance number, work experience, educational background, and employment history. We may also collect preferences related to our services.
• Financial Data: For billing purposes, we collect financial information, such as bank account details and other data necessary for payment processing and fraud prevention, including credit card numbers. We do not store credit card information, using a secure platform that automatically deletes it after each transaction. Our system is assessed annually to ensure compliance with the Payment Card Industry Data Security Standards (PCI DSS).
• Business Information: We collect information relevant to our contractual or customer relationship with you or your business, including information you voluntarily provide or data necessary for effective communication and quality service.
• Legal Data: For our legal advisory services, we may collect information related to disputes, complaints, investigations, arbitration, or legal advice requests. This includes sensitive information such as tax returns, banking details, identification data, proof of ownership, powers of attorney, wills, mandates, estate matters, and financial statements, all handled with utmost discretion and covered by professional secrecy with enhanced security measures.
• Profile and Usage Data: We may analyze data related to your profile, use of our services, and website interactions, such as services viewed or searched, page response times, download errors, visit duration, and page interactions.
• Technical Data: During website visits, we may collect technical data, including IP address, login information, browser type and version, device type, time zone settings, browser plug-in types, operating system, and platform.
• Physical Access Data: We may collect information about your visits to our premises, such as details of physical access to our offices.
• Sensitive Information: In specific circumstances, we may collect sensitive personal information, such as racial or ethnic origins, political opinions, religious beliefs, trade union activities, physical or mental health, sex life, sexual orientation, criminal offenses, or genetic/biometric data, when necessary for legal representation. This information is handled with utmost care and in compliance with applicable laws.

Personal Information of a Third Party

If you provide personal information about others (e.g., employees, third parties, advisors, or suppliers), you must ensure they understand how their information will be used and have given you permission to share it with us and our suppliers.

Security of Personal Information Within Our Team

Lawyers are bound by professional secrecy under their professional rules. All team members, including interns, students, secretaries, receptionists, legal assistants, office clerks, and other employees, have signed confidentiality agreements prohibiting disclosure or sharing of information obtained during their duties. Employees access protected information only as necessary to perform their roles.

We have implemented rigorous awareness and prevention procedures to ensure confidentiality and data security align with industry best practices.

Purposes of Collecting Personal Information Through Technological Means

We collect personal information in connection with our work with clients in tax litigation, commercial litigation, mergers and acquisitions, and corporate law. Our purposes include:

• Recruitment and Hiring: Evaluating and selecting candidates for positions within our firm.
• Business Analysis and Optimization: Analyzing and improving internal operations and online platforms.
• Content Personalization: Personalizing our website and providing relevant information based on your preferences.
• Protection of Rights and Safety: Implementing security measures to protect our rights, safety, and those of our clients and affected parties.
• Legal Compliance: Complying with legal requirements and court orders, which may involve disclosing personal information.
• Legal Advice and Services: Using personal information for legal advisory and service provision, ensuring effective communication.
• Legitimate Interests: Using personal information to manage business relationships and improve services.
• Legal Obligations: Fulfilling obligations such as data retention, compliance checks, and suspicious activity screening, including automated identity verification.
• Video Surveillance System: Operating for security and access control, without audio recording, on a closed circuit. Data is stored locally, with older recordings automatically deleted to limit retention.

Written Confirmation

Before sending confidential information, please await our written confirmation that we represent you or act on your behalf. Unsolicited emails from non-clients are not covered by professional secrecy and may be disclosed to third parties without confidentiality guarantees.

Situations of Collection of Personal Information

We may collect personal information when:

• You or your business seeks our legal services or uses our online client platforms.
• You offer or provide services to our firm.
• A third party provides your information in the context of our legal advisory role.
• You communicate with us by phone, email, or other means, or during discussions with our team.
• You fill out a form, submit a request, or browse our website or online platforms.
• You participate in our training courses, events, or register for information.
• We make inquiries to your company, other companies, or third parties like government agencies.

Consequences of Refusing to Provide Personal Information

If you choose not to provide certain personal information, we may be unable to provide the requested service or fulfill an ongoing contract. We will notify you if this occurs.

Limits of Collection

We limit personal information collection to what is necessary for managing our business and establishing relationships, such as opening client files, registering for events, or communicating with our professionals.

Receipt of Confidential Data from External Sources and Disclosure

We seek your consent before collecting or processing confidential data from third-party sources, unless exempted by law. We refrain from sharing your personal data with third parties except to comply with legal obligations, with your express consent, or if our external partners comply with privacy laws.

Consent of Parents or Legal Guardians

Parental or legal guardian consent is required for collecting and using personal information from children under 14. If we become aware of unauthorized collection, we will take steps to delete the information.

Data Management When Using Our Online Platform

TL and its service providers may use cookies to collect information about your internet connection and browsing habits, including IP address, location data, navigation logs, language preferences, browsers, referrals, search terms, and pages visited. See our cookie policy to manage preferences.

Connections to External Sites

Our website may link to third-party sites with separate privacy policies. We are not responsible for their practices and recommend reviewing their policies before providing personal information.

Reasons for Communicating Your Personal Data

We share personal information with third parties only when:

• Necessary for providing legal services.
• You provide explicit consent for external services (e.g., lawyers, consultants, or technology experts).
• External suppliers comply with privacy laws.
• Disclosure is required or permitted by law.

Data Retention

We retain personal data only as long as necessary for the purposes collected, in accordance with legal and professional obligations, followed by secure deletion.

International Transfer of Data

If personal data is transferred outside your country of residence, we ensure compliance with applicable data protection laws and implement appropriate security measures.

Transparency and Openness

We are committed to transparency about our practices. For questions, contact our Privacy Officer or visit our website.

Your Rights and Protections

As a data subject, you have the following rights:

• Access: Request a copy or view your personal information.
• Accuracy: Notify us if your information is inaccurate or has changed.
• Portability: Request transfer of your information in a structured, commonly used, machine-readable format.
• Erasure: Request deletion of your information when no longer necessary or used legitimately.
• Opposition: Request we stop using your information in certain circumstances.
• Complaints: File a complaint with the competent supervisory authority if your rights are violated.

Non-Retaliation

TL will not retaliate against anyone raising legitimate privacy concerns.

Roles and Responsibilities

TL is responsible for communicating this policy and ensuring team compliance. The Privacy Officer oversees data protection, provides training, and liaises with privacy authorities.

Corporate Responsibility

TL assumes responsibility for personal information processing and has appointed a Privacy Officer to ensure compliance with privacy laws.

Contact Details of the Person Responsible for Processing Personal Data

Twin Lisbet Inc.
79 rue de Brésoles,
Montreal, Quebec, Canada, H2Y 1V7
Tel: +1 (514) 993-6920
Fax: +1 (514) 866-0038

Contact Details of the Privacy Officer

Ms. Amal Sebti
info@twinlisbet.ssquarestech.com
Twin Lisbet Inc.
79 rue de Brésoles,
Montreal, Quebec, Canada, H2Y 1V7
Tel: +1 (514) 993-6920