Privacy policy

This site is operated by Inlead RH, an HR consultancy based in Quebec, serving Montreal, the South Shore and Montérégie, and the rest of Quebec remotely.

A person responsible for the protection of personal information has been designated within the company, as the law requires. You can reach them at kim@inleadrh.com or 263-383-5323 with any question about this policy, to exercise your rights, or to make a complaint.

That person approves our personal information practices, handles the requests we receive, and decides how we respond to a confidentiality incident.

There is no account to create on this site, no payment is processed here, and nothing is asked of you to read a page. We collect only what you send us yourself, plus traffic data if you consent to it.

When you complete the form on the Contact page, we collect directly from you:

• your first and last name;
• your email address and phone number;
• how you prefer to be contacted;
• your company name, its headcount and the HR resource it has in house;
• your role in the company;
• the nature of your need and the timeline you are working to;
• whatever details you choose to write in the free text field;
• the date of the submission and the site language at the time.

If you consent to cookies, our measurement tools collect browsing data: pages viewed, referrer, device type, operating system and IP address.

We collect no sensitive information on this site: no health information, no biometric data, no banking details, no social insurance number. Please do not include any in the form's free text field.

The law requires that we have a serious and legitimate interest in collecting information, and that we specify our purposes before doing so. Here are ours, and there are no others.

Form answers are used to:

• contact you in response to your request;
• prepare the discovery call so it addresses your situation rather than generalities;
• assess whether a mandate with us makes sense for your company;
• produce a proposal, where appropriate.

Browsing data, if you accepted it, is used only to understand which pages are useful and how the site is found. It is never matched against form submissions.

The consent we ask for is free, informed and given for specific purposes. You are never required to complete the form in order to read the site, and declining cookies limits nothing about what you can read or do here.

We ask for separate consent for two separate things: submitting the form on one hand, audience measurement on the other. Accepting one does not carry the other.

You may withdraw your consent at any time. For audience measurement, the “Cookies” link at the bottom of every page is enough. For information sent through the form, write to kim@inleadrh.com.

We do not use this site to collect information from people under 14. If you find that such information has reached us, write to us and it will be deleted.

The law requires us to tell you when we use technology capable of identifying, locating or profiling you, and to tell you how to deactivate it. That is what this section is for.

No measurement technology runs before you accept. Until you answer the banner, or if you decline, no analytics script is loaded, no identifier is created and nothing is stored on your device for that purpose. Tracking is therefore off by default.

Two items are stored regardless of your choice, because the site cannot work without them:

• a cookie remembering the display language you chose;
• a value held locally in your browser, remembering your answer to the banner so you are not asked again on every page.

If you accept, two audience measurement tools load: PostHog and Ahrefs Web Analytics. They store an identifier that lets the same browser be recognised from page to page. That identifier does not carry your name and is never matched against form submissions.

To deactivate these technologies: click “Cookies” at the bottom of any page. Withdrawal takes effect immediately. Identifiers already stored by PostHog are erased and the page reloads so scripts held in memory stop running. You can also block or clear cookies from your browser settings.

We think it is more useful to name what we rule out:

• your information is not sold, rented or traded;
• it is not used for targeted advertising, on this site or anywhere else;
• completing the form does not subscribe you to any mailing list and does not place you on any prospecting list;
• we make no decision about you based exclusively on automated processing;
• we build no profile used to score you, to segment you commercially, or to change what you are shown.

Internally, access is limited to the people who need it to answer your request, according to their duties.

Externally, we use service providers to host the site and handle requests. Each receives only what it needs and may not use the information for its own purposes:

• Google (Sheets and Apps Script), to store submissions from the form;
• Resend, to send you the acknowledgement and to send us the notification;
• Vercel, for site hosting;
• PostHog and Ahrefs, for audience measurement, only if you consented.

We may also disclose information where the law requires it, including at the request of a court or a competent authority.

The providers named above hold data on servers located outside Quebec, primarily in the United States. Your information therefore leaves Quebec.

Before such a communication, the law requires us to conduct a privacy impact assessment, to satisfy ourselves that the information will receive adequate protection, and to make the communication subject to a written agreement with the provider.

That assessment and the corresponding agreements are kept internally. The law does not require them to be published, but they can be provided to the Commission d'accès à l'information on request.

Personal information is kept for as long as the purposes it was collected for require. Once those purposes are fulfilled, it is destroyed or anonymised.

Our retention periods are as follows:

• A request that does not lead to a mandate is kept for 24 months from the date we receive it, then deleted from the spreadsheet and from email.
• A request that leads to a mandate is kept for the duration of the business relationship, then for the period our accounting, tax and professional obligations require.
• Audience measurement data is kept for 24 months, after which our tools delete it.

The law requires us to establish rules governing the protection of personal information and to publish their broad outline. Here they are.

• Roles and responsibilities: the designated responsible person approves our practices, handles access and rectification requests, and leads the response to incidents.
• Access: information is available only to people whose duties justify it, and access ends when that ceases to be true.
• Retention and destruction: the periods above apply, after which information is destroyed or anonymised.
• Providers: each provider is assessed before use, receives only what is necessary, and is bound by an agreement.
• Incidents: every confidentiality incident is recorded in a register and assessed against the risk of serious injury it presents.
• Complaint handling: complaints are received at kim@inleadrh.com, examined by the responsible person, and answered in writing.

We review these practices whenever our tools or our ways of working change. The full detail is available on request.

A confidentiality incident is unauthorised access to, use of, or communication of personal information, or its loss.

We keep a register of all incidents, including those presenting no risk. Where an incident presents a risk of serious injury, we promptly notify the Commission d'accès à l'information and the people concerned, and we take reasonable measures to reduce the risk and prevent a recurrence.

Quebec law gives you rights over the information we hold about you:

• Access: obtain confirmation that we hold information about you and receive a copy of it.
• Rectification: have inaccurate, incomplete or ambiguous information corrected, or have information deleted where its collection was not authorised.
• Withdrawal of consent: stop consenting at any time, without having to justify it.
• Cessation of dissemination and de-indexing: ask that dissemination of information stop, or that a hyperlink giving access to it be de-indexed, where the law permits.
• Portability: receive, in a structured and commonly used technological format, the computerised information you provided to us.

To exercise any of these, write to kim@inleadrh.com setting out what you are asking for. We may need to verify your identity before responding, and will ask only for what is strictly necessary to do so.

We answer in writing within 30 days at the latest. If we refuse your request in whole or in part, we will give you the reasons, the provision the refusal relies on, and the recourse available to you together with the time limit for exercising it. No answer within 30 days counts as a refusal.

These requests are free of charge. Reasonable fees may apply for transcribing or reproducing a large volume of information, in which case we will tell you before proceeding.

If our handling of your information, or our answer to your request, does not satisfy you, write first to kim@inleadrh.com. The responsible person will examine the complaint and answer you in writing.

You may at any time contact the Commission d'accès à l'information du Québec, the authority overseeing the application of the law, which can review a decision. Its current contact details are at cai.gouv.qc.ca.

The site is served entirely over HTTPS. The form is validated server-side, and writing to our spreadsheet is protected by a secret key that never leaves our servers and is never sent to your browser. Access to the tools holding your information is restricted and protected by separate credentials.

No security measure is absolute. If an incident occurred, we would apply the process described above.

This policy may change to reflect a change in our tools, our practices or the law. The update date at the top of the page marks the version in force.

If a change affects the nature of the information collected or the purposes it serves, we will ask for your consent again rather than assume the old one still holds.

For any question about this policy, to exercise a right, or to make a complaint: kim@inleadrh.com or 263-383-5323.