Privacy policy

Who is responsible

The practice of Me Clemente Monterosso, lawyer, member of the Barreau du Québec, operates the site clementemonterosso.com and is responsible for the personal information collected through it.

The practice is subject to Quebec’s Act respecting the protection of personal information in the private sector, as well as to the Code of professional conduct of lawyers, which imposes professional secrecy.

What we collect

This site collects only what you choose to give it, and what is technically necessary for it to function.

• The contact form: name, phone number, email address, and the content of your message.
• Phone calls: your number is displayed on screen; no call is recorded.
• Technical navigation data: IP address, browser type and pages visited, processed server-side by the host, for the security and proper operation of the site.
• Audience measurement, if you consent to it: the pages visited, the approximate region derived from your IP address, the type of browser and device, and where the visit came from; never your name, your phone number or the content of your message.

Why we use it

Your information is used only to respond to your request, to call you back, to arrange an appointment and, where applicable, to open a file. It is never used for commercial solicitation, and it is never sold.

What not to put in writing

The contact form is not a channel protected by professional secrecy before a mandate is opened. Do not describe the facts alleged against you, and do not attach any document: that conversation takes place by phone or in person.

The form does not accept attachments, in any case.

Cookies and consent

The site uses a consent manager, Silktide, to govern the use of cookies.

On first visit, only technologies that are strictly necessary for the site to function are active.

Before any consent, the only information placed on your device is the record of your consent choice, kept by your browser (localStorage); this is what keeps the banner from reappearing on every visit.

One optional category is offered, “Analytics.” Consenting to it activates Google Analytics (GA4), the site’s audience measurement tool.

If you decline, or make no choice at all, no request is sent to Google and no measurement cookie is placed on your device.

If you consent, two cookies are placed, named _ga and _ga_Q0XF064WBD. They hold a random identifier that makes it possible to tell a returning visitor apart, without revealing their identity. They are kept for at most four hundred (400) days, the maximum browsers allow.

Withdrawing your consent stops the measurement and deletes both cookies. Measurement of interactions with the contact form is deliberately turned off: the practice is never told that someone has begun writing a message, only that a message has arrived.

Consent can be withdrawn at any time through the bubble at the bottom of the screen. The site includes no interactive map, no social network embed, and no advertising pixel.

Its typefaces are served from this site: no request is sent to an outside provider to obtain them. The site does, however, load its consent manager’s code from a public code distribution network (jsDelivr), and this sends the visitor’s IP address to that provider as soon as the page opens, before any consent.

Disclosure to third parties

Your information is not disclosed to anyone, except to the following providers, who are bound by confidentiality obligations, or where the law requires it:

• Netlify hosts the site. Located in the United States.
• Amazon Simple Email Service delivers the form’s message to the practice. Located in Canada (Montreal region).
• Cloudflare operates the domain’s name servers. It does not receive the content of your message.
• Google (Google Analytics) measures site traffic, only if you consent to it. Located in the United States. It never receives the content of your message.

The content of a message sent through the form therefore passes through a US host, without being stored there, before being delivered by the Canadian email service; this is taken into account in the assessment of factors relating to transfers outside Quebec required by law.

The data sent to Google Analytics, when you consent to it, also passes through servers located in the United States; this is likewise taken into account in the same assessment.

Retention

Messages received through the form that do not lead to a mandate are deleted twelve (12) months after the last exchange. Once a mandate is opened, the information is placed in the client file and kept in accordance with the record-retention rules of the Barreau du Québec.

At Google, the event data generated by audience measurement is kept for two (2) months. The identifiers that make it possible to tell one visitor from another are kept for fourteen (14) months from the last visit.

Security

The site is served over an encrypted connection (HTTPS). Access to messages is limited to people at the practice who need it.

Any confidentiality incident presenting a risk of serious harm is recorded and reported to the Commission d’accès à l’information, as required by law.

Your rights

You may at any time request access to the information the practice holds about you, request that it be corrected, withdraw your consent, or request that its disclosure cease. The practice responds within thirty days.

Person in charge of the protection of personal information

Under the Act, this function is held by the person with the highest authority within the enterprise, which here is Me Clemente Monterosso himself.

He can be reached at 514 804-6277 or through the site’s contact form. In case of disagreement, you may contact the Commission d’accès à l’information du Québec.

Changes and contact

This policy may be updated; the date at the top of the page indicates the version in effect. For any question, write to the practice through the form, or call 514 804-6277.