Privacy Policy

Facultas Advisory Inc. (Facultas Conseils Inc. in French)

Last updated: October 31, 2026

1. Who We Are and How to Contact Us

Facultas Advisory Inc. operates the website facultas-risk.com.

Hind Abdo is the Person in Charge of the Protection of Personal Information.

Email: info@facultas-risk.com

Address: 1250 René-Lévesque Boulevard West, Suite 2200, Montréal, Québec H3B 4W8, Canada.

You may contact us at this address with any questions concerning your personal information.

2. Personal Information We Collect and How We Use It

Our website does not have a contact form. When you contact us by email, we receive your email address, your message, and any information you choose to provide. We use this information to respond to your enquiry, assess a potential collaboration, or provide our services.

Independent consultants may also send us their CVs, information about their professional experience, or a link to their LinkedIn profile. We use this information to assess potential collaboration opportunities.

We encourage you not to send sensitive personal information or confidential documents when making an initial enquiry.

3. Website Analytics and Privacy Preferences

We use Umami to measure traffic to our website. Website analytics are optional and disabled by default. You may enable or disable them at any time using the “Privacy Preferences” link at the bottom of each page.

If you enable analytics, Umami collects information such as pages visited, session data, browser information, and device type. Your IP address is processed to generate a session identifier and estimate your approximate location. We use this information solely to understand website traffic and do not seek to identify visitors personally.

Umami does not use cookies for this tracking. We do not use targeted advertising, session recordings, or heatmaps. Your preference is stored locally in your browser.

Analytics data is stored in Frankfurt, Germany, and retained for six months in Umami’s active environment. Certain technical processing activities may take place in other countries through Umami’s service providers.

Declining website analytics does not affect your ability to use the website.

4. Service Providers and Data Storage

We use the following service providers:

  • Microsoft 365: For business email and document storage, including CVs and client engagement records. Data for our Exchange Online, OneDrive, and SharePoint services is stored in Canada, potentially outside Québec.
  • IONOS: For website hosting. IONOS processes certain technical connection data, including IP addresses, to ensure the operation and security of the website. Some technical data may be processed outside Québec and Canada.
  • Umami: For the optional website analytics described in Section 3.

We restrict access to personal information to individuals and service providers who need it for the stated purposes. We do not disclose personal information for other purposes unless permitted or required by law.

5. Retention and Deletion

We retain personal information for as long as necessary for the purposes for which it is used or to comply with our legal obligations.

Our main retention periods are as follows:

  • Enquiries that do not result in an engagement: Up to 12 months after the last substantive communication.
  • Consultant CVs and profiles: Up to 24 months after receipt, the last substantive communication, or the last engagement, whichever is later.
  • Contracts, invoices, and accounting records: Seven years after the end of the last relevant fiscal year, or longer if required by law.
  • Other engagement documents: For as long as necessary to carry out and follow up on the engagement and comply with applicable obligations.

Personal information that is no longer required is securely deleted, unless a legal obligation, dispute, or other legitimate reason requires its continued retention. Copies held by our service providers are also subject to their technical deletion cycles.

6. Protection of Personal Information

We apply security measures appropriate to our activities, including restricted access and multi-factor authentication.

We limit the collection and use of personal information to what is necessary and periodically review the information we retain.

7. Your Rights, Requests, and Complaints

Subject to applicable legal requirements, you may request access to your personal information, its correction, or its deletion where applicable. You may also withdraw your consent to certain uses and request that information be provided in a structured technological format where required by law.

To exercise your rights or submit a complaint, please contact Hind Abdo at info@facultas-risk.com.

We may need to verify your identity before processing your request. We respond in writing to access and correction requests within 30 days of receipt.

Privacy complaints are reviewed by the Person in Charge of the Protection of Personal Information. We acknowledge receipt, assess the circumstances, and provide a written response.

If you are dissatisfied with our response, you may contact the Commission d’accès à l’information du Québec. If we refuse an access or correction request, we will explain the reasons and provide information about available remedies.

8. Changes to This Policy

We may update this policy if our practices or legal obligations change. The current version will be published on this page, with appropriate notice of any changes.