1. Who We Are
Nexxa Connect Inc. (“Nexxa,” “we,” “our,” or “us”) is a federally incorporated Canadian programme delivery firm located at 365 Rue Ste-Catherine E, Unit 311, Montréal, Quebec H2X 3X2. We can be reached at info@nexxaconnect.ca or 514-462-9650.
Under Quebec Law 25, the Privacy Officer of Nexxa Connect Inc. is Fatima-Marie Abdullah, Principal. The Privacy Officer is responsible for ensuring compliance with this policy and applicable privacy legislation and can be contacted at info@nexxaconnect.ca.
2. Scope of This Policy
This Privacy Policy applies to personal information collected through:
• Our website at nexxaconnect.ca and any associated subdomains
• Our Subcontractor Intake Portal at nexxaconnect.ca/network-partners
• Our Inspector Intake Portal at nexxaconnect.ca/portal/inspectors
• Our Contact Form at nexxaconnect.ca/contact
• Email, telephone, and other direct communications with our office
This policy applies regardless of where you are located. If you are a resident of Quebec, your rights under Quebec Law 25 apply in full. If you are located elsewhere in Canada, your rights under PIPEDA apply.
3. What Personal Information We Collect
We collect only the personal information that is necessary for the purposes described in this policy. We do not collect information beyond what is reasonably required.
3.1 — Information You Provide Directly
Through our intake portals and contact form you may provide:
• Full legal name, business name, and title
• Business email address and telephone number
• Province(s) of operation or coverage
• Professional designation, designation number, and issuing association (inspectors)
• Insurance certificate details including policy number, coverage amount, expiry date, and insurer name
• WCB, WSIB, or CNESST account number and clearance status
• Canada Revenue Agency Business Number
• Brief description of professional experience and capabilities
• Banking details provided for EFT payment purposes (collected only after a formal engagement agreement is signed)
3.2 — Information Collected Automatically
When you visit our website we may collect certain technical information automatically, including:
• IP address and approximate geographic location at the city level
• Browser type and version
• Pages visited and time spent on pages
• Referring website address
COOKIE NOTICE — QUEBEC LAW 25: Our website uses cookies and analytics tools (Framer analytics). Under Quebec Law 25, no tracking technology may activate without your explicit prior consent. On your first visit you will be presented with a cookie consent banner. You may accept all, accept only essential cookies, or decline non-essential cookies. Essential cookies that are strictly necessary for the website to function do not require consent. All other cookies require your explicit opt-in. You may withdraw consent at any time through your browser settings.
4. Why We Collect Personal Information
We collect personal information only for specific, explicit, and legitimate purposes. We do not use your information for purposes that are incompatible with those disclosed at collection.
5. Legal Basis for Processing
Under Quebec Law 25 and PIPEDA, we collect, use, and disclose personal information based on the following:
• Consent: Where you have explicitly provided consent through our intake forms or direct communications. You may withdraw consent at any time by contacting us at info@nexxaconnect.ca. Withdrawal of consent may affect our ability to process your application or maintain an engagement.
• Contractual Necessity: Where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract. This includes processing information to evaluate applications, administer engagements, and process payments.
• Legal Obligation: Where we are required by law to collect or retain certain information, including CRA tax reporting obligations (T4A) and corporate record-keeping requirements.
• Legitimate Interests: Where processing is necessary for our legitimate business interests and those interests are not overridden by your privacy rights. This includes security monitoring and fraud prevention.
6. How We Share Personal Information
We do not sell personal information. We do not share personal information with third parties for marketing purposes. We may share information in the following limited circumstances:
6.1 — Service Providers
We use the following third-party platforms that may process personal information on our behalf as data processors. Each is governed by a written data processing agreement or their standard terms of service:
• HubSpot Inc. (CRM platform) — servers located in the United States. Data transfer protected under HubSpot's standard contractual clauses.
• QuickBooks Online by Intuit Canada Ltd. — financial records and T4A generation.
• Zapier Inc. — workflow automation connecting our platforms. Data in transit only.
• PandaDoc Inc. — electronic document signing and storage.
• Anthropic PBC — AI processing for automated document assembly and bid analysis. No personal information is sent to the Anthropic API without necessity for the specific automated function.
• Google Workspace (Google LLC) — email, document storage, and calendar.
• Framer Inc. — website hosting and analytics.
• Cal.com — appointment scheduling.
• Bank of Montreal — banking transactions.
CROSS-BORDER TRANSFERS — LAW 25: Several of our service providers process data in the United States or other countries outside Quebec. Under Quebec Law 25 we are required to conduct a Privacy Impact Assessment (PIA) before transferring personal information outside Quebec and to ensure that adequate protection exists. We have conducted PIAs for our primary data processors and confirmed that adequate contractual safeguards are in place. A summary of our cross-border transfer assessments is available upon written request to info@nexxaconnect.ca.
6.2 — Government and Regulatory Authorities
We may disclose personal information to the Canada Revenue Agency, Revenu Québec, or other government authorities where required by law, including for T4A reporting, GST/HST/QST compliance, or in response to a lawful demand or court order.
6.3 — Business Transactions
If Nexxa Connect Inc. is involved in a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction. We will notify affected individuals before their personal information is transferred and becomes subject to a different privacy policy.
7. Data Retention
We retain personal information only for as long as necessary to fulfill the purposes for which it was collected or as required by law.
8. Your Rights Under Quebec Law 25 and PIPEDA
You have the following rights regarding your personal information. To exercise any of these rights contact our Privacy Officer at info@nexxaconnect.ca. We will respond within 30 days of receiving a written request.
9. Security
We implement reasonable administrative, technical, and physical security measures to protect personal information against loss, theft, unauthorized access, disclosure, copying, use, or modification. These measures include:
• Role-based access controls limiting who within our organization can access personal information
• Encrypted transmission of data via HTTPS across our website and portals
• Use of reputable third-party platforms with their own security certifications
• Secure deletion of data when retention periods expire
No transmission of information over the internet or electronic storage is completely secure. While we use commercially reasonable security measures we cannot guarantee absolute security.
10. Privacy Breach Notification
Under Quebec Law 25 and PIPEDA, if we experience a privacy breach that poses a risk of serious injury to individuals, we will:
• Notify the Commission d’accès à l’information (CAI) as soon as reasonably possible
• Notify affected individuals whose information was involved in the breach
• Keep a register of all confidentiality incidents as required by Law 25
If you believe your personal information held by Nexxa Connect Inc. may have been compromised please contact us immediately at info@nexxaconnect.ca.
11. Children's Privacy
Our website and portals are not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a minor please contact us immediately and we will delete it.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will post the updated policy on our website with a revised effective date. Material changes will be communicated to individuals whose information we hold by email where we have that contact information. Your continued use of our website or portals after a policy update constitutes acceptance of the updated terms.
13. Contact Us
For questions, concerns, or to exercise your privacy rights, contact our Privacy Officer:
Privacy Officer: Fatima-Marie Abdullah, Principal
Nexxa Connect Inc.
365 Rue Ste-Catherine E, Unit 311, Montréal, Quebec H2X 3X2
Email: info@nexxaconnect.ca
Phone: 514-462-9650
Commission d’accès à l’information (CAI): cai.gouv.qc.ca · 1-888-528-7741
Office of the Privacy Commissioner of Canada: priv.gc.ca · 1-800-282-1376
1. Who We Are
Nexxa Connect Inc. (“Nexxa,” “we,” “our,” or “us”) is a federally incorporated Canadian programme delivery firm located at 365 Rue Ste-Catherine E, Unit 311, Montréal, Quebec H2X 3X2. We can be reached at info@nexxaconnect.ca or 514-462-9650.
Under Quebec Law 25, the Privacy Officer of Nexxa Connect Inc. is Fatima-Marie Abdullah, Principal. The Privacy Officer is responsible for ensuring compliance with this policy and applicable privacy legislation and can be contacted at info@nexxaconnect.ca.
2. Scope of This Policy
This Privacy Policy applies to personal information collected through:
• Our website at nexxaconnect.ca and any associated subdomains
• Our Subcontractor Intake Portal at nexxaconnect.ca/network-partners
• Our Inspector Intake Portal at nexxaconnect.ca/portal/inspectors
• Our Contact Form at nexxaconnect.ca/contact
• Email, telephone, and other direct communications with our office
This policy applies regardless of where you are located. If you are a resident of Quebec, your rights under Quebec Law 25 apply in full. If you are located elsewhere in Canada, your rights under PIPEDA apply.
3. What Personal Information We Collect
We collect only the personal information that is necessary for the purposes described in this policy. We do not collect information beyond what is reasonably required.
3.1 — Information You Provide Directly
Through our intake portals and contact form you may provide:
• Full legal name, business name, and title
• Business email address and telephone number
• Province(s) of operation or coverage
• Professional designation, designation number, and issuing association (inspectors)
• Insurance certificate details including policy number, coverage amount, expiry date, and insurer name
• WCB, WSIB, or CNESST account number and clearance status
• Canada Revenue Agency Business Number
• Brief description of professional experience and capabilities
• Banking details provided for EFT payment purposes (collected only after a formal engagement agreement is signed)
3.2 — Information Collected Automatically
When you visit our website we may collect certain technical information automatically, including:
• IP address and approximate geographic location at the city level
• Browser type and version
• Pages visited and time spent on pages
• Referring website address
COOKIE NOTICE — QUEBEC LAW 25: Our website uses cookies and analytics tools (Framer analytics). Under Quebec Law 25, no tracking technology may activate without your explicit prior consent. On your first visit you will be presented with a cookie consent banner. You may accept all, accept only essential cookies, or decline non-essential cookies. Essential cookies that are strictly necessary for the website to function do not require consent. All other cookies require your explicit opt-in. You may withdraw consent at any time through your browser settings.
4. Why We Collect Personal Information
We collect personal information only for specific, explicit, and legitimate purposes. We do not use your information for purposes that are incompatible with those disclosed at collection.
5. Legal Basis for Processing
Under Quebec Law 25 and PIPEDA, we collect, use, and disclose personal information based on the following:
• Consent: Where you have explicitly provided consent through our intake forms or direct communications. You may withdraw consent at any time by contacting us at info@nexxaconnect.ca. Withdrawal of consent may affect our ability to process your application or maintain an engagement.
• Contractual Necessity: Where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract. This includes processing information to evaluate applications, administer engagements, and process payments.
• Legal Obligation: Where we are required by law to collect or retain certain information, including CRA tax reporting obligations (T4A) and corporate record-keeping requirements.
• Legitimate Interests: Where processing is necessary for our legitimate business interests and those interests are not overridden by your privacy rights. This includes security monitoring and fraud prevention.
6. How We Share Personal Information
We do not sell personal information. We do not share personal information with third parties for marketing purposes. We may share information in the following limited circumstances:
6.1 — Service Providers
We use the following third-party platforms that may process personal information on our behalf as data processors. Each is governed by a written data processing agreement or their standard terms of service:
• HubSpot Inc. (CRM platform) — servers located in the United States. Data transfer protected under HubSpot's standard contractual clauses.
• QuickBooks Online by Intuit Canada Ltd. — financial records and T4A generation.
• Zapier Inc. — workflow automation connecting our platforms. Data in transit only.
• PandaDoc Inc. — electronic document signing and storage.
• Anthropic PBC — AI processing for automated document assembly and bid analysis. No personal information is sent to the Anthropic API without necessity for the specific automated function.
• Google Workspace (Google LLC) — email, document storage, and calendar.
• Framer Inc. — website hosting and analytics.
• Cal.com — appointment scheduling.
• Bank of Montreal — banking transactions.
CROSS-BORDER TRANSFERS — LAW 25: Several of our service providers process data in the United States or other countries outside Quebec. Under Quebec Law 25 we are required to conduct a Privacy Impact Assessment (PIA) before transferring personal information outside Quebec and to ensure that adequate protection exists. We have conducted PIAs for our primary data processors and confirmed that adequate contractual safeguards are in place. A summary of our cross-border transfer assessments is available upon written request to info@nexxaconnect.ca.
6.2 — Government and Regulatory Authorities
We may disclose personal information to the Canada Revenue Agency, Revenu Québec, or other government authorities where required by law, including for T4A reporting, GST/HST/QST compliance, or in response to a lawful demand or court order.
6.3 — Business Transactions
If Nexxa Connect Inc. is involved in a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction. We will notify affected individuals before their personal information is transferred and becomes subject to a different privacy policy.
7. Data Retention
We retain personal information only for as long as necessary to fulfill the purposes for which it was collected or as required by law.
8. Your Rights Under Quebec Law 25 and PIPEDA
You have the following rights regarding your personal information. To exercise any of these rights contact our Privacy Officer at info@nexxaconnect.ca. We will respond within 30 days of receiving a written request.
9. Security
We implement reasonable administrative, technical, and physical security measures to protect personal information against loss, theft, unauthorized access, disclosure, copying, use, or modification. These measures include:
• Role-based access controls limiting who within our organization can access personal information
• Encrypted transmission of data via HTTPS across our website and portals
• Use of reputable third-party platforms with their own security certifications
• Secure deletion of data when retention periods expire
No transmission of information over the internet or electronic storage is completely secure. While we use commercially reasonable security measures we cannot guarantee absolute security.
10. Privacy Breach Notification
Under Quebec Law 25 and PIPEDA, if we experience a privacy breach that poses a risk of serious injury to individuals, we will:
• Notify the Commission d’accès à l’information (CAI) as soon as reasonably possible
• Notify affected individuals whose information was involved in the breach
• Keep a register of all confidentiality incidents as required by Law 25
If you believe your personal information held by Nexxa Connect Inc. may have been compromised please contact us immediately at info@nexxaconnect.ca.
11. Children's Privacy
Our website and portals are not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a minor please contact us immediately and we will delete it.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will post the updated policy on our website with a revised effective date. Material changes will be communicated to individuals whose information we hold by email where we have that contact information. Your continued use of our website or portals after a policy update constitutes acceptance of the updated terms.
13. Contact Us
For questions, concerns, or to exercise your privacy rights, contact our Privacy Officer:
Privacy Officer: Fatima-Marie Abdullah, Principal
Nexxa Connect Inc.
365 Rue Ste-Catherine E, Unit 311, Montréal, Quebec H2X 3X2
Email: info@nexxaconnect.ca
Phone: 514-462-9650
Commission d’accès à l’information (CAI): cai.gouv.qc.ca · 1-888-528-7741
Office of the Privacy Commissioner of Canada: priv.gc.ca · 1-800-282-1376