Frequently asked questions
Does this package make me compliant with Law 25?
No, not on its own, and nobody can honestly promise that. The obligations remain the business's. We audit, document and prepare the technical items of the signed scope, and you keep a clear file to show.
Does Law 25 apply to a small business?
Yes. It covers private businesses that collect personal information, with no SME exemption (secondary sources: RCGT, SiLaw). A simple contact form or an analytics tool is enough to make you concerned.
How does the one-hour consultation work?
After payment you book a one-hour Google Meet: we secure access first, then run the complete audit. In the following days, under a signed mandate, we put in place the Law 25 layer (privacy policy draft, cookie banner and consent configured, privacy officer page, incident register template). The complete written report is delivered within 7 business days after the consultation.
Who must attend the consultation?
The company representative (or HR) and the person who manages the website, whether an employee or a contractor. Both are needed: one decides, the other provides access to the site.
What access do you need and how is it protected?
Temporary admin access to your site and, if possible, Google Search Console. We apply least privilege, multi-factor authentication and sharing through a password manager; no password travels by email or chat. Access is revoked at the end of the mandate, under a signed mandate and NDA.
What exactly is in the complete report?
A written, prioritized report: security, indexing (Google Search Console, sitemap, robots, noindex, crawl errors), CMS, plugin and PHP versions, SSL and headers, backups, and the Law 25 layer (cookies, policy, officer, incident register).
What if my site has problems?
We list them in the report, by priority. A second meeting, free of charge, lets us discuss the improvements openly. A rebuild or redesign is a separate written quote before any work.
When will I get the report, and what do you guarantee?
If the complete report is not delivered within 7 business days after the consultation, we refund the $1,499 by the same payment method, within 10 business days.
Is the $1,499 price final?
Yes, a fixed CA$1,499 for the one-hour consultation, the complete audit, the Law 25 layer put in place under a signed mandate, and the complete written report. Rebuilds, redesigns or the annual maintenance plan are quoted separately.
Who is the person in charge of protecting personal information?
A person designated inside your business. Their title and contact details must be published on the business website (source: CAI). We prepare the page that displays it; choosing the person is up to you.
What do you do about cookies and consent?
We set up a consent banner under a signed mandate. Identification, location or profiling technologies must be off by default, with opt-in (source: CAI). We configure the site accordingly under your scope.
Can you help if I already had a security incident?
The package includes a confidentiality incident register template. When there is a risk of serious harm, the business must notify the CAI and the affected people (source: CAI). For an ongoing incident, call 1 (888) 711-9428; incident analysis is by quote.
