Is your websiteLaw 25 compliant?We check. For free.
12 points checked by hand. A one-page report, delivered within 48 hours.
The Law 25 requirements that affect Quebec websites are now fully in force, having landed in stages between 2022 and 2024. Privacy policy, cookie banner, forms, designated privacy officer: we go through your site point by point and send you a clear report that says what to fix first. Free, no commitment, done by a human.
Get your diagnostic
Two minutes to request it. Twelve points checked on your site. A one-page, prioritized report in your inbox.
What you receive
One page. The 12 points checked, each marked compliant or needs fixing, ranked by priority, with the estimated effort.
No access required
We work from the outside, the way a visitor sees it. Nothing to install, no password to share, no risk to your site.
12 checks.
The ones that matter.
The Law 25 requirements that concretely apply to a website, grouped in six families. Every point is checked by hand on your site.
Privacy policy
Present, easy to find and written for your actual site: what is collected, why, which third parties, retention, rights and how changes are announced.
Cookie banner
We check whether analytics, advertising or profiling trackers fire before the visitor has made a choice, and whether refusing is as easy as accepting.
Forms
Minimal collection and a stated purpose. Answering a contact request is a purpose in itself; a newsletter is a separate one, and it needs its own consent.
Designated privacy officer
Since September 2022, your business must have a person responsible for protecting personal information, with their title and contact details published.
Third-party tools
Analytics, ad pixels, embedded services, chat widgets, externally hosted resources. We check what actually sends data off-site and whether visitors are told about it.
Security and technical signals
Forced HTTPS, secure form submission, a working unsubscribe. These visible checks do not replace an assessment of your internal security measures.
The diagnostic covers the visible and testable parts of your website. It does not assess your company's internal practices: governance, incident register, contracts, data retention. It is a technical and documentary review, not legal advice. For a formal opinion, talk to a lawyer.
The law isn't waitingfor your redesign.
Most Quebec small-business websites were delivered before Law 25 fully came into force. Many have never been rechecked since. Here is why it deserves two minutes of your time.
The penalties are real
Law 25 provides administrative penalties of up to 10 million dollars or 2% of worldwide turnover, and penal fines of up to 25 million or 4%. The CAI handles complaints from citizens, and any visitor to your site can file one.
The law is fully in force
The requirements landed in stages: the person responsible for protecting personal information from September 2022, consent and transparency in September 2023, data portability in September 2024. The adjustment period is over. A site built in 2020 and never revisited has a good chance of falling short.
Getting compliant is doable
For most small-business sites, baseline compliance is a few hours of focused work. You just need to know exactly what to fix, and in what order. That is what the diagnostic gives you.
Your diagnostic in 48h
Three steps, zero commitment.
You fill out the form
2 minutesYour name, your email, your website address. That is all we need. No access to your hosting, nothing to install.
We check 12 points, by hand
Day 1 to 2Privacy policy, cookies, forms, designated officer, third-party tools, security. A person actually reviews your site. This is not an automated scan that produces the same PDF for everyone.
You receive your diagnostic
Within 48hOne clear page: what is compliant, what needs fixing, and where to start. The report is yours. Do whatever you want with it.
And then? Nothing, unless you ask. Fix things yourself with the list, hand it to your agency, or have us take care of the corrections. No pushy follow-ups, no hidden subscription.
Common
questions
What we get asked most about the diagnostic. Hover a question to see the answer.
Is it really free? Why?
+Yes. The diagnostic takes us about an hour. Some of the businesses that receive it ask us to fix what we found, or end up rebuilding their site with us. It is a simple way to show you how we work. You owe nothing, and the report is yours.
What does Law 25 require from a website, in short?
+A clear, accessible privacy policy, a person responsible for protecting personal information whose title and contact details are published, real information and a real choice before analytics, location or profiling technologies activate, forms that collect only what is necessary, and transparency about the third parties that receive personal information. Our full Law 25 guide covers every requirement in detail.
Is this legal advice?
+No. It is a technical and documentary review of your site, done by a web agency that ships sites built to meet the Law 25 requirements that apply to websites. The diagnostic covers what is visible and testable online; it does not assess your internal practices (governance, incident register, contracts, retention). For formal legal advice, talk to a lawyer.
My site was built by another agency. Is that a problem?
+Not at all. We review the site, not the vendor. The report stays between you and us, and you can share it with anyone, including your current agency. Most of the issues we find come from sites delivered before 2023, when nobody was thinking about this.
What exactly do I receive?
+One page. The 12 points we checked, each marked compliant or needs fixing, ranked by priority, with the estimated effort for each fix. Not a 40-page auto-generated report nobody reads.
What happens if my site is not compliant?
+You choose what comes next. Fix it yourself with the list, hand it to your team or your agency, or ask us for a quote. For a simple brochure site, baseline compliance is often a few hours of work.
Are you going to chase me with follow-ups?
+No. We send the diagnostic, we answer your questions if you have any, and that is it. Your contact information is used to deliver the report.
What exactly do you check about cookies?
+Whether trackers fire before the visitor chooses (Google Analytics, Meta pixel, embedded YouTube videos), whether the banner makes refusing as easy as accepting, and whether a refusal is actually respected once given. It is the most commonly failed point, even on recent sites.
For the full list of requirements, read our Law 25 website guide. For a deeper analysis (SEO, conversion, competition), the full digital audit is $495.
Your diagnostic
starts here
The form takes two minutes. The report lands within 48h. What happens next is up to you.