The verdict in three sentences
For a Montreal accounting firm, the website collects personal information from the first form, and Quebec's Law 25 has imposed specific duties since 2023 and 2024: a designated person in charge, a privacy policy in plain language, incident management and consent. Your web provider must deliver a site that meets these rules by design, targets WCAG 2.1 or 2.2 AA, and offers French as the Charter of the French Language requires, even if most of your clients are English-speaking. Put these points in writing in the quote, with verifiable evidence before launch.
Which rules frame an accounting firm's website in Montreal?
Quebec Law 25. The Act to modernize legislative provisions as regards the protection of personal information amended Quebec's private sector privacy law. In general terms: a person in charge of the protection of personal information (by default the person with the highest authority in the business) whose title and contact details are published on the site, a privacy policy written in clear and simple terms, manifest and specific consent, the highest level of confidentiality by default for products and services offered to the public, a privacy impact assessment before personal information is communicated outside Quebec, and a register of confidentiality incidents, with notice to the Commission d'accès à l'information (CAI) when an incident presents a risk of serious injury.
PIPEDA. The federal law can apply to some interprovincial or international activity: have your situation checked.
CASL. Tax newsletters and filing season reminders need consent, sender identification and a simple unsubscribe.
Charter of the French Language. Since Bill 96, the requirement to make French available clearly applies to commercial websites: an English-only firm still needs a French version.
Professional ethics. The CPA Order's code of ethics in Quebec frames advertising: no false or misleading statements, care with promises about tax refunds. Have your service pages reviewed.
Accessibility. The government standard SGQRI 008 targets the public administration. For a private firm, WCAG 2.1 AA, ideally 2.2 AA, remains the prudent benchmark, especially with older or retired clients. This is not legal advice.
What exactly should you require from your web provider?
This table turns those principles into contract requirements.
| Requirement | What the provider must deliver | Evidence to ask for before launch |
|---|---|---|
| Privacy policy | Dedicated page, plain language, name or title of the person in charge and contact details | Visible link in the footer and next to every form |
| Cookies | Banner where rejecting is as easy as accepting, no pre-ticked boxes, analytics blocked before consent | Screenshots before and after rejection |
| Contact and intake forms | Minimal fields, no SIN or notices of assessment through an open form, defined retention period | Field list and where messages go |
| Tax document upload | Encrypted secure portal, per-client access, access log (on quote) | Data flow diagram |
| Hosting and subcontractors | Declared hosting location, subcontractor list, written agreement on handling personal information | Signed agreement, and a privacy impact assessment if hosted outside Quebec |
| Confidentiality incidents | Commitment to notify the firm without delay, technical logs kept | Clause in the contract |
| Accessibility | WCAG 2.1 or 2.2 AA, contrast, keyboard navigation, labelled forms | Audit report and accessibility statement |
| Language | Complete French version, English alongside | Page-by-page check |
The most sensitive point is the form. A firm receives social insurance numbers, T4 and RL-1 slips and notices of assessment. These documents should never travel through a standard contact form or unencrypted email: a secure upload portal, or your existing tax software, is the right route. At Kolonell that portal is integration on quote. See the details of our international website offer.
What budget should you plan in 2026?
2026 ballpark based on public rate pages and typical agency quotes in Montreal, converted from CAD at about 0.72 USD (approximate).
| Item | Montreal agency (CAD) | Approx. equivalent (USD) | Kolonell (USD) |
|---|---|---|---|
| Firm website, 8 to 15 pages | 8,000 to 25,000 | 5,800 to 18,000 | Starter 2,900 or Growth 4,900 |
| French and English site | Often +20 to 40% | Varies | Premium 8,900 (the multilingual tier, languages set in the quote) |
| Consent banner and setup | 500 to 2,000 | 360 to 1,440 | Included in the site setup |
| Privacy policy drafted by a lawyer | 1,000 to 3,000 | 720 to 2,150 | Third-party cost, from your legal advisor |
| Independent accessibility audit | 1,500 to 5,000 | 1,080 to 3,600 | Third-party cost, independent auditor |
| Secure upload portal | 5,000 to 20,000 | 3,600 to 14,400 | On quote |
Need a professional website?
Kolonell builds websites that attract clients, optimized for the Sénégalese market. Free quote in 2 minutes.
The Kolonell price includes a project manager reachable in your time zone, native English or French copywriting, delivery in 3 to 4 weeks and 3 months of support. The legal content of your policy remains your responsibility and your advisor's.
Mini case study
*Illustrative example.* Isabelle, partner in a fictional 9-person firm on the Plateau, serves small businesses and self-employed clients. Her old site sends forms to a shared inbox and loads Google Analytics without consent. She picks Kolonell Premium at USD 8,900 for a French and English site, adds a policy drafted by her lawyer at CAD 1,800 (about USD 1,300, third-party cost) and an accessibility audit at CAD 2,500 (about USD 1,800, third-party cost). Total: USD 12,000. During filing season, up to April 30, the firm handles about 400 files; if sorting email attachments took 6 minutes per file, that is 40 hours recovered every spring once the secure portal (on quote) is live.
FAQ
Does Law 25 apply to a small 3-person firm?
Yes, the law covers any private business that collects personal information, with no size threshold. A 3-person firm must also designate a person in charge and publish a privacy policy.
Can I host my site in the United States?
It is possible, but communicating personal information outside Quebec requires a privacy impact assessment and adequate protection. For a brochure site with no sensitive data the stakes are moderate; for a portal holding 400 tax files they are high.
Does my site really have to be in French?
For a commercial website in Quebec, French must be available. An English-only site exposes the firm to complaints; at Kolonell a French and English site falls under Premium (USD 8,900).
Which accessibility standard should I target?
Aim for WCAG 2.1 AA at minimum and 2.2 AA where possible. An independent audit usually costs CAD 1,500 to 5,000 depending on the number of pages.
Can the provider write my privacy policy?
It can supply the structure and integrate it, but the content must reflect your actual practices and be validated by your advisor. Expect CAD 1,000 to 3,000 for legal drafting.
To price your project with these requirements built in, request a free quote.
Let's scope your project. Send us your pages, forms and languages, and we will propose a compliant scope, a fixed price and a 3 to 4 week timeline. See the international offer or request a free quote: detailed reply within 48 hours.
Mohamed Bah
Fondateur, Kolonell
Passionate about digital and entrepreneurship in Africa, Mohamed has been helping Sénégalese businesses with their digital transformation since 2020. Founder of Kolonell, he believes every SME deserves a professional and accessible online présence.
