2Toits

Exercise my rights (Law 25)

Last updated: July 9, 2026

This is the English version. The authoritative version is French, as required by Quebec's Charter of the French Language (Bill 96). Read the French version.

1. Your 6 rights under Law 25

RightDescriptionResponse time
Access (art. 27)Obtain a copy of the personal information we hold about you.30 calendar days
Rectification (art. 28)Have inaccurate, incomplete, or ambiguous information corrected.30 calendar days
Deletion / de-indexation (art. 28.1)Request deletion or de-indexation of your personal data.Anonymization ≤ 24 h, purge at 90 days
Portability (art. 27.1)Receive your data in a structured format (JSON).30 calendar days
Withdrawal of consentWithdraw consent to push notifications or any consent-based processing.Immediate
Opposition to automated processing (art. 12.1)Object to any decision based exclusively on automated processing (not applicable: 2Toits does not make such decisions).30 calendar days

2. How to exercise your rights

Law 25 requests are free. The simplest path is through the app, but email also works if you no longer have access to it.

Method 1 — From the app (recommended)

Open the 2Toits app → Profile → Exercise my rights (Law 25).

Method 2 — By email

Send an email from the address associated with your 2Toits account:

privacy@2toits.ca

3. Email templates

Access request

Subject: Law 25 — Request for access to my personal information

Hello, I wish to exercise my right of access (art. 27 Law 25) to the personal information that 2Toits holds about me. My account email address: [your email] Thank you.

Deletion request

Subject: Law 25 — Request for deletion of my personal information

Hello, I request the deletion of my account and personal information (art. 28.1 Law 25). My account email address: [your email] Thank you.

4. Commission d'accès à l'information (CAI)

If you believe your rights have not been respected, you may file a complaint with the CAI:

5. Exporting your data

From the app, you can request a structured export of your personal data. Certified PDF reports serve a different purpose: reading, archiving, and evidence, not raw data portability.

6. Office of the Privacy Commissioner of Canada

7. Contact Privacy Officer

RPRP function2Toits (sole proprietor, Quebec, Canada)
privacy@2toits.ca