Canada

PIPEDA and Quebec Law 25, for small businesses.

Canada asks for meaningful consent, and the Quebec regulator expects tracking to stay off until the visitor turns it on. Privacy Consent asks Quebec visitors for consent before tracking starts.

Create your consent banner Generate Privacy Policy
PIPEDAQuebec Law 25

By law

When PIPEDA and Quebec Law 25 apply to your business.

The Personal Information Protection and Electronic Documents Act (PIPEDA) covers commercial activities across Canada, and Quebec Law 25 adds stricter rules for Quebec. Each rule depends on what your website collects.

When PIPEDA and Quebec Law 25 apply to a business, and what the business needs
Your businessWhat you needWhy
Collects personal information in the course of commercial activities in Canada Privacy PolicyOpt-out link PIPEDA section 4 covers personal information collected, used or disclosed in commercial activities. Principle 4.8 asks for privacy information that is readily available.
Uses online behavioral advertising (Meta Pixel, Google Ads remarketing) Opt-out link The Privacy Commissioner of Canada accepts opt-out consent for behavioral advertising only with clear notice and an opt-out that is easy, immediate and lasting.
Has customers or visitors in Quebec Privacy PolicyConsent banner Quebec Law 25 asks for a Privacy Policy on the website (section 8.2), and the Quebec regulator expects tracking that identifies, locates or profiles people to stay off by default (section 8.1).
Collects sensitive information Consent banner PIPEDA (Principle 4.3.6) and the Quebec Private Sector Act generally ask for express consent for sensitive information.

What PIPEDA and Law 25 ask, and the TermsFeed product for each part.

These rules apply to a website that collects personal information in Canada. TermsFeed products help with all 6, and your team answers each access request.

PIPEDA and Quebec Law 25 requirements for a website, with the TermsFeed product for each
What the law asksWhere it comes fromHow TermsFeed helps
Make information about your privacy practices readily available PIPEDA, Principle 4.8
  • Privacy Policy Generator
Publish a Privacy Policy in clear and simple terms on your website Quebec Private Sector Act, section 8.2
  • Privacy Policy Generator
Keep tracking that identifies, locates or profiles people off until they turn it on Quebec Private Sector Act, section 8.1. Quebec regulator (CAI) Guidelines 2023-1
  • Privacy Consent
Get consent people understand, with express consent for sensitive information PIPEDA, section 6.1 and Principle 4.3.6
  • Privacy Consent
Offer an easy opt-out from behavioral advertising that takes effect at once Privacy Commissioner of Canada guidelines on online behavioral advertising
  • Privacy Consent
Answer requests for access to personal information PIPEDA, Principle 4.9
  • Handled by your team

How Privacy Consent handles visitors from Canada.

TermsFeed Privacy Consent treats Quebec as an opt-in region and, with Standard consent logic from the Starter plan, gives the rest of Canada the opt-out model. For a business in Quebec, the banner asks visitors from all of Canada first.

  • Tracking off in Quebec

    Privacy Consent asks Quebec visitors for consent before non-essential vendors load, so tracking stays off until the visitor agrees.

  • English and French

    The consent banner speaks English and French among 21 languages, and picks the language each visitor uses.

  • An opt-out that lasts

    The Preferences Center lets each visitor turn off advertising at once, and Privacy Consent saves the choice for later visits.

  • A record of every choice

    Privacy Consent keeps a dated record of every consent choice for a regulator or a client who asks, with CSV export on every plan.

  • Embeds that wait for consent

    Privacy Consent asks for consent before loading embedded content that collects data, such as YouTube videos and reCAPTCHA, with a note on embeds from vendors that process sensitive data.

  • A banner that matches your brand

    Choose a banner style and light or dark colors on every plan, or match your brand colors from the Starter plan.

What the laws ask

What privacy laws expect, and how TermsFeed covers it.

PIPEDA covers commercial activities across Canada, and Quebec Law 25 adds penalties of its own. Each row names the law, when it applies and the part TermsFeed handles.

Consent laws, what is at stake and how Privacy Consent covers each one
Law Applies when What it can cost How TermsFeed covers it
PIPEDA Canada A business collects, uses or discloses personal information in commercial activities. Fines of up to CAD 100,000 for knowing breaches of specific duties, such as breach reporting (section 28). PIPEDA has no general administrative fines.
  • A Privacy Policy that names your business, the purposes and the recipients of the data
  • Preferences Center to opt out at any time
Quebec Law 25 Quebec A business collects personal information of people in Quebec. Administrative penalties of up to CAD 10 million or 2% of worldwide turnover, and penal fines of up to CAD 25 million or 4%, whichever is higher.
  • Tracking off until the visitor agrees
  • Consent banner in French
  • Consent log of every choice

A summary for orientation, not legal advice.

How Privacy Consent compares.

Free cookie plugins cover the basics, and doing it yourself means adding every script block and consent rule by hand. Privacy Consent keeps the rules for each region current, with a free plan to start.

Free cookie plugins, doing it yourself and TermsFeed Privacy Consent compared
Feature Free cookie plugins Doing it yourselfBanner and scripts coded by hand TermsFeed Privacy Consent
Price Free No fee, only your time Free plan. Paid plans from $9 a month
Blocks scripts until consent Varies Manual Yes, on every plan
Rules by visitor location Rarely Rarely Yes, from the Starter plan
Consent log Varies Rarely Yes, with export on every plan

Privacy Consent plans.

Every plan includes the consent banner, Google Consent Mode v2 and the Preferences Center. Paid plans add rules by visitor location managed by TermsFeed, more banner loads and more domains. On the Free plan, a banner that keeps using up its banner loads pauses until the next month or an upgrade.

Billing period

Switch to yearly to pay less.

Billed once a year.

Free

One small website that needs a consent banner.

$0 / month / year

Start for free
  • Included: 1 domain
  • Included: 15,000 banner loads a month
  • Included: 10 vendors
  • Included: Consent log kept 180 days
  • Included: Ongoing regulation monitoring
  • Included: Strict consent logic: the consent banner asks every visitor
  • Included: Google Consent Mode v2 and Microsoft Consent Mode
  • Included: Global Privacy Control (GPC)
  • Included: Preferences Center
  • Included: Consent log export
  • Included: JavaScript callbacks when a visitor accepts or declines
Standard consent logic starts here

Starter

A business website with visitors from several countries.

$9 / month

$89 / year

Or $89 a year with yearly billing.

About $7.42 a month. Saves $19 a year against monthly billing.

Choose Starter Choose Starter
  • Included: 1 domain
  • Higher than the plan before: 125,000 banner loads a monthThen $0.30 per extra 1,000
  • Higher than the plan before: 25 vendors
  • Higher than the plan before: Consent log kept 730 days (24 months)
  • Included: Ongoing regulation monitoring
  • Included: Strict consent logic: the consent banner asks every visitor
  • Included: Google Consent Mode v2 and Microsoft Consent Mode
  • Included: Global Privacy Control (GPC)
  • Included: Preferences Center
  • Included: Consent log export
  • Included: JavaScript callbacks when a visitor accepts or declines
  • Plus
  • Higher than the plan before: 125,000 banner loads a monthThen $0.30 per extra 1,000
  • Higher than the plan before: 25 vendors
  • Higher than the plan before: Consent log kept 730 days (24 months)
  • Included: Standard consent logic: banner rules by visitor location
  • Included: Geolocation rules managed by TermsFeed
  • Included: Multi-language banner
  • Included: Custom banner colors beyond the light and dark palettes
  • Included: Remove TermsFeed branding
  • Included: Basic consent analytics

Pro

A growing business with several websites.

$24 / month

$229 / year

Or $229 a year with yearly billing.

About $19.08 a month. Saves $59 a year against monthly billing.

Choose Pro Choose Pro
  • Higher than the plan before: 5 domains
  • Higher than the plan before: 500,000 banner loads a monthThen $0.30 per extra 1,000
  • Higher than the plan before: Unlimited vendors
  • Included: Consent log kept 730 days (24 months)
  • Included: Ongoing regulation monitoring
  • Included: Strict consent logic: the consent banner asks every visitor
  • Included: Google Consent Mode v2 and Microsoft Consent Mode
  • Included: Global Privacy Control (GPC)
  • Included: Preferences Center
  • Included: Consent log export
  • Included: JavaScript callbacks when a visitor accepts or declines
  • Included: Standard consent logic: banner rules by visitor location
  • Included: Geolocation rules managed by TermsFeed
  • Included: Multi-language banner
  • Included: Custom banner colors beyond the light and dark palettes
  • Included: Remove TermsFeed branding
  • Plus
  • Higher than the plan before: 5 domains
  • Higher than the plan before: 500,000 banner loads a monthThen $0.30 per extra 1,000
  • Higher than the plan before: Unlimited vendors
  • Included: Full consent analytics

Business

High-traffic websites and businesses with many brands.

$59 / month

$569 / year

Or $569 a year with yearly billing.

About $47.42 a month. Saves $139 a year against monthly billing.

Choose Business Choose Business
  • Higher than the plan before: 25 domains
  • Higher than the plan before: 3,000,000 banner loads a monthThen $0.21 per extra 1,000
  • Included: Unlimited vendors
  • Included: Consent log kept 730 days (24 months)
  • Included: Ongoing regulation monitoring
  • Included: Strict consent logic: the consent banner asks every visitor
  • Included: Google Consent Mode v2 and Microsoft Consent Mode
  • Included: Global Privacy Control (GPC)
  • Included: Preferences Center
  • Included: Consent log export
  • Included: JavaScript callbacks when a visitor accepts or declines
  • Included: Standard consent logic: banner rules by visitor location
  • Included: Geolocation rules managed by TermsFeed
  • Included: Multi-language banner
  • Included: Custom banner colors beyond the light and dark palettes
  • Included: Remove TermsFeed branding
  • Included: Full consent analytics
  • Plus
  • Higher than the plan before: 25 domains
  • Higher than the plan before: 3,000,000 banner loads a monthThen $0.21 per extra 1,000
  • Included: Overage 30% lower than Pro

Prices in US dollars (USD). Cancel your subscription anytime.

Helping businesses since 2012 Free plans available Monthly or yearly billing Cancel anytime

Helping businesses since 2012.

Over 1.9 million customers have created a legal agreement with TermsFeed.

It makes creation of a long Terms and Conditions easier by just putting the important details and ticking some boxes.
CEO Information Technology and Services 50-100 Employees G2 ·
Excellent. Very Happy. TermsFeed gave me everything I needed with minimal effort on my part. Their support team is great and able to troubleshoot and make any changes that are needed for your site. Even with email support, Customer Support is very responsive. I have total confidence in using this service and their support.
CEO Information Technology and Services 1-10 Employees Capterra ·
Elegant solution, reasonable cost and fantastic support.
Managing Partner Information Technology and Services 1-10 Employees Capterra ·
Great Service! 10 out of 10 experience with them. Very fast and easy to use system. Very quick turnaround times with customer support and super easy system to use.
CEO Airlines/Aviation 1-10 Employees Capterra ·
Termsfeed is really easy to use. I don't need any legal knowledge to create legal documents. It might be pricey for small companies and startups.
Application Development Analyst Information Technology and Services 50-100 Employees G2 ·
TermsFeed is very easy to use with user-friendly interface. It helps me to draw out the Terms & Conditions along with Privacy Policies for the business and stay in grounds with the regulations and compliance. The cookie content for websites is very easy to manage with TermsFeed. The technical support team is great in assisting the users. A little expensive than the other similar products available in the market. The payment interface should be updated to be more clear to the users.
Java Software Developer Information Technology and Services 50-100 Employees G2 ·
TermsFeed is easy to use and understand. TermsFeed has great customer service and offers many features.
CRA Misc 1-50 Employees G2 ·
Excellent customer support! Fully functional system at low cost. Easy to understand.
Operations Director Design 1-10 Employees Capterra ·

Capterra reviews constitute the subjective opinions of individual end users based on their own experiences and do not represent the views of Capterra or its affiliates.

Frequently asked questions about PIPEDA and Law 25.

Answers to the questions small businesses ask about Canadian privacy law and cookies.

Do I need a cookie banner in Canada?

What does Quebec Law 25 change for my website?

Quebec Law 25 asks your website for a published Privacy Policy and for consent before tracking.

Since 22 September 2023, a business that collects personal information through a website publishes a Privacy Policy in clear and simple terms (section 8.2). Consent is manifest, free, informed and given for specific purposes (section 14). The Quebec regulator expects tracking technology to stay off by default (section 8.1).

What are the penalties under PIPEDA and Quebec Law 25?

Quebec Law 25 carries administrative penalties of up to CAD 10 million or 2% of worldwide turnover, and penal fines of up to CAD 25 million or 4%. Courts award at least CAD 1,000 in punitive damages for intentional or grossly negligent breaches (section 93.1).

PIPEDA has no general administrative fines. Knowing breaches of specific duties, such as breach reporting, carry fines of up to CAD 100,000 (section 28).

Does the TermsFeed Privacy Policy cover PIPEDA and Law 25?

The Privacy Policy Generator has no section that names PIPEDA or Quebec Law 25. The policy explains what you collect, why, who receives the data and how to contact you, in plain language.

Check the policy against section 8.2 of the Quebec Private Sector Act when you serve customers in Quebec.

More solutions.

Each solution page lists what a law or a platform asks of your website, and which TermsFeed product covers each part.

GDPR Consent from visitors in the EU before cookies load, with a Privacy Policy and a record of every consent. UK GDPR Consent before cookies under PECR, the 2026 analytics exception, and a Privacy Policy for UK visitors. CCPA+CPRA A Privacy Policy, the Do Not Sell or Share link and Global Privacy Control, for California residents. US state privacy laws Opt-outs, Global Privacy Control and privacy notices for the 19 US states with privacy laws in effect. Switzerland (FADP) The FADP privacy notice and the Swiss cookie rules, with opt-in consent for Swiss visitors. LGPD (Brazil) Visitors from Brazil get clear privacy information, a reject button and revocable consent. COPPA The privacy notice for websites and apps aimed at children under 13, and the 2025 rule changes. Shopify Privacy Consent in your theme, connected to the Shopify Customer Privacy API. WordPress Privacy Consent on any WordPress theme, the WordPress Consent API, and free legal pages with AutoTerms. Wix Privacy Consent in Wix Custom Code, with the Wix cookie banner turned off. Squarespace Privacy Consent in Squarespace Code Injection, and Squarespace Analytics in your Cookies Policy. Webflow Privacy Consent in the Webflow Head code, with embeds that wait for consent. Online stores A Privacy Policy, a Return and Refund Policy and a consent banner for stores that sell online. SaaS Terms and Conditions, a Privacy Policy and a consent banner for software sold by subscription. Mobile apps The Privacy Policy and EULA that the Apple App Store and Google Play ask for. Global Privacy Control The browser opt-out signal 10 US states require, honored by Privacy Consent on every plan. Google Consent Mode v2 Consent signals for Google Ads and Google Analytics 4, sent from Privacy Consent with code from the docs.