We're pretty serious about protecting your information - it's kinda what we do for a living. Here's how we handle your data with the same care we'd use for our own.
Last Updated: November 13, 2025
Look, we're not gonna beat around the bush here. When you reach out to us or use our website, we collect certain information. It's pretty standard stuff, but let me break it down for you:
Your name, email address, phone number, company name, and job title. Basically what you'd put on a business card. We need this to actually, you know, get back to you.
When you become a client, we'll collect whatever's relevant to your matter - contracts, corporate documents, IP filings, dispute details. This stuff's protected by solicitor-client privilege, which means it's locked down tighter than Fort Knox.
Like most websites, we collect IP addresses, browser types, device info, and how you navigate our site. It's mostly for keeping things running smoothly and spotting any security issues.
We're not in the business of selling data or bombarding you with junk. Here's what we actually do with your information:
As a Canadian law firm, we follow PIPEDA (Personal Information Protection and Electronic Documents Act). Here's what that means for you in plain English:
You can request to see what personal information we've got on file. We'll provide it within 30 days.
Spotted an error? Let us know and we'll fix it. Accurate records matter, especially in legal work.
You can withdraw consent for certain uses of your data. Note: we might still need to keep some info for legal or professional obligations.
If you think we're not handling your data properly, you can file a complaint with us or directly with the Privacy Commissioner of Canada.
We take security seriously - and given we handle sensitive corporate and IP matters, we kind of have to. Here's what we've got in place:
256-bit SSL encryption for data transmission, encrypted storage systems, multi-factor authentication for all staff accounts, regular security audits, and firewalls that'd make a medieval castle jealous. Our IT infrastructure is designed for law firms handling confidential information.
Our office has controlled access, locked file rooms, secure document destruction protocols, and we don't leave sensitive files lying around. Old school, but it works.
Only staff who need access to your information get it. We've got confidentiality agreements with everyone who works here, regular training on data protection, and clear policies about handling client information.
Yeah, we use cookies. Not the chocolate chip kind, unfortunately. Here's what's going on when you visit our site:
These keep the site functioning - things like remembering you're logged into our client portal, maintaining security sessions, and keeping your preferences. Can't really turn these off without breaking stuff.
We use these to understand how people use our site - which pages get visited, where folks are coming from, that kind of thing. It's aggregated and anonymous. Helps us figure out if our website's actually useful or if we need to rethink things.
Your browser lets you control cookies. You can block them, delete them, or get notified when they're being set. Just know that blocking certain cookies might make parts of the site not work properly.
We work with a few trusted third parties to keep things running smoothly. Here's who might see your data and why:
All our vendors are carefully selected and contractually obligated to protect your information. We don't just hand data over to anyone who asks nicely.
This is where being a law firm makes things different. When you communicate with us about legal matters, those communications are protected by solicitor-client privilege. That's a big deal.
Your confidential communications with us can't be disclosed without your permission (with very limited exceptions). This isn't just our policy - it's a fundamental principle of the legal system. We can't and won't waive this protection without your consent.
We use encrypted email, secure client portals, and other protected channels for sensitive discussions. While email's convenient, it's not perfectly secure - we'll talk about communication preferences when we start working together.
General inquiries, billing matters, and administrative stuff aren't typically privileged. Also, if you're asking us to help with something illegal, privilege doesn't protect that. But let's be real, you're not gonna do that.
We can't just delete everything the moment a case closes. Law firms have specific retention obligations, and honestly, you might need those records down the road.
Active client files are kept indefinitely while we're working together. After a matter closes, we typically retain files for at least 10 years - sometimes longer depending on the type of case and applicable regulations. This protects both you and us if questions come up later.
Marketing communications can be deleted upon request. Website analytics data gets anonymized after a reasonable period. But core client files? Those stick around for the retention period - it's part of our professional responsibility.
When retention periods expire, we don't just toss files in the recycling bin. Everything gets securely destroyed - shredding for physical documents, secure wiping for digital files.
We're based in Canada, and most of our operations stay here. But sometimes data crosses borders - here's when and how that happens:
Some of our cloud providers use servers in multiple locations, including the US. We only work with providers that offer strong data protection and comply with Canadian privacy laws. All transfers are encrypted and protected.
If your case involves international elements - say, an IP dispute with a US company or a cross-border merger - we might need to share information with counsel or parties in other jurisdictions. We'll discuss this with you beforehand.
Any international transfers comply with PIPEDA requirements. We use standard contractual clauses, ensure adequate protection levels, and only transfer what's necessary for the specific purpose.
Got questions about how we handle your information? Want to exercise your privacy rights? Here's how to reach us: