Privacy Policy
Last updated: May 1, 2023
Who we are
Canaan Professional Accountancy (“we”, “us”, “our”) is committed to protecting the
privacy and confidentiality of our clients’ personal and financial information. This Privacy
Policy explains how we collect, use, disclose, and safeguard your information when you
engage with us through our website, online forms, virtual consultations, and document
exchange services. Our website address is: https://cpaet.com.
1. Information We Collect
We may collect the following types of information:
- Name, email address, phone number
- Business or organization name and type
- Financial documents (e.g., statements, receipts, tax forms)
- SIN, BN, charity registration number, or other tax IDs
- Details related to bookkeeping, payroll, or audit
- Technical info (e.g., IP address, browser type via analytics)
2. How We Use Your Information
Your data is used for:
- Delivering accounting, tax, and advisory services
- Filing government forms (T1044, T2, T3010)
- Preparing financial and compliance reports
- Communication about services
- Legal record-keeping
- Improving services and website functionality
3. Data Storage & Security
All data is stored in Google Drive (Google Workspace), which uses:
- End-to-end encryption
- Role-based access control
- Two-factor authentication (2FA)
- Real-time activity logs
- Secure sharing settings
- Compliance with ISO/IEC 27001, SOC 2, and PIPEDA
We do not store sensitive data on local devices.
4. Disclosure of Information
We do not sell or rent your data. We may share data with:
- CRA, Corporations Canada, or other agencies
- Essential third-party service providers
- Legal authorities, if required
5. Your Rights
You can:
- Request a copy of your data
- Correct/update information
- Withdraw consent (within limits)
- File a complaint with the Privacy Commissioner of Canada
6. Cookies & Analytics
We use cookies to improve user experience and collect basic website stats. You may disable cookies in your browser.
7. Data Retention
Records are retained for 6–7 years as required by Canadian laws, then securely deleted.