Privacy Policy

How we handle, protect, and respect your information

PIPEDA Compliance

Last Updated: November 13, 2025 | Version: 3.2

Our Privacy Commitments

Full PIPEDA Compliance

We follow Canadian privacy law to the letter - no shortcuts.

Bank-Level Encryption

Your financial data gets the same protection as major banks use.

No Selling Your Info

We've never sold client data and we're not about to start.

You Control Your Data

Request access, corrections, or deletion anytime - it's your right.

Overview

Look, we get it - privacy policies can be about as exciting as watching paint dry. But when you're trusting us with your financial information, you deserve to know exactly what we're doing with it.

At Nexaris Fortress Accounting, we take privacy seriously because we work with sensitive financial data every single day. This isn't just legal boilerplate - it's a straightforward explanation of how we collect, use, protect, and respect your personal information.

We're bound by Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), but honestly, we'd protect your data this way regardless of what the law says. It's just how we operate.

Information We Collect

When you work with us, we'll need some basic info to do our job properly:

  • Identity stuff: Your name, date of birth, SIN (when required for tax filings), government-issued ID for verification
  • Contact details: Email, phone number, business and home addresses
  • Business info: Company name, incorporation details, HST/GST numbers, business structure

We only ask for what we actually need to provide our services. If something seems optional or unnecessary, we'll let you know upfront.

This is where things get more detailed, but it's necessary for proper accounting and tax work:

  • Banking details: Account numbers, transaction records, statements (we need these for bookkeeping and reconciliation)
  • Income records: Revenue streams, invoices, payment receipts, T4s, T5s, and other tax slips
  • Expense documentation: Receipts, bills, vendor information, credit card statements
  • Investment info: Portfolio details, capital gains/losses, dividend income
  • Tax history: Previous returns, CRA correspondence, reassessments

All financial data is encrypted both when it's sent to us and when we're storing it. More on that in the security section below.

When you visit our website or use our client portal, we collect some technical info automatically:

  • Device info: IP address, browser type, operating system, device identifiers
  • Usage patterns: Pages visited, time spent, links clicked, features used
  • Login data: Access times, authentication logs, session duration
  • Cookies: Small files that help us remember your preferences and keep you logged in

This technical stuff helps us improve the website, troubleshoot problems, and keep things secure. We're not tracking you for advertising purposes - that's not our game.

We keep records of our conversations and correspondence with you:

  • Emails, letters, and written correspondence
  • Phone call notes and recordings (when legally permitted and with notice)
  • Meeting notes and consultation records
  • Support tickets and customer service interactions

These records protect both of us - they help us provide consistent service and serve as documentation if there's ever a question about advice we've given or decisions that were made.

How We Use Your Data

We're not in the business of collecting data for the sake of it. Everything we gather has a specific purpose tied to providing you with solid accounting services. Here's the breakdown:

Providing Services

Preparing tax returns, maintaining books, doing audits, providing financial advice - the core stuff you hired us for.

Legal Compliance

Meeting CRA requirements, responding to legal requests, maintaining records as required by law.

Communication

Sending updates about your account, tax deadlines, service changes, and other important info you need to know.

Service Improvement

Analyzing how our services are used to make them better, faster, and more useful for clients.

Security & Fraud Prevention

Detecting unauthorized access, preventing fraud, keeping your accounts secure from bad actors.

Professional Development

Training our team and improving our methods (using anonymized data only).

What we DON'T do: We don't sell your data, rent it out, or use it for marketing to third parties. We're accountants, not data brokers. Your financial information stays between you, us, and whoever the law requires us to share it with (like the CRA when filing taxes).

When & How We Share Information

We're pretty protective of your data, but there are some situations where we need to share it. Here's when that happens:

We work with carefully vetted third-party providers who help us deliver our services:

  • Cloud storage providers: For secure document storage and backup
  • Accounting software vendors: QuickBooks, Sage, etc. for managing your books
  • Tax filing platforms: CRA-approved systems for electronic tax submission
  • Payment processors: For handling invoices and payments securely
  • IT support: For maintaining and securing our systems

All these providers are bound by contracts that require them to protect your data the same way we do. They can only use your info for the specific services they're providing to us.

Sometimes the law requires us to share your information:

  • CRA: When filing your tax returns or responding to audits and inquiries
  • Court orders: If we receive a valid subpoena or court order
  • Legal obligations: When required to comply with applicable laws and regulations
  • Professional regulators: CPA Ontario or other bodies that oversee our practice

We'll always verify the legitimacy of any legal request before sharing your data, and we'll notify you when legally permitted to do so.

Sometimes you might ask us to share your info with others:

  • Financial institutions: Banks, lenders, investors who need financial statements
  • Business partners: When you're involved in mergers, acquisitions, or partnerships
  • Other professionals: Lawyers, financial advisors, consultants working on your behalf
  • Family members: When authorized to discuss your account with them

We'll always get your explicit consent before sharing anything in these situations, and we'll make sure you understand exactly what's being shared and why.

If our firm is ever sold, merged, or restructured, your information would be transferred to the new entity. This is pretty standard in professional services.

If this happens, we'd notify you in advance and the new owner would be required to follow the same privacy commitments we've made to you. You'd also have the option to take your business elsewhere if you're not comfortable with the change.

How We Protect Your Data