1. Purpose and Commitment

At Bhundhoo Tax Professional Corporation (“we,” “us,” or “our”), protecting your privacy and safeguarding your personal information is a core part of how we do business.

As a CPA-led firm operating in Ontario, Canada, we comply with the Personal Information Protection and Electronic Documents Act (PIPEDA), applicable Ontario privacy laws, and professional CPA Code of Conduct requirements for confidentiality and data protection.

This Privacy Policy explains how we collect, use, disclose, and protect your personal information—whether you are a client, prospective client, or website visitor.

2. Information We Collect

We collect only the information necessary to provide professional accounting, tax, and advisory services, including:

• Personal identifiers: name, address, phone number, and email.

• Government identifiers: Social Insurance Number (SIN), business numbers, CRA account details.

• Financial and corporate data: T-slips, bank statements, invoices, payroll records, corporate filings, and bookkeeping records.

• Professional details: business registration, ownership structure, and relevant documents for tax compliance.

• Website data: analytics, cookies, and form submissions (such as newsletter sign-ups or contact forms).

We collect information directly from you or from authorized third parties (e.g., CRA, your bookkeeper, or financial institution) with your consent.

3. Purpose of Collection

We use your information for the following lawful and limited purposes:

• To provide accounting, tax preparation, and advisory services.

• To manage client relationships, billing, and communications.

• To comply with legal and regulatory obligations (e.g., CRA filings, audits).

• To improve our services, technology, and client experience.

• To send relevant tax updates, educational materials, or marketing emails (only with your consent).

• To maintain accurate internal records and meet professional retention requirements.

We do not collect, use, or disclose personal information for purposes other than those identified above, except with your consent or as required by law.

4. Consent

Your consent may be express or implied, depending on the nature of the interaction:

• Express consent is obtained through signed engagement letters, service agreements, or web forms.

• Implied consent occurs when you voluntarily provide information for known purposes (e.g., emailing documents for tax preparation).

You may withdraw consent at any time, subject to legal or contractual restrictions, by contacting us at .

5. Storage, Security, and Safeguards

Your personal and financial data is securely stored using encrypted cloud-based platforms compliant with Canadian privacy laws, including:

• Verifyle (for document exchange and e-signatures)

• Zoho (for client management and communication)

• Intuit / QuickBooks Online (for bookkeeping and tax services)

We use 256-bit encryption, secure passwords, multi-factor authentication, and limited employee access to protect your information.

All staff, contractors, and associates are bound by strict confidentiality agreements and professional CPA ethical obligations.

6. Disclosure to Third Parties

We only disclose your personal information when necessary to:

• File returns or correspondence with the Canada Revenue Agency (CRA).

• Facilitate services through trusted technology providers (Verifyle, Zoho, Intuit, Google Workspace, payment processors).

• Comply with legal or regulatory requirements.

Third-party providers are required to maintain privacy protections consistent with Canadian data protection standards and are restricted from using your data for any other purpose.

We do not sell, rent, or trade your personal information under any circumstance.

7. Data Retention and Destruction

We retain client records for the minimum period required by law (typically seven years) following the end of a fiscal year or engagement, in compliance with CRA and CPA Ontario guidelines.

After this period, records are securely destroyed using electronic deletion or shredding procedures to prevent unauthorized access or recovery.

8. Access, Correction, and Client Rights

You have the right to:

• Request access to the personal information we hold about you.

• Request corrections to inaccurate or incomplete information.

• Withdraw consent for specific uses (e.g., marketing communications).

• File a complaint if you believe your privacy rights have been violated.

Requests can be made in writing to . We will respond within 30 days as required under PIPEDA.

9. Cookies, Analytics, and Website Data

Our website may use cookies and analytics tools (such as Google Analytics) to understand how visitors use our site, improve performance, and enhance user experience.

Cookies collect limited non-identifiable information such as browser type, location, and page interactions. You can adjust your browser settings to refuse or delete cookies if you prefer.

We do not use cookies to track personal financial information or any data used in client services.

10. Cross-Border Data Transfers

11. Policy Updates

12. Contact for Privacy Concerns

For questions, access requests, or privacy concerns, please contact:

13. Confidentiality and Professional Standards

As a CPA-led firm, Bhundhoo Tax Professional Corporation adheres to the CPA Ontario Code of Professional Conduct, which requires the strictest standards of confidentiality, data integrity, and professional ethics in handling client information.

✅ This Privacy Policy ensures your firm’s compliance with PIPEDA, Ontario’s digital data protection laws, and CPA professional standards while written in a tone suitable for your website and client portal.