Privacy Policy
Your privacy is important to us. This policy explains how we collect, use, and protect your personal information.
1. Introduction
Welcome to Cowichan Valley Tax Services ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our tax preparation services and online portal.
This Privacy Policy complies with:
- PIPEDA (Personal Information Protection and Electronic Documents Act) - Canada's federal privacy law
- GDPR (General Data Protection Regulation) - European Union privacy regulation
- British Columbia PIPA (Personal Information Protection Act)
- CRA (Canada Revenue Agency) requirements for tax preparers
2. Information We Collect
We collect several types of information to provide and improve our tax preparation services:
2.1 Personal Identification Information
| Information Type | Examples | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, SIN, government ID | Tax return preparation, identity verification |
| Contact Data | Email, phone number, mailing address | Communication, service delivery |
| Financial Data | Income, deductions, tax slips (T4, T5, etc.) | Tax return preparation and filing |
| Employment Data | Employer information, employment income | Tax calculations and reporting |
| Family Data | Marital status, dependents, spouse information | Tax credits and deductions |
2.2 Technical Information
- Device Information: IP address, browser type, operating system
- Usage Data: Pages visited, time spent, features used
- Cookies: Session cookies, preference cookies, analytics cookies
- Log Data: Access times, error logs, security events
2.3 Documents and Files
- Tax slips (T4, T5, T3, T4A, etc.)
- Receipts for deductions (medical, donations, etc.)
- Business records and financial statements
- Rental property documentation
- Investment statements
3. How We Use Your Information
We use your personal information for the following purposes:
Tax Preparation
Prepare, review, and file your tax returns with the Canada Revenue Agency (CRA)
Identity Verification
Verify your identity to prevent fraud and ensure compliance with CRA requirements
Communication
Send service updates, appointment reminders, and respond to your inquiries
Service Improvement
Analyze usage patterns to improve our services and user experience
Legal Compliance
Comply with legal obligations, including CRA record-keeping requirements
Security
Detect and prevent fraud, unauthorized access, and security incidents
Legal Basis for Processing (GDPR)
We process your personal information based on the following legal grounds:
- Consent: You have given explicit consent for specific purposes
- Contract: Processing is necessary to fulfill our service agreement with you
- Legal Obligation: We must process your data to comply with tax laws and regulations
- Legitimate Interest: Processing is necessary for our legitimate business interests (fraud prevention, service improvement)
4. Information Sharing and Disclosure
We do not sell, rent, or trade your personal information. We only share your information in the following circumstances:
4.1 With Your Consent
We may share your information with third parties when you have given us explicit permission to do so.
4.2 Service Providers
| Service Provider | Purpose | Data Shared |
|---|---|---|
| Canada Revenue Agency (CRA) | Tax return filing | Complete tax return information |
| Cloud Storage Providers | Secure document storage | Encrypted documents and files |
| Email Service Providers | Communication | Email address, name, message content |
| Payment Processors | Payment processing | Payment information (not stored by us) |
| Analytics Providers | Service improvement | Anonymized usage data |
4.3 Legal Requirements
We may disclose your information if required by law or in response to:
- Court orders or legal processes
- Government or regulatory requests
- CRA audits or investigations
- Protection of our legal rights
- Prevention of fraud or illegal activities
5. Data Security
We implement industry-leading security measures to protect your personal information:
SSL/TLS Encryption
All data transmitted between your browser and our servers is encrypted using 256-bit SSL/TLS encryption
Encrypted Storage
All sensitive data is encrypted at rest using AES-256 encryption standards
Access Controls
Strict role-based access controls ensure only authorized personnel can access your data
Firewall Protection
Advanced firewall systems protect against unauthorized access and cyber threats
Regular Backups
Daily encrypted backups ensure your data can be recovered in case of system failure
Two-Factor Authentication
Optional 2FA adds an extra layer of security to your account
Security Monitoring
24/7 monitoring detects and responds to potential security threats
Regular Audits
Periodic security audits and penetration testing ensure ongoing protection
6. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal requirements:
| Data Type | Retention Period | Legal Basis |
|---|---|---|
| Tax Returns & Supporting Documents | 7 years from tax year | CRA requirement (Income Tax Act) |
| Account Information | Duration of relationship + 7 years | Business records requirement |
| Communication Records | 3 years | Business operations |
| Payment Records | 7 years | Financial record-keeping |
| Website Analytics | 26 months | Service improvement |
After the retention period expires, we securely delete or anonymize your personal information. You may request earlier deletion, subject to our legal obligations.
7. Your Privacy Rights
Under PIPEDA and GDPR, you have the following rights regarding your personal information:
Right to Access
Request a copy of the personal information we hold about you
Right to Rectification
Request correction of inaccurate or incomplete information
Right to Erasure
Request deletion of your personal information (subject to legal requirements)
Right to Restrict Processing
Request limitation on how we use your information
Right to Data Portability
Receive your data in a structured, machine-readable format
Right to Object
Object to processing based on legitimate interests or direct marketing
Right to Withdraw Consent
Withdraw consent for processing at any time
Right to Lodge a Complaint
File a complaint with the Privacy Commissioner of Canada
How to Exercise Your Rights
To exercise any of these rights, please contact us at:
Email: privacy@cowichantax.ca
Phone: (250) 555-0123
Mail: Cowichan Valley Tax Services, Privacy Officer, [Your Address]
We will respond to your request within 30 days as required by PIPEDA.
9. Third-Party Services
Our website may contain links to third-party websites and services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies.
Third-Party Services We Use:
- Google Analytics: Website analytics (anonymized data)
- Google OAuth: Optional sign-in method
- Payment Processors: Secure payment processing
10. Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.
11. International Data Transfers
Your information is primarily stored and processed in Canada. If we transfer data internationally, we ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses approved by the European Commission
- Privacy Shield certification (where applicable)
- Adequacy decisions by relevant authorities
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by:
- Posting the new Privacy Policy on this page
- Updating the "Last Updated" date
- Sending you an email notification (for significant changes)
- Displaying a prominent notice on our portal
Your continued use of our services after changes become effective constitutes acceptance of the revised Privacy Policy.
13. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:
Phone
(250) 555-0123
Cowichan Valley Tax Services
Privacy Officer
[Your Business Address]
Duncan, BC [Postal Code]
Business Hours
Monday - Friday: 9:00 AM - 6:00 PM
Saturday: 10:00 AM - 4:00 PM
Sunday: Closed