Privacy Policy

Information collected through the consultation form

The private consultation form is the primary place personal information is collected. When a request is submitted, the following is received:

• —Contact details — full name, email address, and WhatsApp number.
• —Business context — company or group name, city and province, industry, and an approximate revenue band.
• —Matter details — the nature of the matter, an estimated exposure range, the timeline, whether a CRA audit is underway, whether a CRA letter or notice has arrived, whether legal counsel is involved, whether more than one entity is involved, and a short free-text description written in your own words.
• —How you heard about the practice (referral source).
• —Your consent selections — the required contact consent, and the optional opt-in for occasional insights if you choose it.

Technical information collected automatically

The server that hosts this site may record standard technical information — such as IP address, browser type, and the pages requested — in its logs, for security, reliability, and abuse prevention. These logs are not used to build advertising profiles, and are retained only briefly.

This site does not set advertising or cross-site tracking cookies, and does not sell any information to data brokers or advertising networks.

Why this information is collected

The information is used to read and respond to the consultation request, to understand the nature and urgency of the matter, to assess whether it is a fit for the practice, and to arrange a private conversation about it. Where a matter is not a fit, the information may be used to point you toward a more suitable kind of help.

The information is not used for automated decision-making, and it is not disclosed to third parties except where you ask for a referral, where a professional adviser is brought in with your knowledge, or where disclosure is required by law.

Consent, and how to withdraw it

Submitting the form requires consent to be contacted about the inquiry by WhatsApp or email — this is the required checkbox on the form. A separate, optional, unchecked box lets you opt in to occasional tax risk insights by email; leaving it unchecked has no effect on how an inquiry is handled. Where you opt in, the date and the exact wording you agreed to are recorded.

Under Canada's anti-spam legislation (CASL), the implied consent created by making an inquiry lasts six months. You can withdraw any consent at any time — including unsubscribing from insights — by saying so through the WhatsApp private line. Withdrawal takes effect promptly and applies going forward.

WhatsApp and third-party processing

Replies are sent by WhatsApp, which is operated by Meta Platforms. Messages exchanged over WhatsApp are processed by Meta under WhatsApp's own terms and privacy policy, on its infrastructure, and outside the control of this practice. Using WhatsApp to reach the practice means accepting that processing.

For that reason, sensitive identifiers should not be sent through the form or over WhatsApp — no Social Insurance Numbers, account numbers, or CRA correspondence. Once an engagement is in place, a secure channel is arranged for exchanging documents.

Where information is stored

Consultation requests are stored on a dedicated private server operated for this practice, with access limited to Muib Khan. Where information is stored or processed outside Canada, it may be subject to the laws of the jurisdiction in which it is held, including lawful access requests by authorities there. WhatsApp correspondence is stored by Meta on its own infrastructure, as described above.

How long information is kept

Inquiries that do not lead to an engagement are deleted within twelve months. Where an inquiry becomes an engagement, the related records are kept for the life of the engagement and for as long afterward as professional record-keeping obligations and the relevant statutory limitation periods require, after which they are securely disposed of.

Where you have opted in to receive insights, your email address is kept for that purpose until you withdraw consent.

Safeguards

Information submitted through this site is transmitted over an encrypted connection (TLS). Stored information is held on access-controlled infrastructure, and access is limited to Muib Khan. Reasonable administrative, technical, and physical safeguards are maintained in proportion to the sensitivity of the information.

No method of transmission or storage is completely secure, and absolute security cannot be promised; the safeguards above are intended to reduce risk to a reasonable level.

Access, correction, and your rights

You have the right to ask what personal information is held about you, to ask that it be corrected if it is inaccurate, and to withdraw consent to its use. Requests are answered within the timeframe PIPEDA requires, ordinarily within thirty days, and there is no charge for a reasonable request.

To make a request, use the WhatsApp private line and identify the inquiry the request relates to.

Contact and the privacy officer

Muib Khan is the privacy officer for this practice and the point of contact for any question, request, or concern about this policy or about how personal information is handled. The fastest route is the WhatsApp private line shown throughout this site.

If a concern is not resolved to your satisfaction, you may also raise it with the Office of the Privacy Commissioner of Canada.

Changes to this policy

This policy may be updated from time to time. The date it was last updated is shown at the top of this page, and any material change takes effect when the updated policy is posted here. Continued use of the site after a change means the updated policy applies.