Privacy Policy

What I collect

When you submit the website contact form, I may collect your name, email address, business name if provided, and any message or context you choose to share.

When you book an introductory call, I may collect:

• Your name, email address, and phone number
• Your business name and business website, if provided
• Your current accounting software
• Approximate annual revenue
• The kind of support you are looking for
• Any time-sensitive issue you choose to share, such as deadlines, filings, CRA notices, payroll, HST/GST, cleanup, or catch-up work
• Any other context you choose to provide before the call

If it makes sense to continue after the introductory call and I ask for additional details by email, I may collect information needed to understand the work involved. This may include:

• Business structure, fiscal year-end, entities, and provinces of operation
• Accounting software, connected apps, and other systems used in the business
• Record status, transaction volume, bank and credit card accounts, payment processors, and sales channels
• HST/GST, payroll, filing, and CRA-related information
• Cleanup, catch-up, or migration needs
• Reporting expectations and other details that may affect the proposed scope or fee
• Any additional context you choose to share

If you become a client, I may collect and use additional information needed to provide the agreed services. This may include accounting records, tax information, payroll reports, bank-feed information, source documents, correspondence, proposal and engagement records, billing information, and related working documents.

Why I collect it

I collect this information to:

• Respond to your inquiry
• Prepare for our first conversation
• Assess whether I can help
• Understand and scope the work responsibly
• Prepare a proposal where appropriate
• Create and manage an engagement letter if we decide to work together
• Provide the agreed accounting, bookkeeping, tax, reporting, or related services
• Meet legal, professional, regulatory, security, and record-keeping obligations

I do not use your personal information for unrelated purposes without your consent.

Website, scheduling, and follow-up

This website is hosted by Netlify, which also processes submissions from the contact form. Netlify may process the technical information and form details needed to deliver, operate, secure, and manage the website. I do not use cookies for tracking or analytics on this website unless stated otherwise.

Introductory-call scheduling is handled through Calendly. When you use the scheduling page, Calendly may collect the information you provide to book the meeting, along with certain technical information such as device, browser, IP address, time zone, and usage information, as described in Calendly's privacy notice.

Introductory calls may be added to my Microsoft Outlook calendar and held using Microsoft Teams or another agreed meeting tool. Additional scoping questions may be sent and answered through business email. Sensitive documents or records are requested separately through an approved secure exchange method when needed.

How I store and protect it

I use business software providers to operate the firm and protect information. Depending on the stage of our relationship, information may be stored or processed in:

• Microsoft 365, including Outlook, Teams, OneDrive, and SharePoint, for email, calendar, meetings, internal working files, and firm-owned records
• Calendly, for scheduling and booking information
• Notion, for internal prospect tracking, workflow management, notes, and proposal preparation
• Accounting, billing, document, tax, or client-portal systems used to provide services if we decide to work together

Information may be stored or processed outside Canada, including in the United States or other countries where my service providers or their sub-processors operate. Information stored outside Canada may be subject to the laws of the country where it is held, including lawful access by foreign courts, law enforcement, or government authorities.

I use reasonable administrative, technical, and physical safeguards to protect personal information against unauthorized access, use, disclosure, loss, or theft.

I retain personal information only for as long as necessary to fulfill the purpose for which it was collected, provide services, maintain business and professional records, resolve issues, or meet legal, regulatory, tax, professional, or insurance obligations.

In the unlikely event of a breach of security safeguards that creates a real risk of significant harm, I will notify you and the Office of the Privacy Commissioner of Canada as soon as feasible, as required under PIPEDA.

Who I share it with

I do not sell, rent, or trade your personal information. I may share personal information only as needed with:

• Netlify, as the host of this website
• Calendly, for scheduling and booking
• Microsoft, for email, calendar, meetings, files, and internal working documents
• Notion, for internal prospect tracking, workflow management, and proposal preparation
• Accounting, billing, document, tax, or client-portal software providers used to provide agreed services
• Professional advisors, insurers, regulators, or authorities where required by law, professional obligation, insurance, or regulatory process

I limit access to information to what is needed for the relevant purpose.

Your rights

Under PIPEDA, you have the right to:

• Know what personal information I hold about you
• Request access to your personal information
• Request corrections to inaccurate or incomplete information
• Withdraw your consent to the collection, use, or disclosure of your information, subject to legal, professional, contractual, and retention obligations
• Request deletion of your personal information, subject to legal, professional, tax, regulatory, insurance, and record-keeping obligations
• Ask questions or make a complaint about how your information is handled

To exercise any of these rights, contact me at sui@anchorandwave.ca. I will respond within 30 days.

Accountability

I am personally accountable for the protection of your personal information. If you have questions or concerns about how your information is handled, or if you wish to file a complaint, please contact me directly:

If you are not satisfied with my response, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada.