Privacy Policy

Your financial information deserves serious protection

Last Updated: November 18, 2025

Introduction

Look, I get it - nobody actually enjoys reading privacy policies. But when you're trusting us with your financial data, tax returns, and business details, you deserve to know exactly what we're doing with all that sensitive stuff.

At Eldryn Thavo Accounting Services, we take privacy seriously because, well, we have to. We're dealing with some of the most personal information you've got. This policy lays out everything in plain language - no legal mumbo-jumbo designed to confuse you.

Bottom line: We only collect what we need to do our job, we protect it like it's our own, and we never sell your data to anyone. Period.

Information We Collect

This is the basic stuff we need to actually work with you:

  • Full legal name and any business names you operate under
  • Social Insurance Number (SIN) or Business Number (BN) - yeah, we need these for CRA filings
  • Contact details: email, phone, physical address
  • Date of birth and residency status
  • Banking info if you want us handling payroll or direct deposits

The meat and potatoes of what we do - your financial records:

  • Income statements, T4s, T5s, and other tax slips
  • Business revenue records and expense receipts
  • Investment portfolios and capital gains/losses
  • GST/HST records and sales tax documentation
  • Payroll information for your employees
  • Previous years' tax returns (helps us spot trends and opportunities)

When you visit our website or use our online portal, we collect:

  • IP address and browser type
  • Pages you visit and time spent on our site
  • Referring website information
  • Device information (desktop, mobile, tablet)
  • Login timestamps for security purposes

This helps us keep things secure and improve your experience on our site.

How We Use Your Data

We're not gonna beat around the bush here. Your information gets used for these specific purposes:

Tax Preparation & Filing

Obviously. We prepare your returns, file 'em with CRA, and make sure you're getting every deduction you're entitled to.

Bookkeeping Services

Keeping your books clean, tracking expenses, managing payroll, and making sure everything balances out.

Communication

Reaching out about deadlines, tax changes that affect you, or following up on documents we need.

Compliance

Meeting legal requirements, responding to CRA requests, and keeping proper records as required by law.

We'll never: Use your data for marketing unrelated services, sell your information to third parties, or share your details with anyone unless legally required or you've given explicit permission.

Data Protection Measures

Okay, so here's how we actually protect your stuff. We don't mess around with security because one breach could ruin your life (and ours).

Encryption

All data transmitted to and from our systems uses 256-bit SSL encryption. Same level banks use.

Secure Storage

Physical files locked in fireproof cabinets. Digital files on encrypted Canadian servers with regular backups.

Access Control

Only authorized staff can access your files. Multi-factor authentication required for all system access.

Regular Audits

We review our security practices quarterly and run penetration tests on our systems.

Information Sharing & Disclosure

Let's be crystal clear about when we might share your information. We're not in the business of handing out your data, but there are some situations where we legally have to or where it makes sense for your benefit.

Government Agencies

We share your tax info with the Canada Revenue Agency (CRA) - that's literally our job. Also with provincial tax authorities when filing PST, GST/HST, or payroll remittances. If there's a court order or legal requirement, we gotta comply.

Service Providers

Sometimes we work with other professionals for your benefit - like lawyers for incorporation, financial advisors for investment planning, or IT providers who maintain our secure systems. They're all bound by confidentiality agreements.

With Your Permission

If you ask us to share info with your bank, investors, or business partners, we'll do that. But only after you explicitly tell us it's okay, preferably in writing.

Cookie Policy & Website Tracking

Yep, we use cookies. Not the chocolate chip kind, unfortunately. These are small files that help our website work better and remember your preferences.

What cookies do we use?
  • Essential Cookies: Keep you logged in to our client portal
  • Analytics Cookies: Tell us which pages are helpful (or confusing)
  • Preference Cookies: Remember your settings
  • Security Cookies: Detect suspicious activity
Data Flow Diagram

You → Website → Encrypted Server → Secure Storage

Control your cookies: You can disable cookies in your browser settings, but heads up - some features of our site might not work properly if you do.

Your Rights & Choices

Under Canadian privacy laws (PIPEDA specifically), you've got some solid rights when it comes to your personal information. Here's what you can do:

Your Right What It Means How to Exercise It
Access See what personal info we have about you Email us a request - we'll respond within 30 days
Correction Fix any inaccurate information Let us know what needs updating
Deletion Request we delete your data (with some exceptions) Contact us, but note we might need to keep some records for legal reasons
Portability Get your data in a format you can use elsewhere We'll provide it as a PDF or CSV file
Withdraw Consent Change your mind about how we use your data Just tell us - though this might limit our ability to serve you
Important Note

Some information we're legally required to keep for tax purposes (like 7 years for business records per CRA requirements). We can't delete that stuff even if you ask, but we'll explain why when you contact us.

Data Retention Policy

We don't keep your stuff forever - that'd be weird and unnecessary. But we do need to hold onto certain records for specific periods, mostly because the CRA says so.

Tax Records

Retention: 7 years

Tax returns, supporting documents, receipts, and financial statements. This is CRA's requirement, not ours.

Payroll Records

Retention: 6 years

Employee information, T4s, ROEs, and payroll journals as required by federal employment standards.

Client Communications

Retention: 3 years

Emails, letters, and notes from meetings - kept for continuity and reference purposes.

Website Analytics

Retention: 26 months

Anonymized browsing data and usage statistics to improve our website experience.

After retention periods expire: We securely delete or destroy your information. Physical documents get shredded, digital files are permanently deleted from all systems including backups.

Questions About Your Privacy?

If you've got concerns, questions, or want to exercise any of your rights, don't hesitate to reach out. We take this stuff seriously and we'll get back to you promptly.

Address
1245 Burrard Street, Suite 308
Vancouver, BC V6Z 1Z2
Privacy Complaint Process

If you believe we've mishandled your personal information:

  1. Contact us directly first - most issues get resolved quickly
  2. If you're not satisfied, you can file a complaint with the Office of the Privacy Commissioner of Canada at 1-800-282-1376

Changes to This Policy

Tax laws change, technology evolves, and sometimes we update how we do things. When we make changes to this privacy policy, we'll post the updated version here with a new "Last Updated" date at the top.

For major changes that affect how we handle your data, we'll send you an email heads-up. For minor tweaks and clarifications, we'll just update this page.

We recommend checking back here occasionally, especially if it's been a while since you last read through this.