Privacy Policy

We're straight with you about how we handle your information - no legal mumbo jumbo here.

Last Updated: January 19, 2026

Overview

Look, we get it - privacy policies are usually boring as hell. But this stuff actually matters, especially when you're trusting us with sensitive business information.

At Parallax Rift Legal, we've been handling cross-border transactions and corporate matters since 2018, and we've learned that protecting client data isn't just about compliance - it's about trust. This policy breaks down exactly what we do with your information, why we do it, and how you can control it.

We operate under Canadian privacy laws (PIPEDA), but since we work internationally, we also align with GDPR standards and other global frameworks. Because when you're dealing with cross-border stuff, one size doesn't fit all.

How Your Data Flows

Collection

You provide info through forms, emails, or consultations

Storage

Encrypted servers in Canada with secure backups

Processing

Used for legal services, communication, & compliance

Protection

Deleted when no longer needed or upon request

Information We Collect

We're not in the business of hoarding data. We only grab what we actually need to do our job. Here's the breakdown:

Personal Identifiers
  • Your name, business title, and company details
  • Contact info - email, phone, mailing address
  • Government IDs when required for KYC/AML compliance (yeah, we have to do this for certain transactions)
Business Information
  • Corporate documents, contracts, and transaction details
  • Financial information relevant to M&A or business formation
  • IP-related materials if you're working with us on trademark or patent stuff
Technical Data
  • IP address, browser type, device info (standard website stuff)
  • Cookies and similar tracking tech (more on this below)
  • Usage patterns to improve our site experience
Note: If you're just browsing our site, we collect way less info than if you're an actual client. Makes sense, right?

How We Use Your Data

We're not selling your info to spammers or anything shady. Here's what we actually do with it:

Providing Legal Services

Obviously, we need your info to actually represent you, draft documents, handle transactions, and give you solid legal advice.

Communication

Responding to your inquiries, sending case updates, and keeping you in the loop about regulatory changes that might affect you.

Compliance

Meeting our legal obligations under various laws - conflict checks, anti-money laundering, regulatory filings, that kind of thing.

Security & Fraud Prevention

Protecting both you and us from fraud, unauthorized access, and other security threats.

Legal Basis: We process your data based on contractual necessity (to provide legal services), legal obligations (compliance requirements), and legitimate interests (improving our services). For EU folks, that's our GDPR justification.

Who We Share Your Data With

We keep things pretty tight, but there are times when we've gotta share info with others:

Service Providers

We work with third-party vendors for things like cloud storage, document management, and IT support. They're all under strict confidentiality agreements and can only use your data to help us serve you better.

Professional Advisors

Sometimes we bring in co-counsel, expert witnesses, or other professionals for your matter. When we do cross-border deals, we often partner with law firms in other jurisdictions - it's part of what we do.

Regulatory & Legal Requirements

If the law says we have to disclose something, we will. This includes court orders, government requests, or regulatory investigations. We'll always try to notify you first unless we're legally prohibited.

Business Transfers

If we merge with another firm or sell our practice (not planning on it, but gotta cover the bases), your info might be transferred. You'd be notified, and the same privacy protections would apply.

We NEVER: Sell your personal data to third parties, use it for unrelated marketing purposes, or share it with anyone who doesn't have a legitimate need-to-know.

Cookies & Tracking Technologies

Yeah, we use cookies. Not the chocolate chip kind (sadly), but the digital ones that help our website work better.

Cookie Type Purpose Duration Control
Essential Make the site work - security, navigation, form submission Session / 1 year Required
Functional Remember your preferences and settings 1 year Optional
Analytics Help us understand how people use our site (anonymous data) 2 years Optional
Marketing Track ad performance (we barely use these) 1 year Optional

You can control cookies through your browser settings or our cookie preference tool below. Just know that blocking essential cookies might break some site functionality.

Your Privacy Rights

You've got rights when it comes to your personal data. Here's what you can do:

Access

Get a copy of the personal data we hold about you

Correction

Fix any inaccurate or incomplete information

Deletion

Request we delete your data (with some legal exceptions)

Restriction

Limit how we process your information

Portability

Get your data in a machine-readable format

Objection

Object to certain types of processing

Important: As lawyers, we're sometimes legally required to keep certain documents and data for specific periods (like 7 years for corporate records). We can't delete stuff if it conflicts with our professional obligations, but we'll always explain why.

To exercise any of these rights, just shoot us an email at contact@parallaxrift.info or call (416) 555-7821. We'll respond within 30 days.

Data Security Measures

We take security seriously - it's not just about compliance, it's about trust. Here's what we do to keep your data safe:

  • Encryption: Data in transit uses TLS 1.3, and stored data is encrypted using AES-256. That's bank-level stuff.
  • Access Controls: Role-based permissions mean people can only access what they need for their job. We log everything.
  • Secure Infrastructure: Our servers are hosted in SOC 2 certified data centers in Canada with physical security, redundancy, and regular backups.
  • Regular Audits: We do quarterly security assessments and annual penetration testing to find vulnerabilities before the bad guys do.
  • Staff Training: Everyone on our team goes through security awareness training. Phishing tests keep us on our toes.
  • Incident Response: We've got a plan in place for data breaches. If something happens, we'll notify affected individuals within 72 hours as required by law.

That said, no system is 100% bulletproof. We do our best, but we can't guarantee absolute security. You should also do your part - use strong passwords, don't share login credentials, and be careful with emails asking for sensitive info.

International Data Transfers

Since we specialize in cross-border transactions, your data might travel internationally. Here's how we handle that:

We primarily store data in Canada, but when we're working on international deals, we sometimes need to share information with law firms, regulators, or clients in other countries. When this happens, we make sure there are proper safeguards in place:

  • Standard Contractual Clauses (SCCs) approved by the European Commission for EU data
  • Adequacy decisions where available (Canada has adequacy status with the EU for commercial data)
  • Consent from you when required for specific transfers
  • Due diligence on foreign service providers to ensure they meet privacy standards
Heads up: Some countries don't have the same privacy protections as Canada or the EU. We'll always let you know if your data is going somewhere with weaker laws and get your explicit consent when needed.

How Long We Keep Your Data

We don't keep your stuff forever. Here's our general approach to retention:

Data Type Retention Period Reason
Client Matter Files 7-10 years after closure Legal & professional requirements
Corporate Documents Permanent (with consent) Ongoing corporate governance needs
Marketing Contacts Until you unsubscribe Ongoing relationship
Website Analytics 26 months Industry standard
Inquiry Forms 2 years if no engagement Potential client relationship

After the retention period expires, we securely delete or anonymize your data. For physical documents, that means shredding. For digital stuff, it's secure deletion that meets data sanitization standards.

Children's Privacy

Our services aren't directed at anyone under 18. We don't knowingly collect personal information from minors. If you're a parent and think your kid has given us their info, let us know and we'll delete it ASAP.

Changes to This Policy

Privacy laws and our practices evolve. When we update this policy, we'll change the "Last Updated" date at the top and post a notice on our homepage for 30 days.

For major changes that affect your rights, we'll send you an email notification if we have your address on file. Continuing to use our services after changes means you're cool with the updated policy.

Questions About Your Privacy?

If you've got questions, concerns, or want to exercise your rights, don't hesitate to reach out. We're here to help.

Call Us
(416) 555-7821
Email Us
contact@parallaxrift.info
Visit Us
Suite 1400, Toronto
Privacy Officer Contact

For formal privacy requests or complaints, you can reach our designated Privacy Officer at the above contact details. We'll respond within 30 days.

Filing a Complaint

We hope to resolve any privacy concerns directly, but you also have the right to file a complaint with regulatory authorities:

Canadian Residents

Office of the Privacy Commissioner of Canada

Website: www.priv.gc.ca

EU Residents

Your Local Data Protection Authority

Find yours at: ec.europa.eu/justice