HaikTax

Privacy policy

Effective date: [date]

Draft. This text has not yet been reviewed by a lawyer and is not yet in force.

HaikTax prepares personal income tax returns. To do this, we must collect personal information about you and your family. This policy explains what we collect, why, how we protect it, and what your rights are under Québec's Act respecting the protection of personal information in the private sector (Law 25) and the federal Personal Information Protection and Electronic Documents Act (PIPEDA).

1. Person in charge of the protection of personal information

Haik Pounardjian, owner of HaikTax, is responsible for the protection of personal information.
Contact: info@haiktax.ca · [phone — to confirm]

2. What information we collect

3. Why we collect it

Only to prepare and file your income tax returns, to communicate with you about them, and to meet our legal obligations (for example, keeping records). We do not sell your information and we do not use it for advertising.

4. How we collect it

Directly from you (in person, by email or through the client portal), and — with your authorization as your representative — from the Canada Revenue Agency and Revenu Québec.

When one family member sends documents for others, we ask for the consent of each adult member.

5. Who has access

Only HaikTax staff who work on your file. Our technology providers (secure storage and hosting) process the information on our behalf, under contract, and may not use it for any other purpose. Information is shared with the governments only to file your returns.

6. Where it is stored and how it is protected

Files sent through the client portal are stored in Canada, in a data centre in the Montréal region. Access requires a personal login; each client can see only their own household's files; information is encrypted in transit and at rest; every access to a file is recorded.

7. How long we keep it

We keep your file for 15 years, then destroy it securely.

8. Your rights

To exercise these rights, write to the person in charge (section 1). We answer within 30 days.

9. Confidentiality incidents

If an incident presents a risk of serious harm, we notify the people concerned and the Commission d'accès à l'information, and record it in our incident register.

10. This website

This website does not use advertising or tracking cookies and does not collect statistics about visitors. The client portal uses only what is technically necessary to keep you logged in.

11. Changes

We may update this policy. The effective date at the top shows the latest version.