Notice: This Privacy Policy constitutes a legally binding instrument governing the collection, processing, storage, disclosure, and destruction of personal information by Majdi Ibrahim CPA Professional Corporation in connection with its digital properties and professional service engagements. Your continued access to or use of this Platform constitutes unconditional acceptance of the terms set forth herein.
Majdi Ibrahim CPA Professional Corporation (hereinafter “the Corporation,” “we,” “us,” or “our”) is a professional corporation duly incorporated under the laws of the Province of Ontario, Canada, and regulated by CPA Ontario pursuant to the Public Accounting Act, 2004 and the Chartered Professional Accountants of Ontario Act, 2017. The Corporation operates the digital properties accessible at treehousecpa.com and any associated subdomains or successor uniform resource locators (collectively, the “Platform”).
All inquiries regarding the Corporation’s privacy practices, requests for access to or correction of personal information, and complaints regarding compliance with applicable privacy legislation shall be directed to the Corporation’s designated Privacy Officer at [email protected].
The Corporation collects personal information through two principal modalities: (i) voluntary disclosure by the data subject in connection with the submission of electronic contact forms or engagement requests via the Platform; and (ii) automated collection facilitated by third-party analytics and advertising technologies deployed on the Platform. Categories of personal information collected may include, without limitation, the following:
Voluntarily Disclosed Information:
Automatically Collected Technical and Behavioural Data:
Personal information is collected, used, and disclosed by the Corporation solely for purposes that a reasonable person would consider appropriate in the circumstances, and exclusively as required or permitted by applicable law, including without limitation the following:
The Corporation does not employ personal information for purposes of automated decision-making, algorithmic profiling, or any processing that produces legal or similarly significant effects upon data subjects without their explicit prior written consent.
The Corporation engages the following third-party service providers as data processors in connection with the technical operation of the Platform. Each processor is subject to contractual obligations regarding the protection of personal information consistent with applicable privacy legislation:
The Corporation utilizes Google Ads, a service of Google LLC (Mountain View, California, USA), for paid search advertising. Google’s conversion tracking infrastructure records attribution events upon completion of contact form submissions following interaction with paid placements. Processing is governed by Google’s applicable data processing addenda and privacy documentation.
Microsoft Clarity, a behavioural analytics service of Microsoft Corporation (Redmond, Washington, USA), is deployed on the Platform to capture pseudonymized session recordings encompassing cursor trajectory, interaction events, and scroll-depth metrics. Microsoft represents that Clarity does not process personally identifiable information as defined under applicable privacy legislation.
Electronic form submissions are processed and transiently stored by Netlify, Inc., a corporation incorporated under the laws of the State of Delaware, United States of America. The Corporation discloses that cross-border transfer of personal information to the United States occurs in connection with this processing relationship.
The Platform utilizes Google Fonts, a typographic resource delivery service of Google LLC, the operation of which necessitates network requests to Google’s infrastructure that may result in incidental logging of IP address data. Google represents that such data is not retained for the purpose of individual identification.
Data subjects may exercise opt-out rights with respect to Google’s advertising processing at adssettings.google.com. Opt-out mechanisms for Microsoft Clarity are accessible at clarity.microsoft.com/optout. The Corporation makes no representations or warranties regarding the completeness or efficacy of such opt-out mechanisms.
The Platform deploys persistent and session-based HTTP cookies, web beacons, pixel tags, and analogous tracking technologies (collectively, “Tracking Technologies”) for the following classified purposes:
Data subjects may configure their browser software to refuse, restrict, or delete cookies, noting that such configuration may impair certain Platform functionalities. Pursuant to Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and Canada’s Anti-Spam Legislation (CASL), affirmative consent is not presently mandated for the deployment of analytics or advertising cookies with respect to Canadian residents; notwithstanding the foregoing, data subjects retain the right to withdraw consent at any time through available browser controls and third-party opt-out mechanisms.
The Corporation implements administrative, technical, and physical safeguards proportionate to the sensitivity of personal information held, consistent with the professional confidentiality obligations imposed by CPA Ontario’s Rules of Professional Conduct. Personal information disclosed through the Platform’s contact forms is transmitted via Transport Layer Security (TLS) encrypted channels and is not maintained in proprietary relational databases beyond the retention periods set forth in Section 7 hereof.
The Corporation does not sell, license, trade, rent, or otherwise transfer personal information to unaffiliated third parties for commercial marketing purposes, except as expressly disclosed herein or as required by applicable law, order of a court of competent jurisdiction, or regulatory authority.
Notwithstanding the foregoing, no method of electronic transmission or digital storage is absolutely impenetrable. The Corporation hereby expressly disclaims liability for unauthorized access, interception, alteration, or destruction of personal information arising from circumstances beyond its reasonable control.
Personal information pertaining to established client engagements shall be retained for the minimum periods prescribed by the Income Tax Act (Canada) — generally not less than six (6) taxation years from the end of the relevant taxation year — and in accordance with CPA Ontario’s professional standards governing record retention and destruction.
Personal information submitted by prospective clients who do not subsequently enter into a formal professional engagement shall be retained for a period not exceeding twenty-four (24) months from the date of initial submission, following which such information shall be securely destroyed in accordance with the Corporation’s documented data destruction protocols.
Data subjects may submit written requests for the deletion or de-identification of personal information to [email protected]. The Corporation shall honor such requests to the fullest extent permitted by applicable law, subject to any statutory, regulatory, or professional retention obligations that shall supersede deletion requests where legally mandated.
Pursuant to the Personal Information Protection and Electronic Documents Act, S.C. 2000, c. 5 (PIPEDA), and applicable provincial privacy legislation, data subjects whose personal information is held by the Corporation are entitled to exercise the following statutory rights:
Requests to exercise the foregoing rights shall be submitted in writing to the designated Privacy Officer at [email protected]. The Corporation shall acknowledge and substantively respond to all such requests within thirty (30) calendar days of receipt, subject to any extensions permitted by applicable law.
The Corporation expressly reserves the unilateral right to modify, amend, restate, or replace this Privacy Policy in whole or in part at any time without prior notice to individual data subjects. All amendments shall become effective immediately upon posting of the revised Privacy Policy to the Platform, as evidenced by the updated effective date at the head of this document. Continued access to or use of the Platform following the posting of any amendment shall constitute the data subject’s unconditional acceptance of the amended Privacy Policy in its entirety and shall supersede all prior versions thereof.
All privacy-related correspondence, access requests, correction requests, withdrawal of consent notifications, and formal complaints shall be directed exclusively to the Corporation’s designated Privacy Officer.
Majdi Ibrahim, CPA — Privacy Officer
Majdi Ibrahim CPA Professional Corporation
Ottawa, Ontario, Canada