Zachary Cummings, CPA Professional Corporation

Privacy Policy

1. Introduction

Zachary Cummings, CPA Professional Corporation (“we”, “our”, “us”) provides professional bookkeeping, accounting, finance, and tax services to small businesses and individuals in Canada. We are committed to protecting the privacy and confidentiality of personal and business information entrusted to us and to complying with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA).

This Privacy Policy explains how we collect, use, store, protect, and disclose personal information in the course of providing our professional services.

2. What Data We Process

In the course of providing accounting, bookkeeping, finance, and tax services, we may collect and process personal and business information including, but not limited to:

  • Names, addresses, email addresses, and telephone numbers

  • Business information, including corporate details and ownership information

  • Financial records, accounting data, banking information, and transaction details

  • Tax information, including personal and corporate tax filings, CRA correspondence, and authorization details

  • Billing and payment information

  • Documents and records provided through our secure client portal or other approved secure channels

We collect only the information necessary to provide our services and to meet legal, regulatory, and professional obligations.

3. How We Use Your Data

Personal and business information is used solely for purposes including:

  • Providing bookkeeping, accounting, finance, and tax services

  • Preparing and filing tax returns and related submissions

  • Communicating with clients regarding services, engagements, and compliance matters

  • Submitting information to the Canada Revenue Agency (CRA) and other authorities as authorized

  • Maintaining internal records in accordance with legal and professional requirements

  • Billing and administrative purposes

We do not sell, rent, or trade personal information to third parties.

4. Consent

By engaging our services and providing information to us, you consent to the collection, use, and disclosure of your information as described in this Privacy Policy, subject to legal and regulatory requirements.

Consent may be withdrawn at any time, subject to contractual, legal, or professional obligations that may require continued retention of certain information.

5. Information Storage and Processing

Information is stored and processed primarily in Canada; however, certain service providers or software platforms used in the delivery of our services may store or process data in other jurisdictions.

Where information is processed outside Canada, we take reasonable steps to ensure appropriate safeguards are in place consistent with Canadian privacy standards.

6. Security Safeguards

We maintain administrative, technical, and physical safeguards appropriate to the sensitivity of the information we handle, including:

  • Full-disk encryption on all work devices

  • Encrypted, offline backups stored on secured external media

  • Secure client portals for document exchange and communication

  • Industry-standard tax and accounting software, including CRA-approved e-filing systems

  • Antivirus and endpoint protection software

  • Strong authentication controls, including multi-factor authentication where available

  • Access controls to limit information access to authorized personnel only

Despite these measures, no system can be guaranteed to be completely secure. We take reasonable steps to protect information against loss, theft, unauthorized access, disclosure, copying, use, or modification.

7. Disclosure of Information

We may disclose personal information only in the following circumstances:

  • To the Canada Revenue Agency or other regulatory bodies, where authorized or required by law

  • To service providers or software platforms necessary to deliver our services (e.g., accounting or tax software), subject to confidentiality obligations

  • When required by law, court order, or regulatory authority

We do not disclose personal information for purposes unrelated to our professional services.

8. Retention of Information

Information is retained only as long as necessary to fulfill the purposes for which it was collected and to comply with legal, regulatory, and professional requirements.

Retention periods generally include:

  • Financial and tax records: minimum of seven (7) years, or longer where required

  • Engagement and communication records: retained in accordance with professional standards

  • Secure deletion or destruction is applied once retention requirements are met

9. Individual Rights

Under Canadian privacy laws, you have the right to:

  • Request access to your personal information

  • Request corrections to inaccurate or incomplete information

  • Withdraw consent, subject to legal and professional obligations

  • File a complaint with the Office of the Privacy Commissioner of Canada

Requests should be submitted in writing using the contact details below.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. The most current version will always be available on our website. Continued use of our services constitutes acceptance of any updates.

11. Contact Information

If you have questions about this Privacy Policy or our privacy practices, please contact:

Zachary Cummings, CPA Professional Corporation
Email: info@zacharycummingscpa.ca