Legal

Privacy Policy

Last updated: June 2025. We handle your information with care — here's exactly how.

Moyano & Co. ("we," "us," or "our") is committed to protecting the privacy of our clients and website visitors. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information in compliance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

By using our website or engaging our services, you consent to the practices described in this policy.

1. Information We Collect

1.1 Information you provide directly

When you contact us, book a consultation, or engage our services, we may collect:

  • Name and contact information (phone number, email address, mailing address)
  • Business name, trade, and business number
  • Financial information necessary to provide bookkeeping services (bank statements, transaction records, invoices, payroll information, tax documents)
  • Login credentials for accounting software (QuickBooks Online, Xero) shared with us to access your books
  • Any other information you choose to provide

1.2 Information collected automatically

When you visit our website, we may automatically collect basic technical data such as your IP address, browser type, and pages visited. This data is used only in aggregate form to understand how our website is used and improve it. We do not use tracking cookies for advertising purposes.

2. How We Use Your Information

We use the information we collect to:

  • Provide bookkeeping and financial services as agreed
  • Communicate with you about your account, deadlines, and services
  • File required government forms and reports on your behalf (HST returns, T5018 slips, T4s, payroll remittances)
  • Improve our website and services
  • Comply with applicable laws and regulations
  • Respond to enquiries submitted through our website contact form

We will not use your information for marketing purposes without your explicit consent.

3. How We Share Your Information

We treat your information as confidential. We do not sell, rent, or trade your personal or business information. We may share your information only in the following limited circumstances:

  • With your consent: For example, sharing information with your accountant to prepare your tax return, if you've asked us to do so.
  • Service providers: We use QuickBooks Online (Intuit Canada) and Xero as our bookkeeping platforms. Your financial data is stored within these platforms, which have their own privacy policies and security standards. We may also use email and cloud storage services to communicate and store documents.
  • Legal requirements: We may disclose information if required by law, such as in response to a valid court order, CRA audit, or regulatory requirement.
  • Business succession: If Moyano & Co. is acquired or sold, your information may be transferred to the successor with the same privacy obligations.

4. Data Security

We take the security of your financial information seriously. Our security measures include:

  • Using only reputable, established bookkeeping platforms (QuickBooks Online, Xero) that employ 256-bit AES encryption and bank-level security
  • Password-protecting all documents and accounts containing client financial data
  • Using secure, encrypted communication channels for sharing sensitive documents
  • Limiting access to your financial information to only what is necessary to provide services
  • Not storing sensitive financial data (such as banking credentials) on local devices

No method of transmission over the internet is 100% secure. However, we use industry-standard security practices to protect your information to the best of our ability.

5. Data Retention

We retain your personal and financial information for as long as necessary to provide services, comply with legal obligations (including CRA record-keeping requirements, which typically require records to be kept for six years), and resolve disputes.

When you end your engagement with us, we will provide you with a copy of your records and securely delete or return originals within a reasonable period, at your request.

6. Your Rights Under PIPEDA

Under Canada's PIPEDA, you have the right to:

  • Access: Request a copy of the personal information we hold about you
  • Correction: Ask us to correct inaccurate or incomplete information
  • Withdrawal of consent: Withdraw consent to our use of your information (subject to legal or contractual obligations)
  • Complaint: File a complaint with the Office of the Privacy Commissioner of Canada if you believe your privacy rights have been violated

To exercise any of these rights, contact us using the information below.

7. Third-Party Services

Our website may contain links to third-party websites (such as Calendly for booking). We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before providing any personal information.

We do not integrate third-party advertising networks or social media tracking on our website.

8. Children's Privacy

Our services are intended for adults operating businesses. We do not knowingly collect personal information from individuals under the age of 18.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The most current version will always be posted on this page with a "Last updated" date at the top. We encourage you to review this policy periodically.

10. Contact Us

If you have questions about this Privacy Policy or how we handle your information, please contact us:

We will respond to all privacy-related requests within 30 days.

This privacy policy is a template provided for informational purposes. We recommend having a qualified lawyer review it before publishing to ensure it meets your specific obligations. This policy does not constitute legal advice.