1. INTRODUCTION

Real Tax Canada ("Company," "we," "our") is committed to safeguarding the privacy and security of our clients' data. As an accounting firm based in British Columbia, Canada, we ensure that our data handling practices comply with key global privacy regulations, including the Personal Information Protection Act (PIPA) of British Columbia, the Personal Information Protection and Electronic Documents Act (PIPEDA) of Canada, the General Data Protection Law (LGPD) of Brazil, and the General Data Protection Regulation (GDPR) of the European Union.

This Privacy Policy explains how we collect, use, store, share, and protect personal data, ensuring compliance while minimizing risk to the Company.

For consent management, we use the AdOpt Consent Management Platform, which allows users to review and manage their data preferences transparently. For more details, visit:

• How a Cookie Notice Works
• AdOpt’s Privacy Policy

2. DATA COLLECTED

We collect and process the following personal data from clients and website visitors:

• Identification Information: Full name, email, phone number, address, date of birth, and official documents (i.e. passport, CPF, SIN).
• Financial Information: Bank details, financial transactions, credit history, income, and tax returns.
• Dados Eletrônicos: IP address, geographic location, device used, browser, access logs, cookies, and website behavior.
• Dados Profissionais: Employment information, earnings, and professional history for tax and accounting purposes.
• Communication History: Records of emails, customer service interactions, and conversations with our team.

We ensure that data collection is limited to what is strictly necessary for our business operations and legal compliance.

3. PURPOSE OF DATA PROCESSING

Personal data is collected and processed based on the following legal grounds:

• Contract Execution: Providing accounting and tax services, managing accounts, processing transactions, and fulfilling regulatory obligations.
• Consent: Sending marketing communications and promotional materials only if explicitly authorized by the client.
• Legitimate Interest: Continuous service improvement, security monitoring, fraud prevention, and business analytics.
• Legal Compliance: Meeting tax, financial, and regulatory requirements in Canada, Brazil, and other jurisdictions as applicable.

We do not process sensitive data unless strictly required by applicable laws and with explicit consent from the data subject.

4. DATA SHARING

We implement strict data-sharing protocols and may share personal data with:

• Service Providers: Third-party providers assisting with service execution under strict confidentiality agreements.
• Government Entities: Canada Revenue Agency (CRA), Receita Federal do Brasil, and other regulatory authorities as required by law.
• Financial Institutions: Banks and payment processors to facilitate financial transactions.
• Security and Analytics Platforms: Fraud prevention systems and cybersecurity monitoring tools.

All third-party access is governed by data protection agreements ensuring compliance with applicable privacy laws.

5. DATA RETENTION AND SECURITY

We implement industry-leading security measures, including:

• Data Encryption: All data is encrypted at rest and in transit.
• Access Controls: Multi-factor authentication and role-based access control (RBAC) to restrict unauthorized access.
• Threat Monitoring: Continuous security assessments and automated threat detection systems.
• Data Retention Policies: Secure storage and timely deletion of personal data in accordance with Canadian, Brazilian, and international regulations.

6. USER RIGHTS AND REQUESTS

Os clientes possuem os seguintes direitos em relação aos seus dados pessoais:

• Acess: Request a copy of their stored personal data.
• Correction: Update incorrect or outdated information.
• Deletion: Request deletion of data when legally permissible.
• Consent Withdrawal: Revoke previously granted consent.
• Data Portability: Request a structured, machine-readable copy of their data.
• Objection to Processing: Challenge certain uses of data where applicable.

To exercise these rights, contact [email protected].

7. COOKIES AND TRACKING TECHNOLOGIES

For more information on cookies and tracking technologies, please refer to our Cookies Policy.

We use the AdOpt Consent Management Platform to manage user preferences and ensure compliance with applicable data protection regulations.