Privacy Policy

Introduction

Garrison & Webb ("we," "our," or "the Firm") is committed to protecting the privacy and confidentiality of personal information entrusted to us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or otherwise interact with our Firm.

This policy applies to all personal information collected through our website, email communications, telephone conversations, in-person consultations, and any other interactions with our Firm. We encourage you to read this policy carefully to understand our practices regarding your personal information.

By engaging our services or using our website, you acknowledge that you have read and understood this Privacy Policy. If you have questions about our privacy practices, please contact us using the information provided at the end of this document.

Information We Collect

We collect various types of information depending on your interactions with our Firm. The categories of personal information we may collect include:

Contact Information

Name, address, telephone number, email address, and other contact details you provide when reaching out to us or engaging our services.

Client Matter Information

Information related to your legal matters, including documents, correspondence, case details, and any other information relevant to providing legal services.

Financial Information

Payment information necessary for billing purposes, including payment method details and billing addresses.

Website Usage Data

Information automatically collected when you visit our website, including IP address, browser type, pages visited, time spent on pages, and referring website addresses.

Communication Records

Records of correspondence between you and our Firm, including emails, letters, and notes from telephone conversations or meetings.

Legal Basis for Processing

We process your personal information under the following legal bases as applicable under Canadian privacy law:

• Consent: Where you have provided explicit consent to the collection and use of your information for specific purposes.
• Contract Fulfillment: Where processing is necessary to perform our contractual obligations to you as a client.
• Legitimate Interest: Where processing is necessary for the legitimate interests of our Firm, provided those interests do not override your rights and freedoms.
• Legal Obligation: Where processing is required to comply with applicable laws, regulations, or legal proceedings.

How We Use Your Information

We use the information we collect for the following purposes:

• Providing legal services and advice to clients
• Communicating with you about your matters, inquiries, and our services
• Processing payments and maintaining billing records
• Improving our website and services based on usage patterns
• Complying with legal and regulatory obligations
• Protecting our legal rights and defending against claims
• Conducting conflict checks prior to engagement
• Maintaining client files and records as required by professional regulations

Data Retention

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. The retention period depends on the nature of the information and the purposes for which it is used.

Client files are retained in accordance with Law Society of Ontario guidelines and our professional obligations, typically for a minimum of ten years following the completion of a matter, or longer where required by law or professional standards.

When personal information is no longer required, we will securely destroy or anonymize it in accordance with applicable privacy legislation and our internal policies.

Data Protection Measures

We implement appropriate technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Secure physical storage of paper files in locked facilities
• Encrypted electronic communications and data storage
• Access controls limiting information access to authorized personnel
• Regular security assessments and updates to our systems
• Staff training on privacy and confidentiality obligations
• Secure disposal procedures for documents and electronic data

In the event of a data breach that poses a real risk of significant harm, we will notify affected individuals and the Privacy Commissioner of Canada as required by applicable law.

Your Privacy Rights

Under Canadian privacy law, you have certain rights regarding your personal information:

• Right to Access: You may request access to the personal information we hold about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal information.
• Right to Erasure: In certain circumstances, you may request deletion of your personal information.
• Right to Restrict Processing: You may request that we limit how we use your information.
• Right to Data Portability: You may request a copy of your information in a commonly used format.
• Right to Object: You may object to certain types of processing of your personal information.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time.

Please note that some rights may be limited by solicitor-client privilege or other legal obligations. To exercise any of these rights, please contact us using the information provided below.

Third-Party Services

We may use third-party service providers to assist in delivering our services or operating our website. These providers may have access to personal information only to perform specific tasks on our behalf and are obligated to maintain confidentiality. Third-party services we may use include:

• Website hosting and maintenance providers
• Analytics services (such as Google Analytics) to understand website usage
• Payment processors for billing transactions
• Cloud storage providers for secure document management
• Communication tools for client correspondence

We ensure that any third-party provider with access to personal information maintains appropriate security measures and complies with applicable privacy laws.

International Data Transfers

In some circumstances, your personal information may be transferred to, stored, or processed in jurisdictions outside of Canada. When this occurs, we ensure that appropriate safeguards are in place to protect your information in accordance with applicable privacy laws.

These safeguards may include contractual obligations requiring the recipient to protect personal information to standards equivalent to those required under Canadian law.

Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and collect information about how you use our site. For detailed information about our use of cookies, including how to manage your cookie preferences, please refer to our Cookie Policy.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last Updated" date at the top of this policy and, where appropriate, notify you by email or through a notice on our website.

We encourage you to review this policy periodically to stay informed about how we protect your information.