Privacy Policy

1. Introduction

Ginzburg Legal ("we", "us", "our") is committed to protecting the personal information of people who visit our website and engage with our programmes and advisory services. This Privacy Policy explains what personal information we collect, how we use it, and what rights you have under Canadian law.

Our primary legal framework is the Personal Information Protection and Electronic Documents Act (PIPEDA), which governs the collection, use, and disclosure of personal information in commercial activities across Canada. If you are based in Québec, the Act Respecting the Protection of Personal Information in the Private Sector (Law 25) also applies.

If you have questions about this policy, contact us at [email protected].

2. Information We Collect

We collect personal information only when it is necessary for the operation of our services or our website. The types of information we collect include:

• Contact details: name, email address, and phone number, submitted through our website contact form or provided during programme enrolment.
• Engagement information: details about the programme you enquire about or engage with, including communications exchanged before and during an engagement.
• Website usage data: pages visited, time spent, referring pages, and technical data such as browser type and IP address, collected via analytics tools if you consent to analytics cookies.

Legal basis for processing: We process your personal information on the basis of your consent (when you submit a form or accept analytics cookies), on the basis of contract performance (when you engage in a programme), and on the basis of our legitimate interest in operating and improving our services.

Retention: Contact enquiry data is retained for up to 12 months from last contact. Engagement records are retained for 7 years for administrative purposes, in accordance with standard Canadian business records practice. Website analytics data is retained for up to 26 months.

3. How We Use Your Information

We use the personal information we collect for the following purposes:

• To respond to enquiries submitted through our website
• To deliver and administer programmes and advisory engagements
• To send engagement-related communications (session reminders, deliverables, follow-up notes)
• To improve our website and programmes using aggregated, anonymised usage data
• To meet legal and administrative obligations

We do not sell personal information to third parties. We do not use personal information for automated decision-making or profiling.

Marketing: We do not send marketing emails unless you have explicitly opted in. If you do opt in, you may withdraw consent at any time by contacting [email protected].

4. Third-Party Service Providers

We may share limited personal information with service providers who assist us in operating our website and delivering our programmes. These include:

• Website hosting providers — who store the website and process form submissions
• Analytics tools (e.g. Google Analytics) — only if you consent to analytics cookies; data is anonymised where possible
• Video conferencing tools (e.g. Zoom, Google Meet) — used to deliver remote sessions; subject to those providers' own privacy policies

All third-party service providers are contractually required to handle personal information only as directed by us and to maintain appropriate security measures.

5. How We Protect Your Information

We take reasonable technical and organisational measures to protect personal information from unauthorised access, use, or disclosure. These include:

• TLS/SSL encryption for all data transmitted through our website
• Access controls limiting who within our organisation can access personal information
• Secure cloud storage for engagement documents, with access restricted to named team members
• Confidentiality agreements with team members and contractors who handle client information

In the event of a data breach that poses a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada as required under PIPEDA.

6. Cookies

Our website uses cookies to ensure basic functionality and, with your consent, to collect analytics data. We use the following categories of cookies:

• Essential cookies: Required for the site to function. These cannot be disabled.
• Analytics cookies: Help us understand how visitors use the site. Activated only with your consent.
• Preference cookies: Remember choices you make (such as cookie consent). Activated only with your consent.

You can manage your cookie preferences at any time via our Cookie Policy page.

7. Your Rights

Under PIPEDA and Québec Law 25, you have the following rights regarding your personal information:

• Right of access: You may request a copy of the personal information we hold about you.
• Right of rectification: You may ask us to correct inaccurate or incomplete information.
• Right of erasure: You may ask us to delete your personal information where we no longer have a lawful basis to retain it.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
• Right to complain: If you believe we have handled your personal information improperly, you may contact the Office of the Privacy Commissioner of Canada at www.priv.gc.ca. In Québec, you may also contact the Commission d'accès à l'information at www.cai.gouv.qc.ca.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.

9. Age Restrictions

Our programmes are intended for adults aged 18 and over. We do not knowingly collect personal information from individuals under 18. If you believe a minor has provided us with personal information, please contact us at [email protected] and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Where changes are material, we will make reasonable efforts to notify affected individuals. Continued use of our website after a policy update constitutes acceptance of the revised terms.

11. Contact

For all privacy-related enquiries, including requests to exercise your rights: