Privacy Policy

Introduction

Keystone Advisory is committed to protecting your personal information and respecting your privacy. This Privacy Policy explains how we collect, use, store, and disclose your personal information when you use our services or interact with our website. We comply with applicable Canadian privacy legislation, including the Personal Information Protection and Electronic Documents Act (PIPEDA).

Information We Collect

Personal Information

We collect the following types of personal information:

• Contact information: name, email address, phone number, business address
• Business information: company name, role/position, business details relevant to consulting services
• Financial information: necessary for valuation and consulting services, handled with strict confidentiality
• Communication records: correspondence, consultation notes, project documentation

Usage Information

When you visit our website, we automatically collect certain information:

• Device information: IP address, browser type, operating system
• Usage data: pages viewed, time spent on pages, referral sources
• Cookies and similar technologies as described in our Cookie Policy

How We Collect Information

We collect information through:

• Direct interactions when you contact us, request information, or engage our services
• Automated technologies including cookies and analytics tools on our website
• Business relationships during the course of providing consulting services
• Third parties such as professional advisors when relevant to our engagement

Legal Basis for Processing

We process your personal information based on:

• Consent: When you provide explicit consent for specific purposes
• Contract fulfillment: To provide the consulting services you've engaged us for
• Legitimate interests: For business operations, improving services, and protecting our legal rights
• Legal obligations: To comply with applicable laws and regulations

How We Use Your Information

We use collected information for the following purposes:

• Providing consulting services including business valuations, succession planning, and performance improvement
• Communicating with you about our services, appointments, and project updates
• Processing payments and managing financial transactions
• Maintaining records required for professional service delivery
• Improving our website and services based on usage patterns
• Sending relevant information about our services where you have consented
• Complying with legal and regulatory requirements
• Protecting against fraud and ensuring the security of our systems

Data Retention

We retain your personal information only as long as necessary to fulfill the purposes outlined in this policy:

• Client engagement records: retained for seven years following completion of services, as required by professional standards
• Financial records: retained per applicable tax and business record requirements
• Marketing communications: until you unsubscribe or request deletion
• Website analytics: typically retained for 26 months

After the retention period expires, we securely delete or anonymize your information unless legal obligations require longer retention.

Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption of sensitive data both in transit and at rest
• Secure access controls limiting information access to authorized personnel only
• Regular security assessments and updates to our systems
• Confidentiality agreements for all team members and contractors
• Secure disposal procedures for physical and electronic records

While we take reasonable precautions, no method of transmission or storage is completely secure. We cannot guarantee absolute security of your information.

Information Sharing and Disclosure

We do not sell your personal information. We may share your information with:

Service Providers

Third-party vendors who assist with business operations, such as IT services, payment processing, and professional tools. These providers are contractually bound to protect your information and use it only for specified purposes.

Professional Advisors

Legal counsel, accountants, and other professional advisors as needed for service delivery or legal compliance, subject to their own professional confidentiality obligations.

Legal Requirements

Government authorities, regulators, or other parties when required by law or to protect our legal rights and interests.

Business Transfers

In connection with a business transaction such as merger, acquisition, or sale of assets, subject to appropriate confidentiality protections.

Your Privacy Rights

You have the following rights regarding your personal information:

• Access: Request copies of your personal information we hold
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information, subject to legal retention requirements
• Restriction: Request limitation on how we process your information
• Portability: Receive your information in a structured, commonly used format
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw previously given consent at any time

To exercise these rights, contact us at [email protected]. We will respond to requests within 30 days as required by applicable law.

Third-Party Services

Analytics

We use Google Analytics to understand website usage. Google Analytics collects information anonymously and reports website trends without identifying individual visitors. For more information, review Google's privacy policy at https://policies.google.com/privacy.

Other Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

Cookies

We use cookies and similar technologies as described in our Cookie Policy. You can manage cookie preferences through your browser settings and our cookie consent tool.

International Data Transfers

Your information is primarily stored and processed in Canada. If information is transferred outside Canada, we ensure appropriate safeguards are in place to protect your information in accordance with this privacy policy and applicable data protection laws.

Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take steps to delete it promptly.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable laws. We will notify you of material changes by updating the "Last Updated" date and, where appropriate, providing additional notice through our website or email. Continued use of our services after changes indicates acceptance of the updated policy.

Contact Information

For questions or concerns about this Privacy Policy or our privacy practices, contact:

If you have concerns about how we handle your personal information, you may also file a complaint with the Office of the Privacy Commissioner of Canada.