Privacy Protocol
Last Updated: 2024
Jurisdiction: Ottawa, Ontario, Canada (PIPEDA Compliant)
Disclaimer: This document constitutes the formal Privacy Protocol for Stone and Receipt. It is provided for informational purposes regarding our data practices in relation to Capital Gains Tax education and does not constitute professional legal advice. For specific legal concerns regarding Canadian tax law or data protection, please consult a qualified solicitor.
1. Data Controller Identification
Stone and Receipt, operating within the jurisdiction of Ottawa, Ontario, acts as the primary Data Controller for all personal information collected through this platform. Our commitment to privacy is governed by the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, the Ontario Freedom of Information and Protection of Privacy Act.
For inquiries regarding this protocol or our data management practices, please contact our designated Privacy Officer at:
Stone and Receipt
Address: 150 Metcalfe St, Ottawa, ON K2P 1P1
Email: +1 (216) 325-2330
2. Scope of Data Collection
We collect data to provide accurate insights into Capital Gains Tax calculations and reporting requirements. This includes:
- ▶ Identity Data: Legal names and contact information provided via consultation forms or newsletter subscriptions.
- ▶ Contact Data: Email addresses, telephone numbers, and physical addresses relevant to tax residency assessments.
- ▶ Technical Data: IP addresses, browser types, device identifiers, and geolocation data (restricted to city/region level for jurisdiction-specific tax logic).
- ▶ Usage Data: Information on how you interact with our "Inclusion Rates and Coefficients" modules and "Property Disposal Protocols."
3. Legal Basis for Processing
Under PIPEDA, we process your data based on the following legal grounds:
- ■ Consent: When you voluntarily submit information to receive our "Data Input and Reporting" guides.
- ■ Contractual Necessity: Processing required to provide the specific services requested, such as personalized capital gains estimations.
- ■ Legal Obligation: Retention of records as required by the Canada Revenue Agency (CRA) or other regulatory bodies in Ottawa.
4. Retention and Storage
Stone and Receipt adheres to a strict data minimization policy. Personal data is retained only for as long as necessary to fulfill the purposes outlined in this Protocol or to comply with Canadian statutory limitation periods. Typically, financial inquiry data is archived for a period of seven (7) years following the end of the tax year in which the service was provided, aligning with CRA record-keeping recommendations.
5. Third-Party Transfers
We do not sell or lease user data to third-party marketers. Data may be shared with service providers involved in our "Capital Gains Processing Hub" operations (e.g., secure cloud hosting, analytics) under strict confidentiality agreements. Transborder data flows may occur if our technical infrastructure resides outside of Canada; however, such transfers are protected by standard contractual clauses ensuring equivalent protection to PIPEDA standards.
6. Rights of the Data Subject
As a resident of Canada, you possess the following rights regarding your personal information:
Access & Correction
The right to request a copy of the personal data we hold and demand corrections to any inaccuracies found within our tax reporting modules.
Withdrawal of Consent
The right to withdraw consent for data processing at any time, subject to legal or contractual restrictions.
Erasure (Right to be Forgotten)
The right to request deletion of data when it is no longer necessary for the purposes of Capital Gains assessment.
Complaint Submission
The right to lodge a formal complaint with the Office of the Privacy Commissioner of Canada (OPC).
7. Security Infrastructure
Stone and Receipt implements industry-standard physical, organizational, and technological security measures. This includes AES-256 encryption for data at rest and TLS protocols for data in transit. Access to personal information is restricted to authorized personnel who require the data to perform specific tax-related analyses.