Privacy

Privacy Policy

Last updated: January 2024

1. Introduction

Legalitas Compliance Ltd ("we," "us," "our," or "Company") is committed to protecting your privacy and ensuring you have a positive experience on our website and when using our services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and engage with our regulatory compliance and auditing services.

Our principal place of business is located at 1000 Rue de la Gauchetière O, Montréal, QC H3B 4W5, Canada. We are registered with VAT number 815049375 RT 0001.

2. Information We Collect

2.1 Information You Provide Directly

When you interact with Legalitas Compliance Ltd, we may collect the following types of personal information:

Contact information (name, email address, phone number, mailing address)
Company information (business name, industry, size, location)
Communication records (emails, messages, inquiries)
Financial information necessary for billing and service delivery
Compliance documentation and regulatory data you share for audit purposes
Any other information you voluntarily provide through forms, surveys, or direct communication

2.2 Information Collected Automatically

When you visit our website, we automatically collect certain information:

Device information (device type, operating system, browser type)
Usage information (pages visited, time spent, links clicked)
IP address and geolocation data
Cookies and similar tracking technologies
Referrer information and search queries

2.3 Information from Third Parties

We may receive information about you from third parties, including business partners, publicly available sources, and data brokers, to enhance our service delivery and comply with regulatory requirements.

3. How We Use Your Information

We use the collected information for the following purposes:

Providing and improving our compliance auditing and regulatory services
Processing transactions and sending related information
Responding to your inquiries and customer support requests
Sending marketing communications, newsletters, and service updates (with your consent)
Conducting compliance audits and regulatory assessments
Detecting fraud, security incidents, and preventing misuse
Complying with legal obligations and regulatory requirements
Analyzing usage patterns and improving website functionality
Conducting business analytics and statistical research

4. Legal Basis for Processing

In Canada, we process personal information on the following legal bases:

Contractual Necessity: Processing required to provide services you have requested
Legal Compliance: Processing required to meet Canadian federal and provincial privacy laws
Legitimate Interests: Processing necessary for our business operations and customer service
Consent: Processing based on your explicit consent for marketing and analytics

5. Information Sharing and Disclosure

5.1 Service Providers

We may share your information with trusted third-party service providers who assist us in delivering services, including cloud hosting providers, payment processors, and communication platforms. These service providers are contractually obligated to use your information only as necessary to provide services to us.

5.2 Legal Requirements

We may disclose your information when required by law, including responses to legal process, court orders, government requests, and regulatory investigations by Canadian authorities.

5.3 Business Transfers

In the event of a merger, acquisition, bankruptcy, or sale of substantially all assets, your information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a different privacy policy.

5.4 With Your Consent

We will share your information for purposes beyond those listed above only with your explicit prior consent.

6. Data Security

Legalitas Compliance Ltd implements comprehensive security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:

SSL/TLS encryption for data in transit
AES-256 encryption for data at rest
Secure password policies and multi-factor authentication
Regular security audits and penetration testing
Access controls and role-based permissions
Incident response and breach notification procedures
Employee training on data protection and privacy

While we implement strong security measures, no system is completely secure. We cannot guarantee absolute security of your information. Please report any security vulnerabilities to compliance@legalitas.bond.

7. Data Retention

We retain personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law:

Customer information: Duration of business relationship plus 7 years (for regulatory compliance)
Marketing communications: Until consent is withdrawn
Website analytics: 26 months
Compliance audit data: 7-10 years per regulatory requirements

Upon request and after fulfilling legal obligations, we will securely delete your personal information.

8. Your Privacy Rights

As a resident of Canada, you have the following rights regarding your personal information:

8.1 Right of Access

You have the right to request access to the personal information we hold about you and receive a copy of that information in a portable format.

8.2 Right to Correction

You may request correction or updating of inaccurate or incomplete personal information we maintain about you.

8.3 Right to Deletion

You have the right to request deletion of your personal information, subject to legal retention obligations and the continued performance of contractual services.

8.4 Right to Withdraw Consent

You may withdraw consent for marketing communications and non-essential processing at any time by contacting us or clicking the unsubscribe link in our emails.

8.5 Right to Lodge a Complaint

You have the right to lodge a complaint with your provincial privacy commissioner if you believe we have violated your privacy rights.

9. Exercising Your Rights

To exercise any of your privacy rights, please submit a written request to:

Legalitas Compliance Ltd

Privacy Officer

1000 Rue de la Gauchetière O

Montréal, QC H3B 4W5

Canada

Email: compliance@legalitas.bond

Phone: +1 514 871 0047

We will respond to your request within 30 days. Please include sufficient information to identify your request and verify your identity.

10. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, remember preferences, and analyze site performance:

Essential Cookies: Required for website functionality (session, security)
Analytics Cookies: Help us understand user behavior and improve services
Marketing Cookies: Enable personalized advertising (requires consent)

You can control cookie preferences through your browser settings. Note that disabling some cookies may affect website functionality. For more information, see our Cookies Policy.

11. Third-Party Links

Our website may contain links to third-party websites and services not operated by Legalitas Compliance Ltd. This Privacy Policy applies only to our website. We are not responsible for the privacy practices of third-party websites. We encourage you to review their privacy policies before providing personal information.

12. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will delete such information immediately.

13. International Data Transfers

Legalitas Compliance Ltd operates primarily in Canada. However, if we transfer your information to countries outside Canada (including the United States), we implement appropriate safeguards including:

Standard contractual clauses with service providers
Data Processing Agreements ensuring equivalent protection
Compliance with applicable cross-border transfer regulations

Any such transfers will be conducted in compliance with Canadian privacy legislation.

14. Marketing Communications

We may send you marketing emails, newsletters, and service announcements if you have consented. You can manage your communication preferences by:

Clicking the "unsubscribe" link in any marketing email
Contacting us directly at compliance@legalitas.bond
Updating your preferences through your account settings

Transactional and service-related emails will continue to be sent regardless of your marketing communication preferences.

15. California and Other Jurisdictions

While Legalitas Compliance Ltd is based in Canada, if you are a resident of California, Virginia, Colorado, Connecticut, or Utah, you may have additional rights under state privacy laws including CCPA, VCDPA, CPA, CTDPA, and UCPA. We comply with these laws by providing:

Right to know what information is collected
Right to access, correct, and delete personal information
Right to opt-out of data sales and targeted advertising
Right to appeal our decision on privacy requests

To exercise these rights, contact our Privacy Officer using the information provided in Section 9.

16. GDPR Compliance

For individuals in the European Union or European Economic Area, we comply with the General Data Protection Regulation (GDPR) by providing:

Transparent privacy information in clear language
Lawful basis for all data processing activities
Data processing agreements with service providers
Right to data portability and erasure
Data Protection Impact Assessments for high-risk processing
Designation of a Data Protection Officer if applicable

You have the right to lodge a complaint with your relevant supervisory authority.

17. Privacy Policy Updates

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by:

Posting the updated policy on our website
Updating the "last updated" date at the top of this policy
Sending email notification for significant changes requiring your consent

Your continued use of our website and services constitutes acceptance of the updated Privacy Policy.

18. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us: