Purpose of this Policy
Kormans LLP (the “Firm,” “we,” “us”) is committed to protecting the privacy of individuals who visit kormans.ca, interact with our online forms, or engage our legal services. This policy explains how we collect, use, disclose, retain, and safeguard personal information in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Law Society of Ontario confidentiality obligations.
What Is Personal Information?
“Personal information” means information about an identifiable individual, including—but not limited to—name, e‑mail address, telephone number, mailing address, property address, and documents or data relating to the purchase or sale of real estate.
Information We Collect
We may collect the following information when you interact with our website or legal practice:
1. Contact details: name, e‑mail address, phone number, mailing address.
2. Matter‑specific data: property addresses, purchase and sale agreements, and other documents you choose to upload or provide to us.
3. Technical data: IP address, browser type, pages visited, and similar analytics captured by Google Analytics and (optionally) FullStory or Heap.
We do not collect payment‑card or billing information via our website.
How & When We Collect Information?
We collect information when you:
1. Submit an online form or questionnaire.
2. Upload documents using a secure link generated by Fillout.com.
3. Subscribe to our newsletter.
4. Communicate with us by e ‑mail, telephone, or other channels.
How We Use Information?
Personal information is used to:
1.Respond to inquiries and provide legal services.
2.Open and manage client files.
3.Send newsletters or legal updates (only with your consent, and with an unsubscribe link in every e‑mail).
4.Improve our website and service offerings through aggregate analytics.
We will not use personal information for any other purpose without first obtaining additional consent, unless required or permitted by law.
Your Consent
By voluntarily providing personal information to us, you consent to its collection, use, and disclosure as outlined in this policy. You may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice.
Cookies & Online Tracking
Our site uses Google Analytics and may use FullStory or Heap to understand how visitors navigate our pages. These tools set first‑party and third‑party cookies. You can refuse or delete cookies with a cookie‑consent banner.
Cross‑Border Data Storage & Processing
We engage GrowthSpan Inc. to host and operate our online intake platform. GrowthSpan and its subprocessors store and process data on secure servers located in the United States. Consequently, personal information may be subject to U.S. laws and accessible to U.S. authorities. Each vendor is SOC 2 or ISO 27001 audited and contractually required to protect data to standards equivalent to PIPEDA.
Safeguards
We employ industry‑standard administrative, physical, and technical measures, including:
1.TLS (SSL) encryption for all data in transit.
2.AES‑256 encryption for data at rest within our cloud environments.
3.Multi‑factor authentication and role‑based access for administrator accounts.
4.Vendor platforms that undergo annual SOC 2 / ISO 27001 audits.
5.Confidentiality undertakings for employees and contractors.
Retention & Destruction
We retain client‑matter data as long as required for our professional obligations and business needs. Lead data is currently retained indefinitely. When records are no longer required, we will securely delete or anonymize them using industry‑standard destruction methods.
Note: Industry guidance recommends fixed retention limits (e.g., 6–10 years for real‑estate files). The Firm will revisit its retention schedule periodically.
Third‑Party Disclosure
We do not sell or trade personal information. We may disclose information to trusted service providers (listed in section 8) who assist us in operating our website, conducting our practice, or servicing you, provided they keep such information confidential. We may also disclose information where required by law or court order.
Access, Correction & Deletion Requests
You may request access to, correction of, or deletion of your personal information by writing to privacy@kormans.ca or mailing us at the address below. We will:
1. Verify your identity (e.g., by matching file details or requesting ID).
2. Respond within 30 days as required by PIPEDA, or notify you of any permitted extension.
3. Provide access, make corrections, or securely delete / anonymize data unless legal obligations require us to retain it.
Data Breach Notification
If we become aware of a data breach that creates a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada as soon as feasible, and within the timelines required by law.
Commercial Electronic Messages (CASL)
We send newsletters only to individuals who have expressly subscribed or otherwise provided consent. Each message includes a one‑click unsubscribe link. You may also e‑mail us at info@kormans.ca to be removed from all marketing lists.
Children’s Privacy
Our services are not directed to children under 13. We do not knowingly collect personal information from children.
Changes to This Policy
We may update this policy from time to time. Changes will be posted on this page with an updated “Last updated” date.
Contact Us
Privacy Officer: Taimoor Qureshi
E‑mail: tqureshi@kormans.ca
Phone: 1‑855‑770‑6660
Kormans LLP
46 Village Centre Place, Suite 200
Mississauga, ON L4Z 1V9
Canada
Disclaimer
The content of the Kormans LLP website is provided for informational purposes only and does not constitute legal advice. Viewing this site or communicating with Kormans LLP via the site does not create a solicitor‑client relationship. Confidential information should not be sent via Internet e‑mail or web forms.
.png)
