We take your privacy seriously - here's the straight talk on how we handle your information
Look, we get it - privacy policies can be a real slog. But here at Halomorphics, we're environmental lawyers who deal with complex regulations daily, so we figured we'd make ours actually readable.
We collect only what's necessary to provide you with legal services, we don't sell your data (ever), and you've got full control over your information. As lawyers specializing in environmental compliance, we understand the importance of following the rules - and that includes PIPEDA and GDPR.
This policy applies to anyone who interacts with our firm - whether you're a potential client browsing our site, an existing client working with us on Indigenous land claims, or just someone who stumbled here while researching water rights law.
We're not in the business of hoarding data - we collect what we need to do our job effectively. Here's the breakdown:
If you're working with us on sensitive matters like Indigenous rights cases or environmental assessments involving multiple stakeholders, we'll collect additional information specific to that work - but only with your explicit consent.
We're not gonna beat around the bush here - we use your data to provide legal services and run our practice efficiently. That's pretty much it.
We'll occasionally use your contact info to send updates about changes in environmental law that might affect you - like new climate policy regulations or shifts in water rights legislation. Don't worry though, we're not gonna spam you with newsletters every week. You can opt out anytime.
For technical data, we use it mainly to keep our website running smoothly and to spot any security issues before they become problems.
Your data lives on secure Canadian servers (we're big on keeping things local). We use industry-standard encryption, multi-factor authentication, and regular security audits to keep everything locked down tight.
256-bit SSL encryption for data in transit, AES encryption for stored data
Canadian data centers with 24/7 monitoring and redundant backups
Role-based permissions, regular access reviews, MFA required
We've got policies in place for our team too - everyone's trained on data protection, and access to client info is strictly on a need-to-know basis. If someone leaves the firm, their access gets cut off immediately.
That said, no system's 100% bulletproof. If we ever experience a data breach that affects you, we'll notify you within 72 hours and report it to the appropriate authorities as required by PIPEDA. We'll also let you know what steps we're taking to fix things.
Under PIPEDA and GDPR (for our European friends), you've got some solid rights when it comes to your personal data. Here's what you can do:
Request a copy of all the personal info we have about you - we'll get it to you within 30 days
If something's wrong or outdated, let us know and we'll fix it ASAP
Request deletion (though we might need to keep some records for legal/regulatory reasons)
Limit how we use your data in certain situations
Get your data in a format you can transfer to another service
Say no to certain uses of your data (like marketing)
To exercise any of these rights, just shoot us an email at contact@halomorphics.info or give us a call at (604) 555-7821. We'll need to verify your identity first (can't just hand over someone's data to whoever asks), but then we'll get moving on your request.
If you're not satisfied with how we handle your request, you've got the right to file a complaint with the Office of the Privacy Commissioner of Canada. We'd rather work it out directly, but that option's there if you need it.
We're lawyers, so we've got to follow specific rules about record retention - especially for client files. Generally speaking:
| Data Type | Retention Period | Why |
|---|---|---|
| Client files | 10 years after file closure | Law Society requirements, limitation periods |
| Financial records | 7 years | Tax and accounting regulations |
| General inquiries | 2 years | Business operations, follow-up |
| Website analytics | 26 months | Standard analytics period |
| Marketing data | Until you opt out | Ongoing communication |
Once the retention period's up, we securely delete or anonymize your data. For physical documents, that means shredding. For digital files, it's secure deletion that makes recovery impossible.
If there's an ongoing legal matter or investigation, we might need to keep data longer than the standard periods - but we'll only hold onto what's actually necessary.
Our services are geared toward businesses, governments, and adult individuals. We don't knowingly collect information from anyone under 18.
If a parent or guardian believes their child has provided us with personal information, please contact us immediately and we'll delete it. That said, given that we're dealing with environmental law and regulatory compliance, it'd be pretty unusual for someone under 18 to be engaging our services directly.
Laws change, technology evolves, and sometimes we need to update how we do things. When we make changes to this privacy policy, we'll:
For minor updates - like fixing typos or clarifying existing practices - we won't send out mass notifications. But anything that materially affects your rights or how we handle your data? You'll definitely hear from us.
Pro tip: Bookmark this page or check back occasionally if you're working with us on a long-term matter. We'll keep you in the loop, but it doesn't hurt to stay informed.
If you've got questions about this privacy policy, concerns about your data, or want to exercise any of your rights, we're here to help. Don't hesitate to reach out.
Suite 1840, 1055 West Georgia Street
Vancouver, BC V6E 3P3
Canada
We aim to respond to all privacy-related inquiries within 48 business hours. For urgent matters, call us directly.
Seriously - we know privacy policies aren't exactly thrilling reading material. But protecting your information is something we take seriously, both as lawyers and as human beings who value trust. If you made it this far, you probably care about privacy too, and that's the kind of client we like working with.