Privacy Policy

We take your privacy seriously - here's the straight talk on how we handle your information

Last Updated: January 16, 2026 at 09:00 AM PST
PIPEDA Compliant GDPR Compliant

Introduction

Look, we get it - privacy policies can be a real slog. But here at Halomorphics, we're environmental lawyers who deal with complex regulations daily, so we figured we'd make ours actually readable.

Bottom Line Up Front

We collect only what's necessary to provide you with legal services, we don't sell your data (ever), and you've got full control over your information. As lawyers specializing in environmental compliance, we understand the importance of following the rules - and that includes PIPEDA and GDPR.

This policy applies to anyone who interacts with our firm - whether you're a potential client browsing our site, an existing client working with us on Indigenous land claims, or just someone who stumbled here while researching water rights law.

What We Collect

We're not in the business of hoarding data - we collect what we need to do our job effectively. Here's the breakdown:

Personal Info
  • Name and contact details
  • Email and phone number
  • Mailing address
  • Professional designation (if applicable)
Case Information
  • Details about your legal matter
  • Documents you provide
  • Communication records
  • Billing and payment info
Technical Data
  • IP address and location
  • Browser type and version
  • Device information
  • Pages you visit on our site
Communications
  • Emails and correspondence
  • Phone call notes
  • Meeting records
  • Feedback and inquiries

If you're working with us on sensitive matters like Indigenous rights cases or environmental assessments involving multiple stakeholders, we'll collect additional information specific to that work - but only with your explicit consent.

How We Use Your Information

We're not gonna beat around the bush here - we use your data to provide legal services and run our practice efficiently. That's pretty much it.

Primary Uses
  • Legal representation: Can't really help with your coastal zone litigation without knowing the details, right?
  • Communication: Updates on your case, scheduling meetings, responding to your questions
  • Compliance work: Filing permits, preparing environmental impact assessments, regulatory submissions
  • Billing: Gotta keep the lights on - tracking time, generating invoices, processing payments
  • Improving our services: Understanding what works and what doesn't

We'll occasionally use your contact info to send updates about changes in environmental law that might affect you - like new climate policy regulations or shifts in water rights legislation. Don't worry though, we're not gonna spam you with newsletters every week. You can opt out anytime.

For technical data, we use it mainly to keep our website running smoothly and to spot any security issues before they become problems.

Who We Share Data With (And Why)

Let's be clear: we do not sell your personal information. Period. That's not our business model, and frankly, it'd be unethical given the nature of our work.

That said, sometimes we need to share information with others to do our job properly:

If we're handling your environmental compliance or permitting work, we've gotta share relevant information with government agencies, environmental boards, and sometimes courts. That's literally how the legal system works. We only share what's required by law or necessary for your case.

Complex environmental cases often need input from hydrologists, ecologists, or other specialists. We'll share case details with these experts when necessary, but they're bound by confidentiality agreements just like we are.

We use cloud storage, email services, and case management software. These providers might have access to your data, but they're all vetted, PIPEDA-compliant, and contractually obligated to protect your information.

When you pay us, your payment info goes through secure third-party processors. We don't actually store your full credit card details on our systems - that's handled by PCI-compliant payment gateways.
Legal Obligations

There are rare situations where we're legally required to disclose information - like if there's a court order, a law enforcement investigation, or if we need to protect someone's safety. We'll resist overly broad requests, but we can't ignore lawful demands.

Storage & Security

Your data lives on secure Canadian servers (we're big on keeping things local). We use industry-standard encryption, multi-factor authentication, and regular security audits to keep everything locked down tight.

Encryption

256-bit SSL encryption for data in transit, AES encryption for stored data

Secure Hosting

Canadian data centers with 24/7 monitoring and redundant backups

Access Control

Role-based permissions, regular access reviews, MFA required

We've got policies in place for our team too - everyone's trained on data protection, and access to client info is strictly on a need-to-know basis. If someone leaves the firm, their access gets cut off immediately.

That said, no system's 100% bulletproof. If we ever experience a data breach that affects you, we'll notify you within 72 hours and report it to the appropriate authorities as required by PIPEDA. We'll also let you know what steps we're taking to fix things.

Cookies & Tracking

Yeah, we use cookies - not the chocolate chip kind, unfortunately. These are small files that help our website function and remember your preferences.

Cookie Types We Use
  • Essential cookies: These keep the site working - you can't opt out of these
  • Analytics cookies: Help us understand how people use the site (Google Analytics, aggregated data only)
  • Preference cookies: Remember your settings and choices
  • Marketing cookies: Track whether our ads are actually reaching anyone (we barely use these)

You can manage these in your browser settings or using the consent panel on this page.

We don't use those creepy tracking pixels that follow you around the internet. Our analytics are pretty basic - just enough to know if people are finding what they need on our site.

Your Rights (The Important Stuff)

Under PIPEDA and GDPR (for our European friends), you've got some solid rights when it comes to your personal data. Here's what you can do:

Access Your Data

Request a copy of all the personal info we have about you - we'll get it to you within 30 days

Correct Mistakes

If something's wrong or outdated, let us know and we'll fix it ASAP

Delete Your Data

Request deletion (though we might need to keep some records for legal/regulatory reasons)

Restrict Processing

Limit how we use your data in certain situations

Data Portability

Get your data in a format you can transfer to another service

Object to Processing

Say no to certain uses of your data (like marketing)

To exercise any of these rights, just shoot us an email at contact@halomorphics.info or give us a call at (604) 555-7821. We'll need to verify your identity first (can't just hand over someone's data to whoever asks), but then we'll get moving on your request.

If you're not satisfied with how we handle your request, you've got the right to file a complaint with the Office of the Privacy Commissioner of Canada. We'd rather work it out directly, but that option's there if you need it.

How Long We Keep Your Data

We're lawyers, so we've got to follow specific rules about record retention - especially for client files. Generally speaking:

Data Type Retention Period Why
Client files 10 years after file closure Law Society requirements, limitation periods
Financial records 7 years Tax and accounting regulations
General inquiries 2 years Business operations, follow-up
Website analytics 26 months Standard analytics period
Marketing data Until you opt out Ongoing communication

Once the retention period's up, we securely delete or anonymize your data. For physical documents, that means shredding. For digital files, it's secure deletion that makes recovery impossible.

If there's an ongoing legal matter or investigation, we might need to keep data longer than the standard periods - but we'll only hold onto what's actually necessary.

Children's Privacy

Our services are geared toward businesses, governments, and adult individuals. We don't knowingly collect information from anyone under 18.

If a parent or guardian believes their child has provided us with personal information, please contact us immediately and we'll delete it. That said, given that we're dealing with environmental law and regulatory compliance, it'd be pretty unusual for someone under 18 to be engaging our services directly.

Changes to This Policy

Laws change, technology evolves, and sometimes we need to update how we do things. When we make changes to this privacy policy, we'll:

  • Update the "Last Modified" date at the top
  • Notify active clients by email if the changes are significant
  • Post a notice on our homepage for 30 days
  • Keep previous versions archived (you can request old versions if you're curious)

For minor updates - like fixing typos or clarifying existing practices - we won't send out mass notifications. But anything that materially affects your rights or how we handle your data? You'll definitely hear from us.

Pro tip: Bookmark this page or check back occasionally if you're working with us on a long-term matter. We'll keep you in the loop, but it doesn't hurt to stay informed.

Questions? Get In Touch

If you've got questions about this privacy policy, concerns about your data, or want to exercise any of your rights, we're here to help. Don't hesitate to reach out.

Contact Our Privacy Team

Office Address

Suite 1840, 1055 West Georgia Street
Vancouver, BC V6E 3P3
Canada

We aim to respond to all privacy-related inquiries within 48 business hours. For urgent matters, call us directly.

Thanks for Reading

Seriously - we know privacy policies aren't exactly thrilling reading material. But protecting your information is something we take seriously, both as lawyers and as human beings who value trust. If you made it this far, you probably care about privacy too, and that's the kind of client we like working with.