Effective Date: September 23, 2026
1. Introduction and Company Information
Northbridge Estate Planning Inc. (“Northbridge Estate Planning Inc.,” “we,” “us,” or “our”) is committed to protecting the privacy and confidentiality of personal information entrusted to us. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information in the course of providing estate-planning services in Canada.
This Privacy Policy is intended to reflect our practices and to comply with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, provincial privacy legislation and professional obligations relevant to estate-planning services.
Northbridge Estate Planning Inc.
93 Front St E, Suite 402
Toronto, ON M5E 1E7
Canada
Email: [email protected]
Phone: +1 (416) 837-4926
2. Data Collection and Processing
We collect personal information that is reasonably necessary to provide estate-planning and related professional services, to comply with legal and regulatory obligations, and to manage our business operations. The types of personal information we may collect include:
- Contact information, such as name, address, email address, and telephone number;
- Identification information, such as date of birth, government-issued identification details, and other identity verification information;
- Family and household information, including marital status, dependants, beneficiaries, executors, attorneys, trustees, and relationships relevant to estate planning;
- Financial information, including assets, liabilities, income, business interests, insurance information, and estate-related financial details;
- Tax-related information and related supporting records;
- Health-related information, where relevant to capacity, succession planning, powers of attorney, or other estate-planning matters and where permitted by law;
- Documents and instructions you provide to us, including wills, trusts, powers of attorney, beneficiary designations, and correspondence;
- Information collected through our website and communications, including inquiry forms, emails, call records, appointment information, and technical data such as IP address, browser type, device identifiers, and usage logs;
- Payment and billing information, where applicable.
We generally collect personal information directly from you. We may also collect personal information from third parties where permitted or required by law, including:
- Family members or representatives authorized to act on your behalf;
- Financial institutions, insurance providers, accountants, legal professionals, and other advisors involved in your matter;
- Government bodies and public registries;
- Service providers assisting with identity verification, secure storage, communications, and information technology.
We may process personal information manually and by electronic means. Processing may include collection, recording, organization, storage, adaptation, retrieval, consultation, use, disclosure, transmission, and destruction.
3. Purpose of Data Processing
We process personal information for the following purposes:
- To provide estate-planning consultations and related services;
- To assess your needs, objectives, and instructions for wills, trusts, powers of attorney, probate-related planning, incapacity planning, and beneficiary coordination;
- To verify identity and prevent fraud or unauthorized access;
- To draft, review, store, and administer documents and records related to your estate-planning matters;
- To communicate with you about appointments, updates, requests for information, and service-related matters;
- To process invoices, payments, and account administration;
- To comply with legal, regulatory, tax, accounting, insurance, and professional obligations;
- To maintain internal business records and quality assurance;
- To improve our services, website functionality, security, and user experience;
- To detect, investigate, and prevent errors, misuse, fraud, or unlawful activity;
- To defend and establish legal rights and claims.
4. Legal Basis for Processing
Under Canadian privacy law, we generally rely on one or more of the following grounds to process personal information:
- Consent: Where you have provided express or implied consent for collection, use, or disclosure of your personal information;
- Contractual necessity: Where processing is necessary to provide requested services or perform obligations arising from our engagement with you;
- Legal and regulatory compliance: Where processing is required to comply with applicable laws, court orders, tax obligations, anti-fraud requirements, or professional duties;
- Legitimate business purposes: Where processing is reasonably necessary to administer our operations, ensure security, improve services, or manage risk, and where such interests do not override your privacy rights;
- Vital or protective interests: Where necessary to protect an individual’s legal, financial, or physical interests in exceptional circumstances.
Where consent is the basis for processing, you may withdraw that consent subject to legal or contractual restrictions and reasonable notice, as described below.
5. Data Sharing and Third Parties
We do not sell personal information. We may disclose personal information to third parties only as reasonably necessary for the purposes described in this Policy, including:
- Service providers that support our operations, such as IT hosting, document management, secure communication platforms, backup and disaster recovery, payment processing, analytics, and administrative support;
- Professional advisors, including lawyers, accountants, tax professionals, financial advisors, and insurance professionals, where relevant to your matter and with appropriate authority or consent;
- Financial institutions and custodians, where necessary to implement planning instructions or manage related transactions;
- Government, regulatory, law enforcement, or judicial authorities, where required or permitted by law;
- Persons you authorize us to communicate with, including executors, attorneys, trustees, beneficiaries, or family members;
- Third parties involved in a corporate transaction, such as a merger, reorganization, acquisition, financing, or sale of assets, subject to confidentiality protections.
We require third-party service providers to protect personal information through contractual, technical, and organizational safeguards appropriate to the nature of the information and the risk involved. However, where a third party independently determines how it uses your personal information, its own privacy policy may apply.
6. Data Transfer to Third Countries
Some of our service providers may store, access, or process personal information outside Canada, including in the United States or other foreign jurisdictions. As a result, your personal information may be subject to the laws of those countries and may be accessible to courts, law enforcement, or national security authorities in those jurisdictions.
Where personal information is transferred outside Canada, we take reasonable steps to ensure a comparable level of protection through contractual safeguards, due diligence, access controls, and security measures appropriate to the sensitivity of the information.
7. Storage Duration
We retain personal information only as long as necessary for the fulfillment of the purposes for which it was collected, and for any additional period required or permitted by law, professional standards, tax obligations, or dispute resolution needs.
Retention periods may vary depending on the type of information and the nature of the engagement. In general:
- Client matter records may be retained for several years after completion of services to address follow-up questions, compliance, and legal claims;
- Accounting and tax records may be retained for the period required by applicable laws;
- Website and communication logs may be retained for limited periods necessary for security, troubleshooting, and analytics.
When personal information is no longer required, we will securely delete, destroy, anonymize, or archive it in accordance with applicable law and our retention practices.
8. User Rights
Subject to applicable law, you may have the following rights regarding your personal information:
- Access: You may request access to the personal information we hold about you and information about how it has been used and disclosed;
- Rectification: You may request correction of inaccurate, incomplete, or outdated personal information;
- Erasure: You may request deletion of personal information where legally permissible;
- Restriction: You may request that we restrict certain processing in limited circumstances;
- Data portability: Where applicable, you may request a copy of certain personal information in a structured and commonly used format;
- Objection: You may object to certain uses of personal information based on our legitimate interests or similar grounds, subject to legal and contractual limitations.
To exercise any of these rights, please contact us using the details provided below. We may need to verify your identity before responding. We will respond within a reasonable time and in accordance with applicable law.
9. Withdrawal of Consent
Where we rely on your consent to process personal information, you may withdraw that consent at any time by contacting us, subject to legal, regulatory, contractual, or professional obligations that may require continued processing or retention.
Please note that withdrawing consent may affect our ability to provide certain services or continue a matter. We will explain any implications where relevant.
10. Right to Complain
If you have concerns about our privacy practices, you are encouraged to contact us first so we can attempt to resolve the issue promptly and fairly.
You may also have the right to submit a complaint to the Office of the Privacy Commissioner of Canada or, where applicable, a provincial privacy commissioner or other supervisory authority.
We welcome the opportunity to address your concerns before you escalate them to a regulator.
11. Data Security
We use reasonable administrative, technical, and physical safeguards designed to protect personal information against loss, theft, unauthorized access, disclosure, copying, use, or modification. These measures may include:
- Access controls and role-based permissions;
- Encryption in transit and, where appropriate, at rest;
- Secure document storage and backup procedures;
- Authentication and password protections;
- Staff confidentiality obligations and privacy training;
- Vendor due diligence and contractual safeguards;
- Monitoring and incident response procedures.
Although we take appropriate steps to protect personal information, no method of transmission or storage is completely secure. You share information with us at your own risk to the extent permitted by law.
12. Contact Information
If you have questions, requests, or concerns about this Privacy Policy or our privacy practices, please contact:
Northbridge Estate Planning Inc.
Privacy Contact
93 Front St E, Suite 402
Toronto, ON M5E 1E7
Canada
Email: [email protected]
Phone: +1 (416) 837-4926
13. Changes to Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, technology, or business operations. When we make material changes, we will take reasonable steps to notify you, which may include posting the revised policy on our website, updating the effective date, or communicating directly where appropriate.
Your continued use of our services or website after the effective date of the revised Privacy Policy constitutes acknowledgment of the updated terms to the extent permitted by law.