Privacy Policy

We're straight-up committed to keeping your info safe. Here's the full breakdown of how we handle your data - no legal jargon gymnastics, just honest talk about privacy.

Last Updated January 15, 2026
GDPR Compliant

Your data rights protected

Privacy Policy Overview

Key Point: At Nonlinear Form Legal, we're not your typical law firm, and our approach to privacy reflects that. We believe in transparency - you deserve to know exactly what happens with your info.

Look, dealing with legal matters means you're sharing sensitive stuff with us. We get it. That's why we've built our entire practice around protecting client confidentiality and data security. This policy lays out what we collect, why we need it, and how we keep it locked down.

We're bound by Canadian privacy laws (PIPEDA, to be specific), plus we voluntarily comply with GDPR standards because honestly, they just make sense. Our clients work in tech, startups, and innovation spaces - they expect better, and we deliver.

Information We Collect

Personal Information

When you reach out or work with us, we'll collect basics like your name, email, phone number, business details, and address. If you're a client, we'll also need info specific to your legal matter - could be IP documentation, corporate records, contract details, whatever's relevant to helping you out.

Technical Data

Our website grabs some technical stuff automatically - IP addresses, browser types, device info, pages you visit, how long you hang around. Pretty standard web analytics, nothing creepy. We use this to improve the site and understand what content actually helps people.

Communication Records

We keep records of all client communications - emails, call notes, meeting minutes, the works. This isn't us being nosy; it's professional responsibility. Legal matters often span months or years, and accurate records protect both of us.

Heads Up: We'll never ask for sensitive info like passwords or banking details via email. If someone claiming to be us does that, it's not us - reach out directly.

How We Use Your Data

We're gonna be real with you - we only use your data for legitimate reasons. Here's the breakdown:

Providing Legal Services

The main gig - representing you, giving advice, drafting docs, mediating disputes, whatever you've hired us for.

Client Communication

Keeping you updated, answering questions, scheduling meetings - basic relationship stuff.

Legal Compliance

We're lawyers, so yeah, we gotta follow the rules. Law society requirements, conflict checks, regulatory obligations.

Practice Improvement

Understanding what works, what doesn't, how we can serve clients better. All anonymized, of course.

Pro Tip: We'll never use your data for marketing without explicit consent. If you don't want our newsletter or updates, just say so - no hard feelings.

Data Sharing & Third Parties

We're pretty protective of your info, but there are times when we need to share it. Here's who might see your data and why:

Service Providers

We use third-party tools for things like email hosting, document management, cloud storage, and website analytics. These providers are bound by strict confidentiality agreements and data processing terms. We vet 'em carefully.

Legal Requirements

If a court, regulator, or law enforcement agency lawfully demands info, we might have to hand it over. We'll let you know when possible unless we're legally prohibited from doing so.

With Your Consent

Sometimes sharing info helps your case - like with expert witnesses, opposing counsel, or mediators. We'll always ask first and explain why it's necessary.

We Never: Sell your data, share it for advertising purposes, or use it outside the scope of our legal relationship. Period.

Cookies & Tracking Technologies

Yeah, we use cookies - not the edible kind, unfortunately. Here's what's happening behind the scenes:

Cookie Type Purpose Duration
Essential Make the website work properly, handle security Session
Analytics Understand how visitors use our site, improve content 2 years
Preferences Remember your settings and choices 1 year
Cookie Preferences

Control what cookies you're comfortable with. Essential ones can't be disabled (the site wouldn't work), but you've got control over the rest.

Your Privacy Rights

You've got rights when it comes to your data. Here's what you can do and how to do it:

Right to Access

Ask us what personal data we hold about you. We'll provide a copy within 30 days, free of charge for the first request.

Right to Correction

Found something wrong in your data? Let us know and we'll fix it ASAP. Accuracy matters in legal work.

Right to Deletion

Request deletion of your data, though we might need to keep some records for legal or regulatory reasons. We'll explain what stays and why.

Right to Portability

Get your data in a structured, machine-readable format. Take it elsewhere if you want - we'll make it easy.

Right to Object

Don't want us processing your data for certain purposes? You can object, and we'll stop unless there's a compelling legal reason not to.

Right to Restrict

Ask us to limit how we use your data while we sort out a concern or dispute. We'll put a hold on non-essential processing.

To Exercise Your Rights: Send us an email at counsel@nonlinearform.info with "Privacy Rights Request" in the subject line. We'll verify your identity and get back to you within 30 days.

Data Security Measures

Security isn't just a checkbox for us - it's fundamental. Here's how we protect your data:

Encryption

All data in transit uses TLS encryption. Stored data is encrypted at rest. Your files are locked down tight.

Access Control

Only authorized staff can access client data, and only what they need to do their job. We track every access attempt.

Secure Infrastructure

We use enterprise-grade cloud providers with SOC 2 compliance, regular backups, and disaster recovery plans.

Look, no system is 100% hack-proof - anyone who tells you otherwise is lying. But we take reasonable and appropriate measures to minimize risk. Our team gets regular security training, we run penetration tests, and we've got incident response protocols ready to go.

Data Breach Protocol: If we ever experience a breach affecting your data, we'll notify you within 72 hours and tell you exactly what happened, what data was involved, and what we're doing about it.

International Data Transfers

We're based in Toronto, but the internet's global and so are some of our service providers. Here's the deal with international data transfers:

Some of the tools we use - like cloud storage and email services - might store data on servers outside Canada. When that happens, we make sure:

  • The receiving country has adequate privacy protections (or we put extra safeguards in place)
  • We've got data processing agreements with clear security and privacy requirements
  • You're informed if sensitive legal documents will be stored internationally
  • We comply with cross-border data transfer regulations under PIPEDA and GDPR

Most of our infrastructure stays within Canada or uses providers with strong Canadian data centers. But transparency matters, so if you've got concerns about where your data lives, just ask.

Data Retention

We can't just delete everything the moment our work together ends - there are legal and professional obligations we gotta follow.

Active Client Files

While we're working together, we keep everything related to your matter. It's all accessible and actively maintained.

Closed Matters

After wrapping up your case, we typically retain files for 10 years. That's the Law Society of Ontario's recommendation, and it protects both of us if questions come up down the road.

Marketing & General Inquiries

If you contacted us but didn't become a client, we'll keep that info for 2 years max (unless you ask us to delete it sooner). Just basic contact details and what you inquired about.

When retention periods expire, we securely delete or destroy data - no half measures. Digital files are permanently wiped, physical documents are shredded.

Questions About This Privacy Policy?

Privacy law's complicated, and this policy covers a lot of ground. If something's unclear or you've got specific concerns about how we handle your data, don't hesitate to reach out. We're here to explain things in plain English.

Email Us
counsel@nonlinearform.info

We typically respond within 24 hours

Call Us
(416) 555-0187

Mon-Fri, 9:00 AM - 5:00 PM EST

Mailing Address

Nonlinear Form Legal
2450 Victoria Park Avenue, Suite 320
Toronto, ON M2J 4A2
Canada

Complaints: If you're not satisfied with how we've handled your privacy concerns, you can file a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca

Changes to This Privacy Policy

Privacy law and best practices evolve, so this policy might change over time. When we make updates, we'll post the revised version here with a new "Last Updated" date at the top.

For significant changes that affect how we handle your data, we'll send you a notification email if we have your contact info. We won't spring major changes on you without proper notice.

You can always check back here for the current version. We recommend reviewing it periodically, especially if you're a long-term client.