Privacy Policy

This Privacy Policy explains how NDS Consulting Inc. collects, uses, discloses, safeguards and retains personal information through its website, inquiry forms, client portal and professional services. NDS is responsible for personal information under its control and applies the principles of Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and other applicable Canadian privacy laws.

NDS’s privacy contact is available at privacy@ndsconsulting.ca.

Depending on your interaction, NDS may collect your name, email, telephone number, company, inquiry details, appointment information, Google account identifier, client profile, address, family and marital information, tax answers, prior returns, Notices of Assessment, identification, financial and business records, uploaded files, consents, instructions, transaction references, device and security logs, and correspondence.

NDS does not intentionally collect full payment-card numbers; the payment provider processes card information. Public inquiry forms should not contain SIN numbers, banking credentials, passwords or tax-account access codes.

NDS collects information directly from you, from a person you authorize, through your device and browser, through authentication, scheduling and payment providers, and from public or government sources where permitted. NDS may verify information where reasonably necessary to provide services, prevent fraud or comply with law.

NDS uses personal information to respond to inquiries; assess and establish engagements; verify identity and authority; prepare, review and administer tax, accounting and advisory work; build document checklists; communicate and schedule; process payments; secure and improve services; maintain business and professional records; manage conflicts, risk and quality; and meet legal, regulatory, tax and professional obligations.

NDS will not use personal information for a materially new purpose without obtaining consent where required.

Consent may be express or implied depending on the sensitivity of the information and reasonable expectations. By voluntarily providing information for a stated service, you consent to its handling for that purpose. You may withdraw consent on reasonable notice, subject to legal, contractual and record-retention restrictions. Withdrawal may prevent NDS from continuing a service.

NDS sends service messages needed for an inquiry or engagement. Commercial electronic messages are sent in accordance with Canada’s anti-spam legislation, where applicable, and include an unsubscribe method when required.

NDS may disclose information to personnel and contractors who need it; technology, cloud hosting, authentication, communications, scheduling, document-storage and payment providers; professional advisers and insurers; tax and regulatory authorities as authorized; another representative you direct; and parties to a business transaction subject to appropriate safeguards.

NDS does not sell personal information. NDS may disclose information without consent where permitted or required by law, including to investigate fraud, protect rights or respond to lawful process.

Some providers may process or store information outside your province or outside Canada. While there, information may be subject to the laws and lawful access requirements of the foreign jurisdiction. NDS uses contractual and technical measures appropriate to the sensitivity of the information, but cannot prevent lawful access by foreign authorities.

NDS uses safeguards appropriate to sensitivity, including access controls, authentication, private document storage, role-based permissions, transmission protection, service-provider controls and administrative procedures. No internet or storage system is completely secure. You should protect your Google account, devices and contact details and promptly report suspected compromise. See our Security & Data Protection statement.

NDS retains information only as long as reasonably needed for the stated purposes and applicable legal, tax, insurance, dispute and professional-record obligations. Retention periods vary by record and engagement. When no longer required, information is securely deleted, anonymized or destroyed, subject to backup cycles and legal holds. See the Data Retention Policy for specific periods.

You may request access to personal information NDS holds about you and ask for corrections. NDS may verify identity and may withhold information where permitted or required by law, including information about another person, privileged material or information generated in a formal dispute-resolution process. NDS will explain any lawful refusal.

NDS and its providers may use essential browser storage, cookies and logs for sign-in, security, preferences, performance and service operation. Browser controls can restrict cookies, but essential features may stop working. External links and embedded services have their own privacy policies.

Online services are not directed to children who lack capacity to consent. A parent, guardian or other authorized representative must provide information and instructions where required by law.

Contact the NDS Privacy Officer at privacy@ndsconsulting.ca or 7 Duke Street West, Suite 204, Kitchener, Ontario N2H 6N7, Canada. NDS will investigate and respond within a reasonable period.

If a concern is not resolved, you may contact the Office of the Privacy Commissioner of Canada or the applicable provincial privacy regulator. NDS may update this Policy with a new effective date and will provide additional notice or seek consent when required.