Privacy Statement

Privacy Statement

  • January 27, 2023
  • This Privacy Statement applies to Karen Johnson CPA Professional Corporation.


Karen Johnson CPA Professional Corporation collects personal information from different sources depending on the services that we are providing or whether we are collecting this personal information for our internal business operations. For example, we may collect personal information directly from you when you retain us. In addition, we may collect personal information through third party analytics and advertising companies who assist us in our marketing. These companies may provide us with data about your online activities on other sites where we show our advertising and marketing material.

We collect the following types of personal information:

  • Contact information, such as your name, title, role, employer, telephone, email address, and mailing address.

  • Visitor information when you attend our office or our event, such as your name, company, and person you visited at our office and or event

  • Required information, such as information about the services you have requested.

  • Service information, such as information that you provide or that we generate as part of our services. This information may include financial, spousal, dependent and or beneficiary, residency and other information relevant to us providing tax or other services; customer and vendor information and other company information when we are conducting internal audit or assisting with information technology implementation

  • Public profiles, such as information that you have made public such as on LinkedIn or your company’s website

  • Communications, such as the content of your emails, voicemails, and other communications with us

  • Communication preferences and interests, such as when you subscribe to receive our updates, or other materials

  • Feedback, such as when you fill out client surveys or feedback forms at our events

  • Recruitment information, such as CVs, references, and other information you may provide if you apply for employment or an internship, or that we collect as part of our recruitment activities

  • Portal registration information, such as email address, password and activities using our client portal

  • Device and browser information when you use our website, such as your IP/MAC address, browser type and version, time zone setting, operating system, device type, hardware model, and network information

  • Browsing information when you use our website, such as URL clickstream data about your visit to, through and from our website, page response times, downloads, length of visits and interaction information

  • Marketing interaction information, such as whether clicked on an advertisement or otherwise interacted with our marketing materials


We use personal information to provide services to our clients, to fulfill legal requirements and to operate, market and improve our business. Examples of why we use personal information are:

  • Client services, such as performing internal audits, preparing tax returns, providing bookkeeping and payroll services, providing management consulting and other services to our clients.

  • Vendor management, such as managing the services that third parties deliver to us or to clients on our behalf

  • Relationship management, such as establishing, maintaining, and administering our relationship with you or your employer, and which may include accounting, invoicing, risk analysis, conflict checking, and customizing the services we offer to you

  • Business development, such as client pitches and offering you services that you may be interested in

  • Communications, such as responding to your inquiries, sending you updates, or other material, and managing your preferences

  • Events management, such as reserving your place at our events, noting dietary restrictions or choices, and other event related purposes

  • Feedback, such as client surveys, event feedback, and addressing concerns that you might have

  • Security, such as monitoring who has had access to our premises, and protecting our client portal our website from misuse

  • Website management, such as monitoring what visitors to our website find interesting and whether there are problems with features and functionality

  • Improvement of our business, understanding what our clients and prospective clients find interesting, improving our website.


We may share personal information in order to perform services for our client, to fulfill legal requirements or to operate, market and improve our business. The following are examples of who we may share personal information with:

  • Service providers, who provide outsourced business services to us, who assist us in marketing and advertising or events, or who assist us in providing or managing our information technology and communications systems

  • Analytics providers and advertising networks, who support our analysis of the performance of our website or who assist us in placing advertising on other sites,

  • Emergency responders, emergency contacts, or public health authorities, when necessary to respond to an emergency, or address an urgent occupational health and safety issue or outbreak of communicable diseases

  • Law enforcement bodies and regulators, when required under applicable laws, such as anti-money laundering reports, or where we are reporting a contravention of laws

Consent and other legal bases

There may be several reasons why we might collect, use, share or otherwise handle your personal information. These include:

  • With your explicit or implicit consent, such as when you provide the personal information as part of a request for services or a product, when you provide the personal information for a specific purpose, or we ask you to consent to our use of your personal information for a purpose or for the purposes set out in this Privacy Statement

  • Where is necessary to fulfill our legal obligations, such as where we need to conduct client screening or for other legal and compliance purposes where the law permits us to handle personal information with your consent

  • For the purposes of responding to legal claims against us

  • To conduct investigations where the law permits us to handle personal information without your consent

We may use your business contact information to contact you in your business, role, function, or occupation without your consent. If we send you commercial electronic messages, we will comply with Canada’s Anti-Spam Legislation, subject to any exceptions permitting us to send unsolicited commercial electronic messages. You may unsubscribe from our communications at any time.


We use physical, technical, and organizational security measures that are consistent with standards in the accountancy and professional services industry. These security measures are designed to protect the confidentiality and integrity of personal information in our custody. We use contractual or other means to require our service providers to protect the confidentiality and integrity of personal information we entrust to them. Unfortunately, no system of security measures can guarantee the security and privacy of personal information. If you are sharing highly sensitive information electronically with Karen Johnson CPA Professional Corporation, please speak with us about methods of secure file transfers.

Location and retention

Personal information is stored in Canada.

We retain information for as long as it is necessary to fulfill the purposes for which we collected it. We also retain personal information to meet obligations under applicable laws and regulatory requirements and to maintain records for possible litigation or investigations. Our retention period will vary depending on the nature of the information that is held. For example, we may retain information about you for as long as you are a client. In addition, copies of personal data stored in our electronic backups may be retained until they are destroyed in accordance with the ordinary lifecycle of our backups.

Children and minors

We do not knowingly collect personal information from children or other persons who are under 14 years of age except as part of a client engagement (e.g. the preparation of tax returns and other legitimate reasons). Our website and marketing materials are only for use by individuals who have reached the age of majority in their province or country of residence.

Your rights

Canadian privacy laws provide you with certain rights. Please see “How to contact us” for the contact information of our Privacy Office in order to exercise these rights.

  • Access rights – you have the right to ask us if we have collected information about you and to obtain access to that information. If you wish to exercise this right, please send a written request to our Privacy Officer. We will ask you for information to confirm your identity and may ask you to assist us in describing your relationship with us so that we can locate the relevant personal information. Please note that we may withhold disclosure of personal information in certain cases under applicable laws.

  • Correction – you have the right to ask us to correct any incomplete or inaccurate personal information we hold about you. If we disagree with your correction request, we will insert a note in our files explaining the basis of our refusal to correct the information. We recommend that you raise any issue with incorrect, incomplete, or inaccurate personal information with the personnel who are assisting you. However, you may also make a request to the Privacy Officer.

  • Withdraw of consent – you have the right to ask us to cease collecting, using, or sharing our personal information in some cases. We will do so if we have no further purpose for handling your personal information. You can unsubscribe from any of our electronic marketing communications using the unsubscribe links provided. You may communicate other requests to withdraw consent from the personnel assisting you or you may make a request to the Privacy Officer.

  • Complaints – you have the right to make a complaint to our Privacy Officer about our compliance with this Privacy Statement or applicable privacy laws. We encourage you to raise your concern with the personnel assisting you. However, if you make your complaint to the Privacy Office, we will investigate the matter and report to you about the investigation findings.


We may change this Privacy Statement from time to time. Please refer to the date at the top of this Privacy Statement for the last date. If there is an important change to our privacy practices, we will highlight the changes in this section.

How to contact us

To exercise your rights or to make a complaint, please contact:

In writing:

  • Attn Privacy Officer,
  • Karen Johnson CPA Professional Corporation
  • Unit 12, 106 Saunders Road
  • Barrie, ON L4N 0L6, Canada

Tel.: 705 408 2155

Or via email: ATTN: PRIVACY OFFICE at