Privacy Policy

We're pretty serious about keeping your financial data safe and secure. Here's how we handle your information.

Last Updated: November 13, 2025
Quick Navigation

Look, we get it. Privacy policies can be a real snooze-fest. But when you're dealing with financial data, it's kinda important to know who's doing what with your info, right?

At Mystral Chronicle Accounting, we've been handling sensitive financial information for years, and we take that responsibility seriously. This isn't just legal mumbo-jumbo - it's our commitment to you about how we handle, protect, and respect your data.

We're bound by Canadian privacy laws (including PIPEDA) and professional accounting standards. Plus, we've added our own extra layers of protection because, honestly, your financial data deserves it.

Here's what we typically need from you to do our job properly:

Personal Identification
  • Basic stuff: Name, address, phone number, email
  • Government IDs: SIN numbers, business numbers, GST/HST registration numbers
  • Birth dates and other identification info required for tax filings
Financial Information
  • Bank account details for payroll and CRA remittances
  • Income statements, expenses, receipts - the whole nine yards
  • Investment information, property details, mortgage info
  • Business revenue and expense records
  • QuickBooks data and other accounting software exports
Technical Data
  • IP addresses and browser info when you use our Client Portal
  • Login credentials and access logs (for security purposes)
  • Usage patterns on our cloud-based systems
Heads up: We only collect what we actually need to provide our services. If we're asking for something, there's a legitimate reason for it.

We're not in the business of selling your data or spamming you with junk. Here's what we actually do with your information:

Core Accounting Services

Preparing your tax returns, managing bookkeeping, creating financial statements, and handling payroll

CRA Compliance

Filing your taxes, submitting GST/HST returns, making payroll remittances, and dealing with government correspondence

Communication

Sending you updates about your account, tax deadlines, and important financial notices

Advisory Services

Providing strategic planning, financial analysis, and business advice tailored to your situation

We'll also use your info to improve our services and make sure everything's running smoothly. But don't worry - we're not gonna suddenly start sending you marketing emails for stuff you didn't sign up for.

Alright, this is where we really shine. Security isn't just a checkbox for us - it's basically our obsession.

Technical Safeguards
  • Bank-level encryption: Everything's encrypted both in transit and at rest (that's fancy talk for "it's scrambled when moving around and when sitting still")
  • Secure cloud infrastructure: We use enterprise-grade cloud services with redundant backups
  • Multi-factor authentication: Your client portal access requires more than just a password
  • Regular security audits: We test our systems constantly to find vulnerabilities before the bad guys do
  • Firewall protection and intrusion detection systems
Physical & Administrative Controls
  • Our office at 1255 West Pender Street has controlled access - no randos walking around
  • All staff sign confidentiality agreements (yeah, even the summer students)
  • Regular training on data protection and privacy best practices
  • Strict access controls - people only see what they need to see
Bottom line: We protect your data like it's our own. Actually, probably better than our own, if we're being honest.

We're not gonna lie - sometimes we need to share your info. But it's always for good reasons, and we're careful about it.

Government Agencies

Kind of a no-brainer here. We share your tax info with:

  • Canada Revenue Agency (CRA) - for tax filings, GST/HST returns, payroll remittances
  • Provincial tax authorities when applicable
  • Other government bodies only when legally required
Service Providers

We work with trusted partners who help us deliver our services:

  • Cloud storage providers (all Canadian or Canadian-compliant)
  • QuickBooks and other accounting software companies
  • Payment processors for handling transactions
  • IT support and security firms (all under strict NDAs)
Professional Advisors

Sometimes we need to consult with lawyers, insurance providers, or other professionals on your behalf. But only with your consent or when legally necessary.

Important: We NEVER sell your data to third parties. Like, ever. That's not how we roll.

Yeah, we use cookies. But not the delicious kind, unfortunately.

What We Track
  • Essential cookies: Keep you logged into the client portal and remember your preferences
  • Analytics cookies: Help us understand how people use our site (totally anonymous, don't worry)
  • Security cookies: Detect suspicious activity and protect against attacks
Your Control

You can disable cookies in your browser settings. Just keep in mind that some features (like the client portal) won't work without them. It's like trying to drive a car without wheels - technically possible, but not recommended.

We don't use annoying tracking pixels or sell your browsing data to advertisers. Our website analytics are purely for improving our service, not creeping on you.

We're big believers in cloud technology. It's more secure, more reliable, and way more convenient than old-school filing cabinets. But we're picky about which clouds we trust.

Where Your Data Lives
  • All data is stored on Canadian servers or servers that comply with Canadian privacy laws
  • We use enterprise-grade cloud providers with SOC 2 certification
  • Multiple redundant backups ensure your data never gets lost
  • QuickBooks Online data follows Intuit's security protocols
Benefits of Cloud-Based Bookkeeping
Real-time access
Automatic backups
Enhanced security
Remote collaboration
Disaster recovery
24/7 availability

Our cloud infrastructure is actually more secure than traditional methods. No more USB drives getting lost or papers left on desks. Everything's encrypted and tracked.

We can't just delete everything right away, even if you want us to. The CRA has rules about this stuff, and so do professional accounting standards.

Standard Retention Periods
  • Tax records: Minimum 6 years from the end of the tax year (that's CRA's rule, not ours)
  • Corporate documents: 7 years or longer depending on the type
  • Payroll records: 6 years after the last payment
  • GST/HST records: 6 years from filing
  • Financial statements: Permanently for corporations, 6+ years for others
After the Retention Period

Once we're legally allowed to, we'll securely destroy your records. That means:

  • Digital files are completely wiped (not just deleted)
  • Physical documents are shredded
  • Backups are purged from all systems
Note: If there's an ongoing audit or legal matter, we might need to keep records longer. We'll let you know if that's the case.

You've got rights when it comes to your personal information. Here's what you can do:

Access Your Data

Request a copy of what information we have about you. We'll provide it within 30 days.

Correct Inaccuracies

If something's wrong, let us know and we'll fix it. Accurate records are important for both of us.

Request Deletion

Ask us to delete your data (subject to legal retention requirements - sorry, can't break the law for ya).