Privacy Policy

Last Updated: January 2025

Introduction

Ironwood is committed to protecting the privacy and confidentiality of personal information entrusted to us. This Privacy Policy describes how we collect, use, disclose, and safeguard information when you visit our website or engage our legal services.

As a legal practice, we maintain obligations under solicitor-client privilege, professional conduct rules established by the Law Society of Ontario, and applicable privacy legislation including the Personal Information Protection and Electronic Documents Act (PIPEDA).

Information We Collect

Personal Information

When you consult with us or engage our services, we collect information necessary to provide legal representation, including:

  • Full legal name, date of birth, and contact information
  • Government-issued identification numbers where required for specific matters
  • Employment history, income information, and financial records as relevant
  • Immigration history and travel records for citizenship applications
  • Corporate documents and business records for transaction matters
  • Employment contracts and workplace documentation for employment matters

Website Usage Information

When you visit our website, we may automatically collect certain information about your device and browsing behavior through cookies and similar technologies:

  • IP address and general geographic location
  • Browser type, operating system, and device information
  • Pages viewed, time spent on pages, and navigation patterns
  • Referring website or source that directed you to our site

Communications

We retain records of communications with prospective and current clients, including emails, telephone conversations (where noted), letters, and meeting notes. These records form part of client files maintained according to professional requirements.

Legal Basis for Processing

We process personal information based on the following legal grounds:

  • Consent: You provide explicit consent when engaging our services or submitting inquiries through our website
  • Contract Fulfillment: Processing is necessary to provide legal services pursuant to retainer agreements
  • Legitimate Interests: We process information where necessary for legitimate business purposes, including practice management and professional development
  • Legal Obligations: Certain processing occurs to comply with Law Society requirements, court orders, or other legal obligations

How We Use Your Information

Personal information collected is used for the following purposes:

  • Providing legal advice and representation
  • Preparing applications, agreements, correspondence, and other legal documents
  • Communicating with you regarding your legal matter
  • Conducting legal research and analysis relevant to your situation
  • Processing payments and maintaining billing records
  • Complying with professional obligations including conflict checking and reporting requirements
  • Improving our services through analysis of common issues and effective approaches
  • Responding to inquiries about our services
  • Maintaining website functionality and security

Data Retention

We retain client files and personal information in accordance with Law Society of Ontario requirements and professional best practices:

  • Active client files: Retained for the duration of representation plus applicable limitation periods
  • Closed client files: Maintained for a minimum of ten years following matter conclusion, or longer where matters involved minors or may have future significance
  • Financial records: Retained according to tax and accounting requirements, typically seven years
  • Website inquiries: Retained for two years unless the inquiry leads to retention of services

At the conclusion of retention periods, information is securely destroyed through shredding of physical documents and secure deletion of electronic records.

Information Security

We implement appropriate technical and organizational measures to protect personal information against unauthorized access, disclosure, alteration, or destruction:

  • Secure document management systems with restricted access controls
  • Encrypted email communications for sensitive information
  • Regular security assessments and updates to protection measures
  • Staff training on confidentiality obligations and information handling procedures
  • Secure disposal protocols for documents containing personal information
  • Professional liability insurance coverage meeting Law Society requirements

Disclosure of Information

We do not sell personal information. We may disclose information in the following limited circumstances:

With Your Consent

We share information as necessary to represent your interests, including communications with opposing counsel, government agencies, courts, or other parties involved in your legal matter.

Service Providers

We engage third-party service providers who assist with practice operations, subject to confidentiality agreements:

  • Secure cloud storage and document management services
  • Accounting and payment processing services
  • Website hosting and technical support services
  • Professional liability insurance providers

Legal Requirements

We may disclose information where required by law, court order, regulatory authority, or in response to lawful requests by public authorities. Solicitor-client privilege protects most client communications from compelled disclosure, subject to limited statutory exceptions.

Your Rights

You have the following rights regarding your personal information:

  • Access: You may request copies of personal information we hold about you
  • Correction: You may request correction of inaccurate or incomplete information
  • Restriction: You may request limitation of processing in certain circumstances
  • Objection: You may object to processing based on legitimate interests
  • Withdrawal of Consent: Where processing is based on consent, you may withdraw consent at any time

Please note that some rights may be limited by professional obligations. For example, we cannot delete information from active client files or information we are required to retain under Law Society rules. Withdrawal of consent may affect our ability to continue representation.

Cookies and Tracking Technologies

Our website uses cookies to enhance functionality and analyze usage patterns. For detailed information about our use of cookies and your choices regarding them, please see our Cookie Policy.

Third-Party Links

Our website may contain links to external sites not operated by Ironwood. We have no control over and assume no responsibility for the content, privacy policies, or practices of third-party sites. We encourage you to review the privacy policies of any external sites you visit.

International Data Transfers

Our practice operates within Canada, and client information is stored on Canadian servers. If you are located outside Canada and choose to provide information to us, please note that information will be transferred to and processed in Canada according to Canadian privacy laws.

Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors except where they are parties to legal matters requiring representation, in which case information is collected with appropriate parental or guardian consent.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable law. The "Last Updated" date at the top of this policy indicates when changes were last made. Material changes will be communicated through prominent notice on our website or direct communication with active clients.

Contact Information

If you have questions about this Privacy Policy, wish to exercise your rights regarding personal information, or want to file a privacy complaint, please contact us:

Email: [email protected]

Phone: +1 (416) 293-7468

Mail: Privacy Officer, Ironwood
225 King Street West, Suite 1600
Toronto, ON M5V 3M2
Canada

If you are not satisfied with our response to a privacy complaint, you may contact the Office of the Privacy Commissioner of Canada at 1-800-282-1376 or www.priv.gc.ca.