We're Serious About Privacy
Questions about how we handle your data? Give us a call at (416) 555-0187
Look, we get it - nobody actually enjoys reading these things. But since we're lawyers who deal with cross-border transactions and corporate governance daily, we figured we'd make ours a bit more straightforward. Here's how we handle your information when you work with us or visit our site.
Mythral Expanse Legal ("we," "us," or "our") operates out of Toronto but works with clients worldwide. That means we're subject to Canadian privacy laws - specifically PIPEDA - plus we pay attention to regulations in the jurisdictions where our clients operate.
This policy covers what happens when you interact with us, whether that's through our website, email, phone calls, or in-person meetings. We've structured our practice around international trade and corporate law, which means we're constantly dealing with sensitive business information. We take that responsibility seriously.
By using our services or website, you're agreeing to the terms laid out here. If something doesn't sit right with you, let's talk about it before we move forward.
When you reach out to us or become a client, we'll collect the basics: your name, company name, job title, email address, phone number, and business address. Depending on the nature of your legal matter, we might also need:
Our website collects standard stuff like IP addresses, browser types, device information, and pages you visit. We use this to improve the site and understand how people find us.
We keep records of our conversations - emails, phone call notes, meeting minutes, and documents you share with us. This isn't just good practice, it's required under our professional obligations as lawyers. These records help us serve you better and maintain the attorney-client privilege that protects our relationship.
Here's what we actually do with your information:
Providing legal advice, drafting agreements, conducting due diligence, representing you in negotiations or litigation - basically, doing the job you hired us for.
Maintaining client files, tracking deadlines, managing conflicts of interest, and keeping our professional insurance happy.
Staying in touch about your matters, sending updates, and occasionally sharing relevant legal developments that might affect your business.
Billing, accounting, quality control, staff training, and improving our services based on what we've learned.
We won't use your information for marketing without your explicit consent. If you've worked with us before and we think there's something you should know about, we might reach out - but you can always tell us to stop.
We're pretty protective of your information, but there are times when we need to share it:
When you're involved in a transaction or litigation, we'll share relevant information with the other parties, their lawyers, regulators, courts, or anyone else necessary to get the job done. That's usually implicit in hiring us, but we'll always keep you in the loop.
We work with vetted third parties who help us run our practice - cloud storage providers, document management systems, billing software, IT support, and expert witnesses. They're all bound by confidentiality agreements and only get access to what they need.
If we're legally required to disclose information - court orders, regulatory investigations, or compliance with anti-money laundering laws - we'll do so. Where possible, we'll notify you first unless we're prohibited from doing so.
Since we handle cross-border matters, we sometimes work with lawyers in other countries. We only partner with firms that maintain similar privacy standards, and we ensure appropriate safeguards are in place for international data transfers.
We've invested in proper security because frankly, we're handling information that could make or break deals worth millions. Here's what we've got in place:
No system is 100% secure - anyone who tells you otherwise is lying. But we're doing everything reasonably possible to protect your data, and we stay current with evolving security standards.
Given our focus on international trade, your information might cross borders as part of our work. We're based in Canada, but we might transfer data to:
When we transfer data internationally, we use mechanisms like Standard Contractual Clauses, adequacy decisions, or other approved safeguards. We also assess the privacy laws in the destination country to ensure adequate protection.
If you've got concerns about where your data goes - especially if you're in a jurisdiction with strict data localization requirements - let's discuss it upfront so we can work out appropriate arrangements.
Under Canadian privacy law and other applicable regulations, you've got rights regarding your personal information:
You can request a copy of the personal information we hold about you. We'll provide it within 30 days, subject to legal and professional privilege limitations.
If information we have is inaccurate or incomplete, you can ask us to correct it. We'll update our records and notify anyone we've shared it with if necessary.
You can request deletion of your personal information, though we might need to retain certain records due to legal or regulatory requirements.
You can object to certain uses of your information, particularly for marketing purposes. Just say the word and we'll stop.
In certain circumstances, you can request your data in a portable format to transfer to another service provider.
Where we're processing your data based on consent, you can withdraw it at any time. This won't affect the lawfulness of processing before withdrawal.
To exercise any of these rights, contact us at contact@mythralexpanse.info or call (416) 555-0187. We'll verify your identity before processing requests - standard procedure to make sure we're not giving your information to someone else.
If you're not satisfied with how we've handled a privacy concern, you've got the right to complain to the Office of the Privacy Commissioner of Canada or the relevant supervisory authority in your jurisdiction.
Our website uses cookies - those little files that websites store on your device. Here's what we're using and why:
These keep the site functioning - session management, security features, and basic functionality. You can't really opt out of these if you want to use the site properly.
We use these to understand how people use our site - which pages get visited, where people come from, how long they stay. It helps us improve the experience. We use anonymized data where possible.
These remember your choices - language preferences, display settings, that sort of thing.
We don't use advertising cookies or sell your data to third parties for marketing purposes. That's not our business model.
As a law firm, we're required to keep client files for specific periods - generally 10 years after a matter closes, though it varies depending on the type of work and applicable regulations. This isn't just us being pack rats; it's required by our professional regulators and insurance carriers.
Once the retention period expires and there's no ongoing need, we securely destroy the information. For electronic records, that means secure deletion. For paper files, we use certified destruction services.
If you've got specific concerns about how long we're keeping your information, especially for matters in specialized areas like IP protection where longer retention might be valuable, we can discuss appropriate arrangements.
Got questions or concerns about how we handle your personal information? Don't hesitate to reach out. We'd rather address your concerns directly than have you worry about it.
(416) 555-0187
Business hours: Mon-Fri, 9am-5pm ETPrivacy Officer
Mythral Expanse Legal
Suite 2400, 181 Bay Street
Toronto, ON M5J 2T3
Canada
Privacy laws evolve, our practice changes, and we occasionally learn better ways to do things. When we update this policy, we'll post the new version here with an updated "Last Modified" date at the top.
For significant changes that materially affect how we handle your information, we'll notify current clients directly via email. For everyone else, checking back here occasionally isn't a bad idea - though honestly, we don't change these things very often.
We're lawyers who work on deals and disputes where confidentiality matters. We've built our systems and processes around protecting sensitive information because that's literally part of our professional obligation. If you've got concerns about privacy, that's actually a good sign - it means you're thinking about these things seriously. Let's talk about it.