Privacy Policy

We take your privacy seriously - here's exactly how we handle your information

Version Information

Last Updated: November 18, 2025

Effective Date: November 18, 2025

Current Version: 2.1

  • Version 2.1 (Nov 18, 2025) - Updated cookie policy and added PIPEDA compliance details
  • Version 2.0 (Jun 15, 2024) - Major revision to align with updated privacy regulations
  • Version 1.5 (Jan 10, 2024) - Added data retention timelines and clarified third-party sharing
  • Version 1.0 (Mar 5, 2023) - Initial privacy policy published

Introduction

Look, we get it - privacy policies can be a total slog to read through. But since we're lawyers who deal with corporate governance and compliance daily, we figured we'd better walk the talk when it comes to protecting your info.

At Mythralynthos Legal Services, we've been helping businesses navigate the digital age since we opened our doors. That means we understand exactly how valuable your data is and why you'd want to know what happens to it when you reach out to us.

This policy spells out what information we gather, why we need it, and what we do with it. We've tried to keep things straightforward - no legal mumbo-jumbo where we can avoid it. If something's unclear or you've got questions, just give us a shout at contact@mythralynthos.info.

We're based in Toronto and operate under Canadian privacy laws, specifically PIPEDA (Personal Information Protection and Electronic Documents Act). That's important because it means you've got some solid rights when it comes to your personal info.

Information We Collect

We're pretty selective about what we collect - we only grab what we actually need to provide our services and communicate with you effectively.

When you contact us or fill out forms on our site, we'll collect basics like:

  • Your name and title
  • Email address
  • Phone number
  • Company name and address (if you're reaching out on behalf of a business)
  • Any details you share about your legal needs

We don't collect this stuff automatically - you provide it when you decide to reach out to us.

Like most websites these days, ours collects some technical data automatically:

  • IP address
  • Browser type and version
  • Pages you visit on our site
  • Time and date of your visit
  • Referring website (if you came from another site)
  • Device information

This helps us understand how people use our site and where we can make improvements. It's aggregated and anonymized for analytics purposes.

If you become a client, we'll obviously need to collect more detailed information depending on your matter:

  • Corporate documents and business records
  • Intellectual property details and documentation
  • Contract terms and negotiation history
  • Employment records and policies (for HR compliance work)
  • Financial information related to M&A transactions

This information is covered by solicitor-client privilege and handled with extra layers of security and confidentiality.

How We Use Your Information

We're not in the business of selling data or using your info for anything sketchy. Here's what we actually do with it:

Communication

Responding to your inquiries, scheduling consultations, and keeping you updated on your matters. Pretty straightforward stuff.

Service Delivery

Providing legal services, drafting documents, conducting research, and everything else you'd expect from your legal team.

Records Management

Maintaining accurate client files and records as required by our professional obligations and law society rules.

Website Improvement

Analyzing how people use our site so we can make it better and more useful. We want it to actually work for you.

Legal Compliance

Meeting our obligations under PIPEDA, law society rules, and other regulations we're subject to as a law firm.

Billing & Admin

Processing payments, sending invoices, and handling the administrative side of our client relationships.

Important: We'll never use your information for marketing purposes without your explicit consent. If you've given us permission to send you newsletters or updates, you can opt out anytime by clicking the unsubscribe link or emailing us.

Who We Share Your Data With

We're careful about who gets access to your information. Here's the complete rundown:

Service Providers

We work with a handful of trusted service providers who help us run our practice:

  • Cloud storage providers - for secure document storage and management
  • Email services - for communications (they're all Canadian-based or compliant with Canadian privacy laws)
  • Payment processors - for handling billing securely
  • IT support - for maintaining our systems and security

These folks are bound by strict confidentiality agreements and can only use your data for the specific services they provide to us.

Professional Obligations

Sometimes we're required or permitted to share information:

  • With other lawyers or experts when consulting on your matter (always with your knowledge)
  • With courts or tribunals when representing you
  • With regulatory bodies if there's a professional complaint or investigation
  • When required by law or court order
Business Transactions

If we ever merge with another firm or sell our practice, your information would be transferred as part of that transaction. We'd notify you beforehand and ensure the new firm maintains the same privacy standards.

We never sell your data. Period. We're not in that business and never will be. Your information is either used to serve you or protected as part of our professional duties.

How We Keep Your Information Secure

Given what we do - corporate law, IP protection, M&A work - we're pretty paranoid about security. In a good way.

Technical Safeguards
  • SSL encryption for all data transmitted through our website
  • Encrypted storage for all client documents and communications
  • Multi-factor authentication for accessing our systems
  • Regular security audits and penetration testing
  • Firewalls and intrusion detection systems
  • Secure backup systems with redundancy
Physical & Administrative Controls
  • Restricted access to our offices (Suite 2100 isn't exactly easy to wander into)
  • Locked filing cabinets for any physical documents
  • Clean desk policy - no sensitive docs left out overnight
  • Regular staff training on privacy and security protocols
  • Background checks for all employees and contractors
Access Limitations

Only team members who actually need access to your information get it. We use role-based access controls, so the receptionist can't access confidential case files, and lawyers can't mess with IT security settings.

Real talk: No security system is 100% bulletproof. But we invest heavily in protection and stay current with best practices. If there's ever a breach affecting your data, we'll notify you promptly as required by PIPEDA and work to minimize any impact.

Cookies and Tracking

Yeah, we use cookies. But not the delicious kind - the small text files that help websites function properly.

Essential Cookies

These are necessary for the site to work. They handle things like:

  • Keeping you logged into secure areas
  • Remembering your preferences during a session
  • Basic security functions

You can't really opt out of these without breaking the site's functionality.

Analytics Cookies

We use Google Analytics to understand how people use our site. This tells us things like which pages are popular, how long people stick around, and where visitors are coming from. The data's anonymized and we can't identify you personally from it.

Managing Cookies

Most browsers let you control cookies through their settings. You can:

  • Block all cookies (though this might break some features)
  • Delete cookies after each session
  • Accept cookies only from sites you trust

Check your browser's help section for specific instructions.

Note: We don't use cookies for advertising or tracking you across other websites. We're lawyers, not advertisers.

Your Privacy Rights

Under PIPEDA and Canadian privacy law, you've got some solid rights when it comes to your personal information. Here's what you can do:

Right to Access

You can request a copy of the personal information we hold about you. We'll provide it within 30 days, though sometimes it takes a bit longer for complex requests.

Right to Correction

If something's wrong or outdated, let us know and we'll fix it. Accurate records are important to us too.

Right to Erasure

You can ask us to delete your information, though there are some limits here. We might need to keep certain records for legal or professional obligation reasons (like file retention rules from the Law Society).

Right to Object

If you don't want us using your information for a particular purpose (like sending newsletters), just say so. We'll respect that.

Right to Portability

Want to take your data elsewhere? We can provide it in a commonly used format so you can transfer it to another service provider.

Right to Complain

If you think we've messed up with your privacy, you can file a complaint with the Office of the Privacy Commissioner of Canada. We'd prefer you talk to us first so we can fix any issues, but you've got the right to go straight to the regulator.

To exercise any of these rights:

Email us at: contact@mythralynthos.info

Call us at: (416) 555-8742

Or write to us at: Suite 2100, 181 Bay Street, Toronto, ON M5J 2T3

How Long We Keep Your Information

We don't keep your data forever - that'd be creepy and unnecessary. But we do have to follow certain rules about retention.

Client Files

For actual client matters, we're required by the Law Society of Ontario to keep complete files for at least 10 years after the matter closes. This includes all correspondence, documents, notes, and financial records related to your case.

After that period, we securely destroy files unless there's a specific reason to keep them longer (like ongoing litigation or statute of limitations concerns).

Inquiry Information

If you contacted us but didn't become a client, we'll typically keep your inquiry details for about 3 years. This helps us if you reach out again down the road, but it's not something we need to hold onto indefinitely.

Financial Records

Tax and accounting records stick around for 7 years as required by CRA regulations. This includes invoices, payment records, and related documentation.

Website Analytics

Analytics data is automatically deleted after 26 months in Google Analytics. It's anonymized anyway, so there's no personal information in there to worry about.

When we do delete stuff: We use secure deletion methods that make recovery impossible. For digital files, that means overwriting the data multiple times. Physical documents get shredded or incinerated through certified destruction services.

Children's Privacy

Our services aren't directed at kids. We focus on corporate law, IP, and commercial matters - not exactly stuff that children would be interested in or need.

We don't knowingly collect information from anyone under 18. If you're a parent or guardian and think your child has somehow provided us with personal information, please let us know immediately and we'll delete it.

If a legal matter involves a minor (say, as part of an employment law issue or corporate succession planning), we'd be working with their parent or legal guardian, not collecting information directly from the child.

Changes to This Policy

Privacy laws evolve, technology changes, and sometimes we need to update our practices. When we make significant changes to this policy, here's what happens:

  • We'll update the "Last Updated" date at the top of this page
  • We'll notify active clients via email about any material changes
  • We'll keep old versions in our version history accordion so you can see what changed
  • The new policy takes effect 30 days after we post it, unless the changes benefit you (in which case they're effective immediately)

We recommend checking this page periodically if you're concerned about privacy stuff. We're not going to email you every time we fix a typo or update a link, but we will let you know about substantive changes.

If you continue using our services after changes take effect, we'll take that as acceptance of the updated policy. If you're not cool with the changes, you've got the right to end our relationship (though we hope it doesn't come to that).

Questions About Privacy?

Look, we know this is a lot of information. If you've got questions, concerns, or just want to chat about how we handle your data, we're here.

Call Us
(416) 555-8742
Visit Us

Suite 2100, 181 Bay Street
Toronto, ON M5J 2T3


Privacy Officer:

For formal privacy requests or complaints, please address correspondence to our Privacy Officer at the email or mailing address above. We'll respond to your inquiry within 30 days.