Privacy Policy

We're pretty serious about keeping your information safe. Here's the straight talk on how we handle your data.

Last Updated: January 16, 2026
Download PDF

Look, we get it - nobody actually enjoys reading privacy policies. But since we're lawyers who deal with corporate governance and compliance every day, we figured we'd make ours as straightforward as possible.

At Aerolith Core Legal, we've built our practice on trust and transparency. That doesn't stop at the courtroom door. When you reach out to us about M&A deals, litigation support, or any of our services, you're sharing sensitive business information. We take that responsibility seriously.

This policy covers how we collect, use, store, and protect your personal and business information. We're bound by Canadian privacy laws including PIPEDA (Personal Information Protection and Electronic Documents Act), and we've structured our practices to exceed those requirements.

If you've got questions after reading this, just give us a call at (416) 789-2340. We'd rather have a conversation than leave you confused.

We're not in the business of hoarding data. We only collect what we actually need to provide legal services and communicate with you effectively.

Personal Information You Give Us:
  • Name, title, and company details
  • Email address and phone numbers
  • Business address and corporate information
  • Details about your legal needs and case specifics
  • Financial info when necessary for billing and payment
  • Documents and correspondence related to your matter
Information We Collect Automatically:
  • IP address and browser type
  • Pages you visit on our site and how long you stay
  • Referring website or search terms
  • Device information and operating system

We don't sell your information to third parties. Period. That's not how we operate, and it never will be.

Everything we collect serves a specific purpose related to providing you with top-notch legal services. Here's the breakdown:

Core Legal Services:
  • Providing legal advice and representation in corporate matters, M&A transactions, and business litigation
  • Drafting and reviewing contracts, agreements, and legal documents
  • Managing your case files and maintaining attorney-client communications
  • Conducting legal research specific to your situation
Administrative Purposes:
  • Processing payments and managing billing
  • Scheduling consultations and court appearances
  • Sending you updates about your case or changes to our services
  • Maintaining accurate records as required by law society regulations
Business Operations:
  • Improving our website and client experience
  • Analyzing trends to better serve our corporate clients
  • Sending occasional newsletters about legal developments (you can opt out anytime)

We won't use your info for anything beyond what's described here without getting your explicit consent first.

Attorney-client privilege is sacred to us. We don't share your confidential information without your permission, except in very specific circumstances:

With Your Consent:

When you authorize us to share information with opposing counsel, expert witnesses, or other parties involved in your matter.

Service Providers:

We work with trusted third-party vendors who help us run our practice - think cloud storage providers, billing systems, and legal research databases. These folks are contractually bound to keep your information confidential and can only use it for the services they provide to us.

Legal Obligations:
  • When required by court order or subpoena
  • To comply with law society rules and regulations
  • To prevent fraud or illegal activity
  • When there's a genuine threat to someone's safety
Business Transfers:

In the unlikely event we merge with another firm or sell our practice, your information would transfer to the new entity. We'd notify you beforehand and ensure they maintain the same privacy standards.

We've invested heavily in protecting your data because frankly, it's our butts on the line too. Here's what we've got in place:

Technical Safeguards:
  • 256-bit SSL encryption for all data transmission
  • Encrypted storage systems with regular backups
  • Multi-factor authentication for all staff accounts
  • Firewall protection and intrusion detection systems
  • Regular security audits and vulnerability testing
Physical Security:
  • Secured office space with controlled access at 1250 Bay Street
  • Locked file cabinets for physical documents
  • Shredding of confidential materials
Administrative Controls:
  • Staff training on privacy and data protection
  • Confidentiality agreements with all employees and contractors
  • Role-based access controls - staff only see what they need to

No system is 100% hack-proof, but we're doing everything reasonable to protect your information. If there's ever a breach, we'll notify you promptly as required by Canadian law.

We're required by the Law Society of Ontario to maintain client files for a minimum period, even after your matter concludes. Here's how long we keep different types of information:

Client Files & Legal Documents:

We retain complete client files for a minimum of 10 years after the conclusion of your matter. This includes all correspondence, pleadings, contracts, and related documents. It's not just best practice - it's a regulatory requirement that protects both of us.

Financial Records:

Billing statements, trust account records, and payment information are kept for 7 years minimum, as required by Canada Revenue Agency and law society rules.

Marketing & Website Data:

If you've only contacted us for general inquiries without retaining our services, we'll keep your contact info for up to 3 years unless you ask us to delete it sooner.

Website Analytics:

Anonymous usage data is typically retained for 26 months to help us understand how people use our site.

When retention periods expire and we no longer have a legal obligation to keep your information, we securely destroy it through shredding (physical docs) or permanent deletion (digital files).

Under Canadian privacy law, you've got some solid rights when it comes to your personal information. Here's what you can do:

Right to Access:

You can request a copy of the personal information we hold about you. We'll provide it within 30 days, subject to certain legal exceptions (like work product privilege).

Right to Correction:

If something we've got on file is wrong, let us know and we'll fix it. This is especially important for contact info and business details.

Right to Withdraw Consent:

You can withdraw your consent for us to use your information for non-essential purposes (like marketing emails). Just know that we might still need to retain certain info for legal or regulatory reasons.

Right to Deletion:

You can ask us to delete your information, but there are limits here. We've got professional obligations to maintain client files, so we can't always honor deletion requests immediately. We'll explain our reasoning if we can't comply right away.

Right to File a Complaint:

If you think we've mishandled your information, you can complain to the Office of the Privacy Commissioner of Canada. We'd prefer you talk to us first so we can sort it out directly.

To exercise any of these rights, shoot us an email at info@aerolithcore.info or call (416) 789-2340. We'll respond within 30 days.

Yeah, we use cookies. Not the chocolate chip kind, unfortunately. These are small text files that help our website function properly and give us insights into how people use our site.

Essential Cookies:

These keep the site running - things like remembering your language preferences or keeping you logged into our client portal. Can't really turn these off without breaking the site.

Analytics Cookies:

We use these to understand which pages get the most traffic, how long people stay, and where visitors come from. It helps us figure out what content is actually useful. We use anonymized data for this.

Functional Cookies:

These remember your preferences like font size or layout choices to make your experience better next time you visit.

Managing Cookies:

You can control cookies through your browser settings. Just know that blocking certain cookies might make some features of our site not work properly. Most browsers let you:

  • Block all cookies
  • Delete cookies after you close your browser
  • Allow cookies only from specific sites

We don't use advertising cookies or sell your browsing data to third parties. That's not our business model.

Our website might link to external sites or we might reference third-party services. Here's what you need to know:

External Links:

We sometimes link to court websites, legal research databases, or relevant articles. Once you click through to those sites, you're subject to their privacy policies, not ours. We can't control what they do with your information.

Service Providers We Use:
  • Cloud Storage: We use Canadian-based secure cloud services for document storage
  • Email Services: Professional email hosting with enterprise-grade security
  • Payment Processors: Trusted financial institutions for secure payment handling
  • Practice Management Software: Legal-specific platforms designed for attorney-client confidentiality

All our service providers are vetted for security and privacy compliance. They're contractually obligated to protect your information and can't use it for their own purposes.

Pro tip: Be cautious about what you share via unsecured channels. If you need to send us sensitive documents, reach out first and we'll set up a secure method of transfer.

Privacy laws evolve, technology changes, and our practice grows. We might need to update this policy from time to time.

How We Handle Updates:

When we make changes, we'll update the "Last Updated" date at the top of this page. For minor tweaks (like fixing a typo or clarifying existing practices), that's probably all we'll do.

For significant changes that affect how we handle your information, we'll give you proper notice:

  • Email notification to active clients
  • Prominent notice on our website homepage
  • At least 30 days before the changes take effect
Your Options:

If we make changes you're not comfortable with, you've got options. For current clients, we'd discuss how the changes affect your matter. If you're just on our mailing list, you can opt out anytime.

We recommend checking this page occasionally if you're working with us on an ongoing basis. We try to keep things stable, but it's good to stay informed.

Look, privacy policies can be confusing even when we try to write them in plain English. If you've got questions about how we handle your information, or if you want to exercise any of your privacy rights, just reach out.

Contact Information:

Office:

1250 Bay Street, Suite 800
Toronto, ON M5R 2A5

Phone:

(416) 789-2340

Email:

info@aerolithcore.info

Privacy Officer:

For formal privacy inquiries or complaints, you can request to speak with our designated Privacy Officer who'll handle your matter personally.

Response Time: We aim to respond to all privacy-related inquiries within 5 business days, with full resolution within 30 days as required by PIPEDA.

Prefer to talk in person? We're always happy to discuss privacy matters face-to-face at our Toronto office. Just give us a call to schedule a time that works for you.

The Bottom Line

We've been handling sensitive corporate information for years, and we treat your privacy with the same care we'd want for our own. We collect what we need, protect it seriously, and never sell it to anyone. You've got rights under Canadian law, and we respect them.

If anything in this policy doesn't make sense or if you've got concerns, don't hesitate to reach out. We'd much rather have a conversation than leave you wondering. That's just how we do business at Aerolith Core Legal.