Cheryl Cheung - Privacy

PIPEDA generally applies to my data handling practices
Canadian Anti-Spam Legislation applies to my commerical electronic messages
some of my information practices are dictated by rules set by the Law Society of Ontario as I am an Ontario-licensed lawyer
other laws may sometimes apply depending on the nature of the legal services being provided
personal information may be collected, used or disclosed to others beyond what is set out in the rest of this policy, but only pursuant to court order or statutory authority

clients and potential clients: generally personal information is collected and used to provide requested information, to perform legal services for you and for my compliance with my legal and professional obligations.
I use some third-party suppliers to support my practice, including some to support your interactions with me. Some of these services may result in the transfer your information outside of Canada.
information may be collected from or provided to third parties for the above purposes
unless a legal exception applies, information provided to me for obtaining legal advice is treated as confidential and privileged
I may also occasionally email you or send through LinkedIn information (such as articles) you might find interesting - opt-out by telling me by any means
third-parties: information about you collected for the purpose of serving my clients will solely be used for such purpose and compliance (e.g. conflict checking)
personal information is never sold

generally my retention of records is dictated by Law Society professional conduct or other rules, or based on Law Society recommendations, e.g.

information to verify clients (e.g. contact information and ID): six years or longer (rule)
specified financial information: ten years (rule)
client files: generally, to be reviewed after 15 years to determine whether they can be destroyed (recommendation)

my email inbox is regularly cleaned, emails no longer deemed necessary are deleted (although those with information potentially still pertinent may be archived)
retention of other information: per any legal requirements, or six years, if no such requirements
records to be securely destroyed at the end of retention period
you may request destruction of your information, but this may impact how services are delivered to you and/or my ability to fully serve you. Further, I may not destroy the records if there are legitimate reasons not to, for example, to abide by laws or rules or if the records may be needed for a legal investigation or proceeding.

my pages are cookie-free but I may include embedded content from third-parties - embedded content may track you as though you visited their native sites, which have their own policies
I also use website services that may collect or store information about you, such as tracking or logging certain visitor information such as IP addresses. This information may be used for monitoring or controlling traffic, or for security purposes
I do not use this information for profiling or marketing.

if you have questions or complaints, send me an email at [email protected]
if you want to file a complaint with the Office of the Privacy Commissioner, contact them at:

My Privacy Statement