Privacy Policy

1. Legal Framework and Scope

snipay. is an online accounting firm providing professional accounting, tax preparation, bookkeeping, and payroll services 100% online across Canada.

This policy applies to all personal information collected by snipay. from individuals, self-employed professionals, corporate business owners, and visitors to our website snipay.ca, whether located in Quebec or anywhere across Canada.

2. Person in Charge of Personal Information Protection (Law 25)

In accordance with Quebec's Law 25, snipay. has formally designated a Privacy Officer responsible for overseeing compliance with privacy legislation, managing data protection protocols, and handling all requests regarding your personal rights:

• Designated Officer: Hamza Maaroufi, Founder & CEO
• Official Email: info@snipay.ca
• Telephone: +1 (819) 701-6385
• Address: snipay., Quebec, Canada

3. Personal Information We Collect

In providing our accounting and tax services, we only collect personal information that is strictly necessary to fulfill our professional engagements:

• Identification and Contact Data: full legal name, home address, email address, telephone number, marital status, and date of birth.
• Government Identifiers: Social Insurance Number (SIN — collected strictly for legal tax filing requirements under the Canadian Income Tax Act), Business Number (BN), provincial tax identification numbers, and sales tax accounts (GST/HST/QST).
• Financial and Accounting Data: tax slips (T4, T5, T3, Relevé 1, Relevé 3), prior Notices of Assessment, bank statements, corporate credit card records, sales and expense logs, receipts, invoices, fixed asset registers, and trial balances.
• Corporate and Payroll Information: articles of incorporation, share registers, employee wages, payroll source deductions (DAS), and employer payroll account numbers.
• Technical and Browsing Information: anonymized IP addresses, browser types, operating systems, and strictly essential cookies required for website performance.

4. Purposes of Collection and Use

Your personal information is collected and used strictly for the following professional and statutory purposes:

• Preparing, optimizing, and electronically filing personal income tax returns (T1 / TP-1) and corporate returns (T2 / CO-17).
• Bookkeeping, bank reconciliations, and preparing uncertified annual or periodic financial statements.
• Calculating and filing sales tax returns (GST, HST, QST) under the regular or quick method of accounting.
• Processing payroll, remitting source deductions, and issuing year-end tax slips (T4, Relevé 1).
• Establishing official representative authorizations with the CRA (AUT-01 / Represent a Client) and Revenu Québec (MR-69).
• Direct communication regarding your files, upcoming statutory tax deadlines, and consultation inquiries.
• Complying with regulatory, legal, and ethical accounting standards applicable across Canada.

5. Consent and Compliance with Canada's Anti-Spam Legislation (CASL)

We collect your personal information only with your informed consent, obtained expressly or impliedly based on our professional engagement.

Under Canada's Anti-Spam Legislation (CASL), we never send unsolicited commercial electronic messages. You can unsubscribe from our informational communications or tax newsletters at any time using the one-click unsubscribe link or by contacting us directly.

You have the right to withdraw your consent to data processing at any time, subject to legal and regulatory tax retention requirements.

6. Disclosure and Data Sharing

snipay. DOES NOT sell, rent, trade, or commercialize any personal information under any circumstance.

Your information is only disclosed to authorized third parties strictly in execution of our client engagements:

• Tax and Government Authorities: Canada Revenue Agency (CRA), Revenu Québec, and relevant provincial ministries of revenue.
• Secure Technology Service Providers: accredited cloud hosting providers located in Canada, certified tax and accounting software platforms (SOC 2 / ISO 27001 compliant), bound by strict non-disclosure covenants prohibiting any secondary use of data.
• Legal and Regulatory Obligations: when required by Canadian law, court order, or authorized regulatory audit by professional accounting bodies.

7. Record Retention and Secure Destruction (CRA 6-Year Rule)

Under Section 230 of Canada's Income Tax Act and Quebec's Tax Administration Act, accounting firms and taxpayers must maintain all accounting books, tax filings, and supporting vouchers for a statutory minimum of six (6) years following the end of the relevant tax year.

snipay. securely retains your financial and tax records for this mandatory duration. Upon expiration of legal retention periods, electronic records are securely and permanently deleted or de-identified in accordance with industry best practices.

8. Security Safeguards and Breach Notification

We maintain rigorous physical, administrative, and technological security controls to safeguard your data against loss, theft, unauthorized access, disclosure, or alteration:

• Bank-grade data encryption in transit (256-bit SSL/TLS protocol) and at rest (AES-256).
• Mandatory Multi-Factor Authentication (MFA/2FA) for all internal systems and portal access.
• Role-based access controls following the principle of least privilege: only team members actively working on your file have access.
• Confidentiality Incident Protocol (Law 25): in the event of a security breach involving a risk of serious injury, snipay. will promptly notify Quebec's Commission d'accès à l'information (CAI), the Office of the Privacy Commissioner of Canada (OPC), and all affected individuals as mandated by law.

9. Data Hosting and Cross-Border Transfers

Our primary servers and databases are located within Canada. If select specialized third-party cloud tools operate data centers outside Quebec or Canada, snipay. conducts a preliminary Privacy Impact Assessment (PIA / ÉFVP) to ensure equivalent legal safeguards and contractual protections.

10. Your Rights: Access, Correction, and Portability

Subject to applicable statutory exceptions, you have the following rights regarding your personal information:

• Right of Access: request confirmation and receive a copy of personal information we hold about you.
• Right to Rectification: request the correction of inaccurate, incomplete, or ambiguous personal data.
• Right to Data Portability (Law 25): receive your computerized personal information in a structured, commonly used technological format.
• Right to Lodge a Complaint: submit a grievance to our Privacy Officer or directly to the Office of the Privacy Commissioner of Canada (priv.gc.ca) or Quebec's Commission d'accès à l'information (cai.gouv.qc.ca).

11. Policy Amendments and Contact

snipay. reserves the right to modify this Privacy Policy to reflect evolving legislative or operational requirements. The updated date at the top of this document will reflect the latest revision.

For inquiries or to exercise your privacy rights, contact our Privacy Officer at info@snipay.ca or by mail at snipay.