Privacy Policy.

Effective August 4, 2026

Thrive CPA respects privacy and is committed to handling personal information responsibly. This policy explains how Thrive CPA collects, uses, discloses, retains, and safeguards personal information in connection with this website, inquiries, prospective-client discussions, and professional services.

This policy is intended to reflect the fair information principles under Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and the confidentiality obligations applicable to members and firms under the CPA Ontario Code of Professional Conduct. It does not reduce any additional legal, professional, recordkeeping, or engagement-specific obligations that may apply.

1. Accountability

Thrive CPA is responsible for personal information under its control. Neso Pantic, CPA, CA is the Privacy Officer and is accountable for privacy practices, inquiries, access requests, correction requests, and complaints.

2. Personal information Thrive CPA may collect

The information collected depends on how you interact with Thrive CPA and may include:

• Contact and inquiry information: name, email address, telephone number, business name, role, appointment details, and information included in an inquiry.
• Prospective-client information: general information about a business, accounting systems, tax situation, year-end, service needs, current records, and existing professional relationships.
• Client and engagement information: identity, corporate, ownership, financial, tax, payroll, transaction, banking, and supporting-document information reasonably required to evaluate, establish, administer, and perform an engagement.
• Communications and records: correspondence, instructions, approvals, meeting notes, documents, authorizations, and records relating to services.
• Website and technical information: IP address, browser or device type, referring page, requested pages, access date and time, and security or server-log information.

Thrive CPA seeks to collect only information reasonably necessary for identified purposes and by fair and lawful means.

3. Why personal information is collected and used

Personal information may be collected, used, or disclosed to:

• respond to inquiries and arrange introductory calls;
• evaluate fit, conflicts, independence, risk, identity, and engagement requirements;
• prepare proposals, engagement letters, authorizations, and onboarding materials;
• provide accounting, tax, bookkeeping, financial reporting, payroll, or advisory services;
• communicate with clients and authorized representatives;
• maintain files, quality controls, billing, and business administration;
• operate, secure, troubleshoot, and improve the website and business systems;
• prevent fraud, misuse, cybersecurity incidents, or unauthorized access;
• meet tax, legal, insurance, professional, regulatory, quality-management, and recordkeeping obligations; and
• carry out other purposes that are identified and consented to, or otherwise permitted or required by law.

4. Consent and choices

Thrive CPA obtains consent in a form appropriate to the sensitivity of the information and the circumstances. Consent may be express or implied, including when you voluntarily send an inquiry, schedule a call, provide information for an engagement, or instruct Thrive CPA to perform services.

You may withdraw consent to optional uses of personal information, subject to reasonable notice and any legal, professional, contractual, or recordkeeping restrictions. Withdrawing consent may limit Thrive CPA’s ability to continue an inquiry or provide services.

Thrive CPA does not add inquiry contacts to promotional email lists without consent or another lawful basis. Commercial electronic messages will identify the sender and provide an unsubscribe mechanism where required by Canada’s Anti-Spam Legislation.

5. When information may be disclosed

Thrive CPA does not sell or rent personal information. Information may be disclosed:

• to employees, contractors, or service providers who require it for authorized duties and are expected to protect it;
• to the Canada Revenue Agency, other government authorities, financial institutions, legal counsel, insurers, successor accountants, or other parties when authorized or necessary for an engagement;
• to CPA Ontario or another professional or regulatory body when required by law, regulation, professional standards, quality review, investigation, or oversight;
• to protect rights, safety, systems, or property, prevent fraud or misuse, or establish or defend legal claims; or
• where disclosure is otherwise permitted or required by law.

6. Service providers and digital tools

Thrive CPA may use service providers for scheduling, email, hosting, secure document exchange, bookkeeping, accounting, tax preparation, workflow management, electronic signatures, payments, and information technology. Depending on the engagement and configuration, these may include providers such as Google services, Calendly, Financial Cents, Hubdoc, website hosting providers, and professional accounting or tax software.

Service providers receive only the information reasonably required for their role and remain subject to their own legal obligations and contractual terms. Thrive CPA remains accountable for personal information transferred to a service provider for processing under Thrive CPA’s control.

The inquiry form on this website is designed to prepare an email in your own email application. The entered information is not sent to Thrive CPA unless you review and send that email. Clicking Calendly or another third-party link takes you to that provider’s service, and its privacy terms also apply.

7. Processing or storage outside Canada

Some service providers may process or store information outside Canada, including in the United States. Information in another country may be subject to that country’s laws and lawful access by courts, law-enforcement bodies, or government authorities. Thrive CPA evaluates service providers and uses safeguards appropriate to the sensitivity of the information.

8. Retention and disposal

Personal information is retained only as long as reasonably necessary for the identified purposes and to meet legal, tax, insurance, professional, regulatory, limitation-period, quality-management, and recordkeeping requirements. Retention periods vary by record type and engagement.

When information is no longer required, Thrive CPA uses reasonable measures to securely delete, destroy, or anonymize it. Backup copies may remain for a limited period until overwritten through normal backup processes.

9. Safeguards and professional confidentiality

Thrive CPA uses administrative, technical, and physical safeguards appropriate to the sensitivity of the information. Measures may include multifactor authentication, access controls, encryption where appropriate, secure portals, device and software updates, backups, confidentiality requirements, and need-to-know access.

No internet transmission or storage system is completely secure. Ordinary email is not appropriate for highly sensitive accounting or tax records. Thrive CPA may require secure portals or other protected methods for confidential documents.

As a CPA practice, Thrive CPA is also subject to professional duties to protect confidential information obtained through professional and business relationships.

10. Website technology, cookies, advertising measurement, and analytics

The website may use essential browser or server technologies needed for security, navigation, and operation. Hosting providers may create server logs containing technical information such as IP address, browser type, requested pages, and timestamps.

The website uses the Google tag for Google Ads conversion measurement. This technology may store or read advertising identifiers and first-party cookies, receive information about an advertisement interaction, and report whether a visitor later completes an action such as booking an introductory call. Thrive CPA uses this information to measure advertising effectiveness and improve campaign decisions, not to obtain the contents of a visitor’s tax records or Calendly appointment notes.

The website loads fonts from Google Fonts, which may cause your browser to connect to Google and transmit technical information such as your IP address. Scheduling is provided through Calendly. When a visitor completes a booking, Calendly may redirect the visitor to a Thrive CPA confirmation page so the completed appointment can be measured. Google and Calendly process information under their own terms and privacy practices and may process information outside Canada.

Browser settings and privacy tools may limit cookies or advertising measurement. Thrive CPA applies restricted Google consent settings for visitors in regions where additional advertising consent requirements apply. Tracking choices and legal requirements may affect the completeness of advertising reports.

11. Privacy breaches

Thrive CPA maintains procedures for responding to loss, unauthorized access, disclosure, or other privacy incidents. Where required by PIPEDA, Thrive CPA will report a breach that creates a real risk of significant harm to the Office of the Privacy Commissioner of Canada, notify affected individuals, and keep required breach records.

12. Access, correction, and accuracy

You may request access to personal information Thrive CPA holds about you and ask how it has been used or disclosed. You may also ask to correct information that is inaccurate or incomplete. Thrive CPA may need to verify your identity before responding.

Access may be limited where permitted or required by law, including where disclosure would reveal another person’s information, confidential commercial information, privileged information, or information subject to another legal restriction. Requests will be handled within the timeframes required by applicable law and generally at little or no cost.

13. Children’s information

This website and Thrive CPA’s services are directed to business owners and adults. Thrive CPA does not knowingly collect personal information from children through the website. Where information about a minor is required for an authorized tax or accounting engagement, it is handled in accordance with the engagement and applicable consent requirements.

14. Questions, requests, and complaints

Direct privacy questions, access or correction requests, and complaints to:

Please write “Privacy Request” in the subject line. Thrive CPA will review and respond to concerns in good faith. You may also contact the Office of the Privacy Commissioner of Canada regarding a privacy concern.

15. Changes to this policy

This policy may be updated when Thrive CPA’s services, systems, service providers, or legal and professional requirements change. The effective date at the top will be revised when material updates are made. Where required, additional notice or consent will be obtained.