Privacy Policy

Introduction

Aspen Grove is committed to protecting the privacy and confidentiality of personal information entrusted to us by clients and website visitors. This Privacy Policy outlines how we collect, use, protect, and disclose personal information in accordance with Canadian privacy legislation, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.

Last Updated: January 2025

This policy applies to all personal information collected through our website, during consultations, and throughout client engagements.

Personal Information We Collect

We collect personal information necessary to provide legal services and maintain our professional relationship with clients. The types of information we collect include:

Contact Information

• Name, address, phone number, email address
• Business information and professional titles
• Emergency contact details when provided

Professional Information

• Employment history and credentials (immigration matters)
• Business structure and corporate information (energy transactions)
• Project details and contracts (construction matters)
• Financial information relevant to legal services

Communication Data

• Correspondence via email, phone, or secure portal
• Meeting notes and consultation records
• Documents provided for legal review

Website Usage Data

• IP address and browser information
• Pages visited and time spent on site
• Device type and operating system
• Cookie data (see our Cookie Policy for details)

Collection Methods

We collect personal information through:

• Contact forms on our website
• Email and telephone communications
• Initial consultations and client meetings
• Documents you provide for legal services
• Secure client portal submissions
• Website analytics and cookies

Legal Basis for Processing

We process personal information based on the following legal grounds:

• Consent: You provide explicit consent when submitting information through our website or engaging our services
• Contract Fulfillment: Processing necessary to provide legal services you've retained us to perform
• Legitimate Interest: Processing necessary for our business operations and providing quality legal services
• Legal Obligation: Compliance with Law Society of Alberta requirements and other legal obligations

How We Use Personal Information

Personal information is used exclusively for legitimate purposes related to our legal practice:

Service Provision

• Providing legal advisory services in energy, immigration, and construction matters
• Preparing and reviewing legal documents
• Communicating about your legal matter
• Coordinating with regulatory bodies and third parties as authorized

Practice Management

• Maintaining accurate client files and records
• Scheduling consultations and meetings
• Processing payments and maintaining billing records
• Responding to inquiries and requests

Legal Compliance

• Meeting Law Society of Alberta obligations
• Responding to court orders or legal process
• Maintaining required records

Quality Improvement

• Analyzing service delivery to improve client experience
• Training and professional development
• Website functionality and user experience enhancement

Data Retention

We retain personal information in accordance with Law Society of Alberta requirements and professional standards:

• Client Files: Retained for a minimum of 10 years following matter completion as required by the Law Society of Alberta
• Financial Records: Retained for 7 years as required by tax legislation
• Consultation Records: Retained for 3 years if no formal engagement follows
• Website Data: Analytics data retained for 26 months

Following retention periods, personal information is securely destroyed or anonymized. Electronic files are deleted using secure methods, and physical documents are shredded.

Information Security

We implement comprehensive security measures to protect personal information from unauthorized access, use, or disclosure:

Technical Safeguards

• Encrypted communication channels for email and client portal
• Secure cloud storage with encryption at rest
• Regular security updates and vulnerability assessments
• Firewall protection and intrusion detection
• Multi-factor authentication for system access

Administrative Safeguards

• Access limited to personnel directly involved in your matter
• Confidentiality agreements with all staff
• Regular privacy and security training
• Clear document retention and destruction policies

Physical Safeguards

• Secure office premises with controlled access
• Locked filing cabinets for physical documents
• Secure disposal procedures for confidential materials

Breach Response

In the unlikely event of a data breach affecting personal information, we will notify affected individuals and relevant authorities as required by law. We will take immediate steps to contain the breach and prevent further unauthorized access.

Your Privacy Rights

Under Canadian privacy legislation, you have the following rights regarding your personal information:

Right to Access

You may request access to personal information we hold about you. We will provide this information within 30 days, subject to any legal restrictions or solicitor-client privilege considerations.

Right to Correction

If you believe personal information we hold is inaccurate or incomplete, you may request corrections. We will update records or append your correction request to the file as appropriate.

Right to Erasure

You may request deletion of personal information, subject to our legal and professional obligations to maintain certain records. We will explain any limitations on our ability to delete information.

Right to Restrict Processing

You may request that we limit how we use your personal information. We will accommodate such requests where possible while maintaining our ability to provide legal services and meet professional obligations.

Right to Data Portability

You may request a copy of your personal information in a structured, commonly used format that can be transferred to another service provider.

Right to Object

You may object to certain uses of your personal information. We will cease such uses unless we have compelling legitimate grounds that override your interests.

Right to Withdraw Consent

Where we process personal information based on your consent, you may withdraw that consent at any time. This will not affect the lawfulness of processing before withdrawal.

To exercise any of these rights, contact our privacy officer at [email protected]. We will respond to requests within 30 days and provide information about any fees or limitations that may apply.

Third-Party Services

We engage trusted third-party service providers to support our legal practice. These providers may have access to personal information only as necessary to perform their functions:

Cloud Storage Providers

We use Canadian-based cloud storage services with encryption and security protocols meeting legal industry standards. Data remains stored in Canada.

Communication Platforms

Our secure client portal and email systems are provided by vendors meeting stringent security requirements for legal communications.

Website Analytics

We use Google Analytics to understand how visitors use our website. This helps us improve user experience. Analytics data is anonymized where possible.

Payment Processing

Payment information is processed through secure, PCI-compliant payment processors. We do not store complete credit card information.

All third-party providers are contractually obligated to maintain confidentiality and use personal information only for specified purposes. We conduct due diligence to ensure providers meet appropriate privacy and security standards.

International Data Transfers

We primarily store and process personal information within Canada. In limited circumstances, information may be transferred outside Canada:

• When necessary to provide legal services (such as coordinating with foreign counsel)
• When you explicitly authorize such transfer
• As required by law or legal process

When information is transferred outside Canada, we implement appropriate safeguards such as standard contractual clauses and ensure recipients provide adequate protection for personal information.

Cookies and Tracking

Our website uses cookies and similar tracking technologies. For detailed information about our use of cookies, including what cookies we use and how to manage your preferences, please see our Cookie Policy.

Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take steps to delete it promptly.

Policy Updates

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will notify clients of material changes through:

• Email notification to active clients
• Prominent notice on our website
• Updated "Last Modified" date at the top of this policy

Your continued use of our services following policy updates indicates acceptance of the revised terms. If you do not agree with changes, please contact us to discuss your concerns.

Contact Information

For questions about this Privacy Policy or how we handle your personal information, please contact: