01 Regulatory Context & Overview
NorthBridge CPA ("we", "us") operates as a registered Chartered Professional Accounting practice in Ontario and British Columbia. We adhere strictly to the Rules of Professional Conduct established by CPA Ontario, CPABC, and the Personal Information Protection and Electronic Documents Act (PIPEDA).
This Privacy Policy outlines how we collect, use, store, and protect confidential financial information provided to us by corporate clients, business owners, family offices, and high-net-worth individuals during professional accounting, taxation, assurance, and advisory engagements.
02 Collection of Personal & Financial Data
In performing accounting, assurance, and tax advisory services, we collect necessary personal and financial data directly from you or authorized representatives (such as legal counsel or financial institutions). Information collected includes:
03 Purpose of Data Processing
All confidential information entrusted to NorthBridge CPA is collected exclusively for legitimate professional purposes associated with your engagement, including:
• Preparing notice-to-reader compilation statements, reviewed financial statements, and audited financial statements.
• Structuring corporate reorganizations, estate freezes, and succession plans.
• E-filing corporate (T2), personal (T1), trust (T3), and cross-border returns directly with the Canada Revenue Agency (CRA) and Internal Revenue Service (IRS).
• Representing your interests during CRA audits, desk reviews, appeals, and voluntary disclosures.
04 Information Safeguards & Encryption
NorthBridge CPA maintains stringent technical, administrative, and physical security measures to safeguard all digital and hard-copy records from unauthorized access, loss, or disclosure.
Institutional Technical Safeguards
All client file exchanges occur via our secure, encrypted client portal protected by AES-256 bit encryption in transit and at rest. We enforce multi-factor authentication (MFA) across all staff workstations and audit logging protocols across all accounting databases.
Our physical offices feature secure, keycard-restricted file storage vaults, and paper files designated for destruction undergo certified, high-security on-site shredding.
05 Third-Party Disclosure Policy
NorthBridge CPA strictly adheres to professional confidentiality rules. We never sell, rent, trade, or monetize client personal or corporate information under any circumstances.
Information is disclosed only under the following explicit conditions:
1. Client Authorization: When you explicitly instruct us in writing to provide financial statements to your banking institution, legal counsel, or private investors.
2. Statutory & Judicial Requirement: When required by law, subpoena, court order, or mandatory regulatory inspection by CPA Ontario or CPABC.
06 Retention & Secure Disposal
In accordance with the Income Tax Act (Canada) and CPA provincial bylaws, we retain client accounting files and tax working papers for a minimum statutory period of seven (7) years following the taxation year concerned.
Upon expiration of statutory retention mandates, digital records undergo cryptographic deletion from server archives, and physical documents are destroyed via certified cross-cut shredding.
07 Client Rights & Access Requests
Under PIPEDA, you have the right to request access to your personal information retained in our records, verify its accuracy, and request corrections if necessary. You may also withdraw your consent to data processing, subject to contractual engagement terms and statutory tax retention rules.
8. Privacy Officer Contact Details
If you have questions regarding this Privacy Policy or wish to file a formal data privacy inquiry, please contact our designated Principal CPA & Privacy Officer:

