Legal

Privacy Policy

Last updated: June 21, 2026

QuipuSOL (“we,” “our,” or “us”) is committed to protecting your personal information and your right to privacy. This policy explains what information we collect, how we use it, and your rights under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

1. Accountability

We are responsible for personal information under our control. Our Principal Accountant is our designated Privacy Officer and can be reached at privacy@quipusol.ca.

2. Identifying purposes

We collect personal and financial information for the following purposes:

  • Providing accounting, bookkeeping, payroll, and advisory services
  • Communicating with you about your account and engagements
  • Complying with legal and regulatory obligations (CRA, provincial regulators)
  • Responding to consultation requests and inquiries submitted via our website
  • Sending service-related communications (appointment confirmations, deadline reminders)

We identify the purpose at or before the time information is collected.

3. Consent

We obtain your knowledge and consent before collecting, using, or disclosing your personal information, except where required or permitted by law. By engaging our services or submitting a form on our website, you consent to the collection and use of your information as described in this policy.

You may withdraw consent at any time, subject to legal or contractual restrictions. Withdrawal of consent may affect our ability to provide services to you.

4. Limiting collection

We collect only the information necessary to fulfill the purposes identified above. We do not collect personal information indiscriminately, and we do not collect information by unlawful means.

Information we typically collect includes:

  • Contact information (name, email address, phone number, business address)
  • Financial records provided for accounting and bookkeeping purposes
  • Payroll information for employees of client businesses
  • Business registration and CRA account information
  • Website inquiry and booking form submissions

5. Limiting use, disclosure, and retention

We use personal information only for the purposes for which it was collected. We do not sell, trade, or otherwise transfer your personal information to third parties without your consent, except:

  • Service providers: Cloud accounting software (QuickBooks Online, Xero), payroll platforms, and secure file transfer services used to deliver our services. These providers are bound by confidentiality obligations.
  • Legal requirements: Where disclosure is required by law, court order, or regulatory authority (e.g., CRA audit requests on your behalf).

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Client financial records are typically retained for seven years in accordance with CRA requirements. Upon termination of engagement, we will return or securely destroy client records upon written request.

6. Accuracy

We keep personal information as accurate, complete, and up-to-date as necessary. If you believe information we hold about you is inaccurate, please contact us and we will correct it promptly.

7. Safeguards

We protect personal information with security measures appropriate to its sensitivity:

  • 256-bit TLS encryption for all data transmitted to and from our systems
  • AES-256 encryption for data stored on cloud platforms
  • Multi-factor authentication required for all internal system access
  • All client data is stored on Canadian servers
  • Access is restricted to team members with a need to know
  • Confidentiality agreements are in place with all team members and contractors

8. Openness

We make information about our privacy policies and practices available upon request. This policy is available on our website and will be provided in writing to anyone who requests it.

9. Individual access

Upon written request, you may access the personal information we hold about you, learn how it has been used and to whom it has been disclosed, and request corrections to any inaccuracies. We will respond to access requests within 30 days. In certain circumstances, we may not be able to provide access (e.g., where disclosure would reveal information about another person).

10. Challenging compliance

You may direct questions or concerns about our privacy practices to our Privacy Officer at privacy@quipusol.ca. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada at www.priv.gc.ca.

Website data

Our website does not use tracking cookies or third-party analytics. Forms submitted on our website (contact and booking forms) transmit data securely to our email service provider (Resend) and are not shared further. We do not use advertising networks or social media pixels.

Contact

Questions about this policy or our privacy practices:
QuipuSOL S.A.C. — Privacy Officer
privacy@quipusol.ca
Tingo María, Peru