Your privacy matters to us - here's how we handle your information
Last Updated: November 18, 2025 | Version 3.2 (View History)
Look, we get it. Privacy policies are usually boring as hell, and most people don't read them. But here's the thing - when you're dealing with corporate law and international trade matters, your information is sensitive. Really sensitive. So we've tried to make this as straightforward as possible.
At Thornex Arion Legal, we've been handling complex cross-border transactions and corporate governance issues since 2007. Over those years, we've learned that trust isn't just about winning cases - it's about how we handle every piece of information you share with us.
This policy explains what data we collect, why we need it, and how we protect it. We're fully compliant with Canada's PIPEDA (Personal Information Protection and Electronic Documents Act) and where applicable, GDPR for our European clients. But compliance isn't just about checking boxes - it's about doing right by you.
When you reach out or become a client, we'll typically collect:
Like most websites, we gather some technical data:
We're not in the business of selling your data or spamming you. Here's what we actually do with your information:
This is the main reason we need your info. Can't represent you in an M&A deal or handle customs disputes without knowing who you are and what's going on. We use your data to:
Pretty straightforward business operations:
We'll reach out to:
Sometimes we don't have a choice - the law requires us to:
We're pretty selective about who gets access to your information. Here's the full breakdown:
Your information is shared on a need-to-know basis with:
We work with carefully vetted third parties who help us operate:
All these providers sign strict confidentiality agreements and are contractually bound to protect your data.
Sometimes we need to consult with:
We may disclose information when:
If we merge with another firm or sell our practice (unlikely but possible), your files would transfer to the successor firm. You'd be notified in advance and have options if you're uncomfortable with the change.
Under Canadian privacy law (and GDPR for our European clients), you've got some pretty solid rights. Here's what you can do:
You can request a copy of all the personal data we hold about you. We'll provide it within 30 days (usually faster). There's no charge unless the request is super complex or repetitive.
Spot an error in your contact info or other details? Let us know and we'll fix it ASAP. Accurate information is crucial for legal work anyway.
You can ask us to delete your information, but here's the catch - we're legally required to keep client files for 10 years in Quebec (Bar rules). After that retention period, we can delete it. For prospective clients who didn't retain us, we can delete data much sooner.
You can object to certain uses of your data, like marketing communications. Just tell us and we'll stop. However, we can't stop processing data that's necessary for providing legal services you've retained us for.
Want to take your data to another firm? We'll provide your information in a commonly used format. Your files are yours, after all.
For things that require consent (like marketing emails), you can withdraw it anytime. Won't affect the lawfulness of processing before you withdrew consent.
Every marketing email has an unsubscribe link. Click it and you're done. Or email us directly - we're not gonna make it difficult.
Contact our Privacy Officer:
Email: privacy@thornexarion.info
Phone: (416) 555-0187
Mail: 1250 Rene-Levesque Blvd W, Suite 4200, Montreal, QC H3B 4W8
We'll respond within 30 days. If we need more time (complex requests), we'll let you know why.
We take security seriously - our professional insurance and reputation depend on it. Here's how we protect your information:
Security is a two-way street. Here's how you can help:
Reality Check: No system is 100% secure. We do our absolute best, but internet transmission carries inherent risks. That's why we use multiple layers of protection and maintain cyber insurance.
Given that we specialize in international trade and cross-border transactions, data sometimes needs to cross borders too. Here's how we handle that:
We primarily keep data within Canada, but it might be transferred to:
If you're in the EU, we comply with GDPR requirements for international transfers:
Bottom Line: We're experienced with international data transfers - it's kinda our specialty given the work we do. We know the rules and we follow them. If you've got specific concerns about where your data goes, we're happy to discuss it.
Alright, let's talk cookies. Not the chocolate chip kind - the little files that websites drop on your computer. We use them, but not in a creepy way.
These keep the site working. Without them, stuff breaks. They handle:
You can't really disable these if you want to use the site properly, but they don't track you across the internet.
We use these to understand how people use our site. Specifically:
We use Google Analytics with IP anonymization turned on. We see trends, not individuals. Like "100 people visited our M&A page this week" not "John Smith from Toronto visited at 3pm."
These remember your preferences:
You've got options:
Some browsers send "Do Not Track" signals. Honestly, there's no industry standard for how to handle these, so we treat everyone the same - minimal tracking, no ads, respect for privacy. If you've disabled optional cookies, we're already not tracking you beyond what's essential.
Besides cookies, we use:
Our services aren't directed at children. We practice corporate law and international trade - not exactly kid-friendly topics.
We don't knowingly collect information from anyone under 18. If you're a parent or guardian and think your kid has somehow given us their information, contact us immediately and we'll delete it.
That said, we sometimes work on matters involving family businesses where minors might have ownership interests. In those cases, we deal with parents or legal guardians, not the minors directly.
We're here to help. Seriously, don't hesitate to reach out if something's unclear or you've got privacy concerns.
Name: Maria Calderon, Privacy & Compliance Director
Email: privacy@thornexarion.info
Phone: (416) 555-0187 (ext. 305)
Mail: Thornex Arion Legal, Attn: Privacy Officer
1250 Rene-Levesque Blvd W, Suite 4200
Montreal, QC H3B 4W8, Canada
We update this policy occasionally to reflect changes in:
Current Version: 3.2 (November 18, 2025)
When we make material changes, we'll:
Minor changes (typo fixes, clarifications, formatting) won't trigger notifications - we'll just update the version number and date.
By continuing to use our services after we post changes, you're accepting the updated policy. If you don't agree with changes, you can terminate our services (though we hope you won't!). For active client matters, we'll discuss any significant privacy changes that might affect your case.
This policy is available in English and French (we're in Quebec, after all). If there's any conflict between versions, the English version prevails for interpretation purposes.
Last thing: We know privacy policies are typically boring and full of legalese. We tried to make this one different - straightforward, honest, and actually readable. If we succeeded, great. If not, tell us how we can improve it.
Canadian Privacy Law
EU Privacy Standards
Professional Standards