Last Updated: September 26, 2026
Confectus (“we,” “our,” or “us”) is committed to protecting privacy and safeguarding personal information.
This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information obtained through our website (the “Site”), client and prospective-client communications, and related business activities, including Short Message Service (“SMS”) communications.
By providing personal information to Confectus, you acknowledge the practices described in this Privacy Policy. Where consent is required by applicable law, Confectus will obtain consent appropriate to the nature and sensitivity of the personal information and the circumstances.
Information We Collect
We may collect personal information that you voluntarily provide when you:
- Contact us through the Site
- Communicate with us by email, telephone, SMS, or another communication channel
- Request information about our services
- Become a client of Confectus
- Participate in an engagement
- Provide information or documents required for professional services
The personal information collected may include:
- Name
- Email address
- Telephone or mobile number
- Company name and job title
- Communication preferences
- Information included in inquiries and communications
- Information necessary to provide accounting, tax, financial planning, or business advisory services
We may also collect technical information automatically when you use the Site, including your browser type, device information, Internet Protocol address, pages visited, and general usage data.
How We Use Information
Confectus may use personal information to:
- Respond to inquiries
- Communicate with clients and prospective clients
- Coordinate meetings and appointments
- Request information or documents
- Provide engagement and service updates
- Send deadline and follow-up reminders
- Provide accounting, tax, financial planning, and business advisory services
- Maintain client, engagement, and business records
- Manage communication preferences and opt-out requests
- Improve the functionality, security, and user experience of the Site
- Protect our systems, personnel, clients, and business
- Comply with legal, regulatory, professional, insurance, and risk-management obligations
- Establish, exercise, or defend legal claims
Confectus does not sell or rent personal information to third parties.
SMS Communications
Confectus may collect and use mobile telephone numbers, SMS messages, consent records, and communication preferences to provide one-to-one client-service communications and maintain appropriate business records. Messages may relate to scheduling, document requests, engagement updates, deadlines, follow-up questions, and other client-service matters.
Consent to receive SMS messages is optional and is not a condition of receiving services. Message frequency varies, and message and data rates may apply. You may stop receiving messages from the applicable Confectus telephone number by replying STOP or request assistance by replying HELP.
Mobile telephone numbers and SMS opt-in information will not be sold, rented, or shared with third parties or affiliates for their marketing or promotional purposes. Information may be provided to technology providers, telecommunications carriers, and other service providers as necessary to deliver, operate, and secure the SMS service.
SMS is not a secure channel for sensitive information. Do not send Social Insurance Numbers, tax documents, banking information, passwords, identification documents, or other confidential information by SMS. Use a secure method approved by Confectus, such as the secure client portal.
For further information about the SMS service, please review our Terms of Use.
Consent and Communication Preferences
Where consent is required, Confectus may obtain consent verbally, electronically, or in writing, depending on the circumstances and the sensitivity of the personal information.
You may withdraw your consent, subject to applicable legal, regulatory, professional, contractual, and reasonable notice requirements. Withdrawing consent may affect our ability to provide certain communications or services.
Confectus may retain information necessary to document consent, manage communication preferences, and honour opt-out requests.
Cookies and Analytics
The Site may use cookies and similar technologies to improve the user experience, maintain security, and analyze website usage.
Cookies help us understand how visitors interact with the Site but do not provide access to personal information beyond what visitors choose to provide. You may disable cookies through your browser settings, although doing so may affect certain Site features.
Where required by applicable law, we will obtain consent before using non-essential cookies or similar technologies.
Disclosure of Information
Confectus may disclose personal information to service providers that assist with:
- Website hosting and operation
- Information technology and cybersecurity
- Cloud storage
- Email, telephone, and SMS communications
- Client relationship and practice management
- Document management
- Payment processing
- Professional, legal, insurance, and regulatory matters
Service providers are expected to use personal information only for authorized purposes and to apply appropriate confidentiality and security safeguards.
Personal information may also be disclosed:
- With your consent
- Where required or permitted by law
- In response to a lawful legal or regulatory process
- To comply with professional standards or regulatory obligations
- To investigate or prevent fraud, cybersecurity incidents, or unlawful activity
- To protect the rights, property, or safety of Confectus, its clients, its personnel, or others
- In connection with a proposed or completed business transaction, subject to applicable legal requirements
Data Security
Confectus uses reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, collection, use, disclosure, copying, modification, loss, or disposal.
Safeguards may include access controls, authentication measures, staff confidentiality requirements, security monitoring, secure systems, and policies relating to the handling of sensitive information.
No method of electronic transmission or storage, including email and SMS, is completely secure. The safeguards applied will depend on the sensitivity, amount, format, distribution, and storage of the information.
Retention of Information
Personal information is retained only for as long as reasonably necessary to fulfill the purposes for which it was collected and to satisfy applicable legal, regulatory, contractual, insurance, professional, security, and legitimate business requirements.
SMS messages, consent records, opt-out records, and related communications may be retained as part of a client, prospective-client, engagement, compliance, or business record.
When personal information is no longer required, it will be securely destroyed, deleted, or anonymized, subject to applicable retention requirements and technical limitations.
Access and Correction
You may request access to personal information held by Confectus or request that inaccurate or incomplete information be corrected.
Access and correction rights are subject to applicable legal limitations. Confectus may take reasonable steps to verify your identity before processing a request.
Requests may be submitted using the contact information provided on this website.
Third-Party Websites and Services
The Site and our communications may contain links to third-party websites or services.
This Privacy Policy does not apply to independent third parties. Confectus does not control and is not responsible for the privacy, security, availability, content, or practices of third-party websites or services.
You should review the applicable privacy policies before providing personal information to a third party.
Processing Outside Canada
Personal information may be processed, accessed, or stored in Canada, the United States, or other jurisdictions where Confectus or its service providers operate.
Personal information processed outside Canada may be subject to the laws of the jurisdiction in which it is processed and may be accessible to courts, law enforcement authorities, national security authorities, or regulatory bodies in accordance with applicable law.
Where appropriate, Confectus uses contractual, organizational, and technical measures intended to protect personal information handled by service providers.
Changes to This Privacy Policy
Confectus may update this Privacy Policy from time to time to reflect changes to its practices, services, technology, or legal and regulatory obligations.
Changes will be effective when posted to this page. The “Last Updated” date indicates when the Privacy Policy was most recently revised.
Where required by applicable law, Confectus will provide additional notice or obtain consent for material changes.
Contact Information
If you have questions about this Privacy Policy, SMS communications, access or correction requests, or how Confectus handles personal information, please contact Confectus using the contact information provided on this Site.