Privacy Policy

Outsource Bookkeeping (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you visit our website at outsourcebookkeeping.ca or engage our bookkeeping services. We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.

1. Information We Collect

We may collect the following types of personal information:

• ●Contact information — name, email address, phone number, and business address
• ●Business information — company name, industry, province, and annual revenue range
• ●Financial records — transaction data, bank statements, and accounting files you share with us to perform bookkeeping services
• ●Communication records — emails, messages, and notes from consultations
• ●Usage data — IP address, browser type, pages visited, and time spent on our website (via analytics tools); if you submit a contact form, this usage data is linked to the contact details you provide

2. How We Use Your Information

We use your personal information to:

• ●Provide bookkeeping, HST/GST filing, and financial reporting services
• ●Communicate with you about your account and our services
• ●Process payments and maintain billing records
• ●Comply with CRA requirements and Canadian tax laws
• ●Improve our website and service quality
• ●Send you relevant updates, newsletters, and promotions (with your consent)

3. Disclosure of Information

We do not sell your personal information to third parties. We may share your information only in the following circumstances:

• ●With your accountant, as directed by you for year-end and tax filings
• ●With cloud accounting platforms (QuickBooks Online, Xero) to perform your bookkeeping
• ●With the Canada Revenue Agency (CRA) when required by law
• ●With trusted service providers (cloud storage, payment processors) under strict confidentiality agreements
• ●If required by court order or applicable law

4. Data Security

We implement appropriate technical and organizational safeguards to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes encrypted data transmission (TLS/SSL), access controls, and secure cloud storage. Financial records are retained only as long as necessary to fulfil our service obligations and comply with CRA record-keeping requirements (minimum 6 years).

5. Your Rights Under PIPEDA

Under PIPEDA, you have the right to:

• ●Access your personal information held by us
• ●Correct inaccurate or incomplete personal information
• ●Withdraw consent to the collection or use of your information (subject to legal obligations)
• ●Request deletion of your personal information after the service relationship ends
• ●File a complaint with the Office of the Privacy Commissioner of Canada

6. Cookies and Analytics

Our website uses cookies and similar technologies in three categories: strictly necessary (for example, remembering your cookie choice), analytics, and advertising measurement. By using our website, you consent to these cookies — we show a notice on your first visit, and analytics and advertising cookies run unless you opt out. You can opt out or change your choice at any time via Cookie Preferences, and your choice is remembered on this device.

• ●PostHog (analytics) — records how visitors use our site (pages viewed, buttons clicked) so we can improve it. First-party cookie ph_phc_*, about 1 year. If you submit a contact or quote form, we link the email address you provide to your visit activity on our site so we can respond effectively and understand which pages lead to genuine inquiries.
• ●Google Analytics 4 (analytics) — aggregate traffic statistics. Cookies _ga / _ga_*, up to 2 years. You can additionally opt out with the Google Analytics Opt-Out Browser Add-on.
• ●Google Ads (advertising) — tells us whether a Google ad brought you here if you contact us. Cookies _gcl_*, about 90 days.
• ●Microsoft Advertising (UET) (advertising) — the same conversion measurement for Microsoft/Bing ads. Cookies _uetsid (1 day) and _uetvid (about 13 months).
• ●Vercel Analytics (performance) — cookieless page-speed and visit metrics; it sets no cookies and stores no personal identifiers.
• ●Koalendar (functional) — our booking calendar, which loads only when you open the booking option; bookings are subject to Koalendar's own privacy policy.
• ●Consent storage (strictly necessary) — your cookie choice itself, kept in your browser's local storage (obk_consent) until you clear it or our policy version changes.

Opting out of non-essential cookies does not affect your ability to browse the site, contact us, or book a call. If you opt out of advertising cookies, Google may still receive cookieless, aggregate signals used for conversion modeling; no advertising cookies are set on your device.

Disabling Cookies in Your Browser

In addition to the Cookie Preferences control above, you can block or delete cookies entirely through your browser settings (see your browser's Help section for instructions). Be aware that blocking all cookies affects this and most other websites you visit: strictly necessary features — such as remembering your cookie choice or keeping the booking calendar working — may stop functioning. Blocking only third-party cookies is a lighter option that most modern browsers offer.

7. Children's Privacy

Our services are intended for businesses and are not directed at individuals under the age of 18. We do not knowingly collect personal information from minors.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated “Last updated” date. Your continued use of our services after any changes constitutes acceptance of the revised policy.

9. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights under PIPEDA, please contact us: