Privacy policy

Diskin & Co respects your privacy. This policy explains how personal information collected through this website is handled, consistent with the Personal Information Protection and Electronic Documents Act (PIPEDA).

Who is responsible

Diskin & Co is the law practice of Matthew Diskin Professional Corporation. Matthew J. Diskin is accountable for the practice’s compliance with this policy and is its privacy contact. You can reach him at [email protected].

What we collect and why

• Contact form. Your name, email address, and optionally your organization and phone number, the area of your inquiry and a short description. This is used only to respond to you and to check for conflicts of interest before any lawyer-client relationship is considered.
• Technical information. Our hosting provider processes standard request information such as IP address and browser type to deliver the site and keep it secure. The contact form uses Cloudflare Turnstile to distinguish people from automated abuse; Turnstile processes limited technical signals for that purpose.
• Analytics. At launch this site uses no analytics and sets no tracking cookies. If privacy-respecting, cookieless analytics are added, this policy will be updated before they are used.

Please do not send confidential or sensitive information through the form. Information you send before a retainer is confirmed may not be protected by solicitor-client privilege.

Consent

By submitting the contact form you consent to the collection and use of your information for the purposes described above. You may withdraw consent at any time by contacting us, subject to legal and professional record-keeping obligations.

How information flows and where it is stored

Contact-form submissions are not stored on this website. They are passed directly to an email delivery service and delivered to the practice’s mailbox. The service providers involved are:

• Netlify, Inc. (website hosting and form processing), United States
• Resend, Inc. (email delivery), United States
• Cloudflare, Inc. (DNS and Turnstile bot protection), United States and global network

Because these providers operate outside Canada, your information may be processed in, and be accessible to authorities under the laws of, other jurisdictions. We require providers to protect information consistent with this policy.

Retention

Website inquiries are retained for 24 months after the inquiry, then securely deleted, except where longer retention is required for conflict-of-interest records or by law.

Safeguards

We use encryption in transit, access controls and multi-factor authentication on the accounts that handle your information, and we limit who can access it.

Access, correction and complaints

You may ask to see or correct the personal information we hold about you by contacting the privacy contact above. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.

Changes

We will post any changes to this policy on this page with a new “last updated” date.