Ottawa Master Tax Services

GDPR Compliance Statement

Last Updated: April 28, 2026

1. Introduction

Ottawa Master Tax Services is committed to protecting the privacy and personal data of all individuals, including those in the European Union. While we primarily serve Canadian clients, this page outlines our commitment to GDPR (General Data Protection Regulation) principles.

2. Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: When you provide explicit consent for us to process your data
• Contractual Necessity: To fulfill our services and contractual obligations
• Legal Obligation: To comply with tax laws and regulations
• Legitimate Interests: To operate and improve our business services

3. Data Controller Information

Ottawa Master Tax Services acts as the data controller for personal information collected through our services.

Contact: [email protected]

4. Your GDPR Rights

Under GDPR, you have the following rights:

• Right to Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your data (subject to legal retention requirements)
• Right to Restriction: Request limitation on how we process your data
• Right to Data Portability: Request your data in a structured, commonly used format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

5. Data Protection Measures

We implement appropriate technical and organizational measures including:

• Encryption of sensitive data in transit and at rest
• Access controls and authentication requirements
• Regular security assessments and updates
• Staff training on data protection principles
• Secure storage and disposal of physical documents

6. International Data Transfers

As a Canadian-based organization, personal data may be processed and stored in Canada. We ensure appropriate safeguards are in place for any international data transfers.

7. Data Breach Notification

In the event of a data breach affecting your personal information, we will notify affected individuals and relevant supervisory authorities within 72 hours, as required by GDPR.

8. Retention Periods

We retain personal data only as long as necessary for the purposes outlined in our Privacy Policy or as required by Canadian tax laws and regulations.

9. Exercising Your Rights

To exercise any of your GDPR rights, please contact us:

Email: [email protected]
Address: 385 Bank Street, Suite 200, Ottawa, ON K2P 1Y3, Canada

We will respond to your request within 30 days.

10. Complaints

If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with:

• The Office of the Privacy Commissioner of Canada
• Your local EU supervisory authority (if applicable)