Privacy Policy

F. Leilaby Accounting Inc. (“we”, “us”) operates this website, fleilaby.ca. This policy explains what personal information the website collects, why, who it is shared with, and the choices you have. It is written to comply with British Columbia’s Personal Information Protection Act (PIPA) and Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).

This policy covers the website only. Information you share with us as a client — tax slips, financial records, anything provided during an engagement — is governed by your engagement letter and by our professional obligations as a Chartered Professional Accounting practice regulated by CPA British Columbia. Those obligations are stricter than anything on this page.

What we collect, and why

When you use the contact form

The form asks for your name, email address, phone number (optional) and a short message. We use these for one purpose: to reply to you. The message is delivered to us as an email; it is not stored in a database on the website.

Sending a message does not create an accountant–client relationship, and we ask that you not include sensitive financial details, social insurance numbers or account numbers in the form. Wait until we have agreed to work together and can offer a secure way to share documents.

To keep the form from being abused by automated spam, it is protected by Cloudflare Turnstile. Turnstile evaluates whether a submission comes from a person rather than a script, and to do that it processes your IP address and some technical information about your browser. We also apply a short-term limit on the number of messages a single IP address can send, which involves holding that address for a few minutes and then discarding it.

When you book a consultation

The “Schedule time with me” button and the calendar link on the contact page open a scheduling tool provided by Calendly. Any information you enter there — your name, email and the appointment details — is collected by Calendly and shared with us so we can hold the appointment. Calendly’s own privacy policy governs how it handles that information. The Calendly widget also loads a script from Calendly’s servers on every page, which may set cookies.

Automatically, when you browse

Like most websites, this one uses analytics to understand how it is used. We use Google Analytics and Google Ads conversion measurement, loaded through Google Tag Manager. These tools collect information such as the pages you visit, how you arrived at the site, the type of device and browser you use, your approximate location derived from your IP address, and whether you completed an action such as sending a message. They do this by setting cookies in your browser. If you contact us after arriving from a Google advertisement, Google Ads may receive a hashed (unreadable) version of the contact details you provided, so that the advertisement can be credited with the enquiry.

The website is hosted on Cloudflare, which as the hosting provider sees the IP address and technical details of every request in order to serve the pages and to protect the site from attacks. Cloudflare may set cookies for security purposes.

We do not use this information to identify you personally, and we do not combine it with the contents of contact form messages.

What we do not do

• We do not sell personal information, or share it for anyone else’s marketing.
• We do not send newsletters or marketing email from this website.
• The website has no user accounts and no login.
• We do not knowingly collect information from anyone under 19, and the website is not directed at them.

Who we share information with

We use a small number of service providers to run the website, and each receives only what it needs to do its job:

• Cloudflare— hosting, content delivery and spam protection (Turnstile).
• Resend— delivers contact form messages to our email.
• Google— analytics and advertising measurement (Google Analytics, Google Ads, Google Tag Manager).
• Calendly— appointment scheduling.

We may also disclose personal information where the law requires it, for example in response to a court order or a lawful request from a regulator.

Information stored outside Canada

The providers listed above are based in the United States and store and process information there and in other countries where they operate. This means that personal information collected through the website — including the contents of contact form messages while in transit — may be stored outside Canada and may be accessible to the courts, law enforcement and national security authorities of those countries under their laws. By using the website you consent to this transfer. If you would rather not, you can reach us by telephone at 778-386-0067 instead of using the form.

Cookies and how to control them

The website itself does not set cookies. The third-party tools described above (Google, Calendly and Cloudflare) do. You can block or delete cookies in your browser settings; the website will continue to work, although some third-party features may not. You can also opt out of Google Analytics across all websites by installing Google’s browser add-on, and manage advertising personalisation in your Google Ads settings.

How long we keep information

Contact form messages are kept in our email for as long as needed to respond and, if a conversation leads to an engagement, as part of that client record. Messages that do not lead to any further contact are deleted within a reasonable period. Analytics data is retained according to Google’s retention settings, which we keep at the default rather than extending.

How we protect it

The website is served only over HTTPS, so information you submit is encrypted in transit. Contact form messages are checked on our server before anything is sent, so a message cannot be forged or altered on the way. Access to the email account that receives messages is limited to the firm.

No method of transmission over the internet is completely secure, which is why we ask you not to send sensitive financial details through the form.

Your rights

Under PIPA and PIPEDA you may ask us what personal information we hold about you, ask us to correct it, or withdraw your consent to our using it (subject to legal and contractual limits). To do any of these, contact us using the details below. We will respond within 30 days, and there is no charge for a reasonable request.

If you are not satisfied with how we have handled your information or your request, you may complain to the Office of the Information and Privacy Commissioner for British Columbia or the Office of the Privacy Commissioner of Canada.

Changes to this policy

If we change how the website handles personal information, we will update this page and change the effective date at the top. Substantive changes will be noted here rather than made silently.

Contact

Faranak Leilaby, BBA, CPA, CGA, is responsible for the firm’s compliance with this policy.

Questions about the website itself, rather than privacy, are also welcome through the contact page.