Your trust matters to us - here's how we keep your information secure
Look, we get it - privacy policies can feel like just another legal document you're expected to skim through. But here at Nexurion Citadel Legal, we actually want you to understand how we handle your information. No corporate jargon, no runaround.
We've been practicing corporate law and commercial litigation in Toronto since our doors opened, and one thing hasn't changed: client confidentiality isn't just some regulatory checkbox for us. It's literally the foundation of everything we do.
This policy explains what info we collect when you work with us or visit our site, why we need it, and how we protect it. We've structured it so you can jump to whatever section matters most to you using the sidebar.
We collect different types of information depending on whether you're browsing our site or actually working with us as a client. Here's the breakdown:
Sometimes we'll receive info from other sources - court records, public registries, opposing counsel, expert witnesses, or other professionals involved in your matter. We treat all of this with the same level of care.
We're not in the business of collecting data for the sake of it. Every piece of information we gather serves a specific purpose related to providing you with top-notch legal services. Here's what we do with your info:
To actually represent you - drafting contracts, handling disputes, providing advice, negotiating deals, and all the legal work you've hired us for.
Staying in touch about your case, sending updates, scheduling meetings, responding to your questions and concerns.
Processing payments, generating invoices, maintaining financial records as required by law.
Meeting our professional obligations, conflict checks, anti-money laundering requirements, law society regulations.
Understanding how clients use our site, improving our services, and making sure we're delivering what you need.
Protecting our systems, preventing fraud, detecting security threats, keeping your data safe from unauthorized access.
We're pretty protective of your information, but there are times when we need to share it with others to do our job properly. Here's when and why that happens:
When you explicitly tell us it's okay to share your info with someone - like when you ask us to bring in an expert witness or coordinate with your accountant.
We work with trusted third parties who help us run our practice:
All these folks are bound by strict confidentiality agreements and only get access to what they absolutely need.
Sometimes your case needs specialized expertise - forensic accountants, industry experts, co-counsel in other jurisdictions, or mediators. We'll always let you know when we're bringing someone else on board.
We might have to disclose information when:
If we ever merge with another firm or sell our practice (which isn't on the horizon, but you never know), your information would transfer to the new owners - but they'd still be bound by the same confidentiality rules we are.
We take security seriously - not just because we have to, but because your business depends on it. Here's how we protect your data:
All data is encrypted both in transit (TLS 1.3) and at rest (AES-256). Your info is scrambled up tight.
Multi-factor authentication, role-based access, and strict need-to-know protocols for all staff.
Canadian-based servers with enterprise-grade firewalls, intrusion detection, and 24/7 monitoring.
Daily encrypted backups stored in separate secure locations. We're prepared for worst-case scenarios.
Regular security training for all team members on phishing, social engineering, and data handling.
Annual third-party security assessments and penetration testing to find vulnerabilities.
No system is 100% hack-proof - anyone who tells you otherwise is selling something. But we invest heavily in security and stay on top of emerging threats. If there's ever a breach affecting your data, we'll notify you immediately as required by law.
This is probably the most important section if you're an actual client. Attorney-client privilege isn't just a privacy policy thing - it's a fundamental legal protection that's been around for centuries.
When you communicate with us for the purpose of getting legal advice, those communications are privileged. That means:
Privilege doesn't cover everything though: