Last updated: October 9, 2026
1. About This Policy
This Privacy Policy explains how we collect, use, disclose, and protect personal information through this website (the “Website”). It follows the Personal Information Protection and Electronic Documents Act (PIPEDA) and its ten fair information principles, along with other Canadian privacy laws that apply.
In this Policy, “we”, “us”, and “our” refer to the owner and operator of the Website. “Personal information” means information about an identifiable individual.
The Website is an exchange that connects owners of accounting practices who wish to sell (“Sellers”) with accounting professionals and firms who wish to buy (“Buyers”). This Policy covers information about visitors, Sellers, and Buyers.
By using the Website, you acknowledge this Policy. It should be read together with our Terms and Conditions.
2. Accountability
We are responsible for the personal information under our control, including information we transfer to service providers for processing.
We have designated a Privacy Officer who is accountable for our compliance with this Policy and with PIPEDA.
You can reach the Privacy Officer through the contact form on our Contact page. Please select “Privacy” or write “Attention: Privacy Officer” in your message.
3. Information We Collect
We collect only the personal information we need for the purposes described in this Policy. Depending on how you use the Website, this may include:
| Type of Information | Examples | How We Collect It |
|---|---|---|
| Contact details | Name, email address, phone number, firm name, location | Contact form, valuation request, registration |
| Account details | Username and password (stored in encrypted form) | When you register as a Buyer or Seller |
| Seller practice information | Practice location, revenue, profitability, service mix, number and type of clients, staffing, transition plans, financial statements | Seller intake, valuation request, documents you send us |
| Buyer profile | Professional designation, current firm, preferred locations and practice types, budget, financing plans | Buyer registration and information requests |
| Messages | What you write to us, and communications between Buyers and Sellers that pass through us | Forms, email, and our introduction process |
| Technical information | IP address, browser and device type, pages viewed, date and time of visit | Automatically, through cookies and similar technologies |
We do not knowingly collect sensitive information, such as health or financial account details, unless it is needed for a specific purpose and you give express consent.
Practice information is mainly business information, but it can include personal information about the owner, staff, or clients.
Sellers should not send us personal information about their clients (such as names, tax records, or financial details).
If client-level information is needed during a buyer’s due diligence, it should be anonymized or shared directly between the parties under a written agreement that respects the Seller’s professional confidentiality obligations.
4. Why We Collect It
We identify our purposes at or before the time of collection. We use personal information to:
- Respond to your questions and requests
- Create and manage your account
- Review Buyer and Seller registrations, including checking that Buyers are qualified and serious
- Prepare valuations, practice profiles, and listings for Sellers
- Match Buyers with suitable practices and introduce Buyers and Sellers
- Share confidential practice information with approved Buyers, as described in Section 7
- Send updates about new listings or our services, only where you have consented
- Operate, secure, and improve the Website
- Meet legal, tax, and accounting obligations
If we want to use your information for a new purpose, we will tell you and, where required, ask for your consent first.
5. Consent
We collect, use, and disclose personal information only with your knowledge and consent, except where the law permits or requires otherwise.
Express Consent
We ask for express consent clearly, for example with an unticked checkbox, before:
- Sending marketing emails
- Using sensitive information
- Carrying out activities that require specific permission under applicable privacy laws
Implied Consent
Implied consent may apply when the purpose is obvious and the information is not sensitive.
For example, we may use the practice details you provide to prepare the valuation you requested.
You may withdraw your consent at any time, subject to legal or contractual limits and with reasonable notice.
To withdraw your consent:
- Use the unsubscribe link in any marketing message, or
- Contact our Privacy Officer
We will explain any effect withdrawing your consent may have, such as being unable to provide certain services.
6. Cookies and Analytics
The Website uses cookies and similar technologies to:
- Make the Website function properly
- Remember your preferences
- Understand how visitors use the Website
- Improve website performance and user experience
We may use third-party analytics tools that collect technical information such as:
- Pages viewed
- Browser and device information
- Approximate location
- Date and time of visits
You can block or delete cookies through your browser settings.
Please note that some parts of the Website may not work properly without cookies.
Where we use cookies for advertising or tracking across other websites, we will ask for your consent first.
7. How We Share Information
We do not sell or rent your personal information.
We share personal information only in the following situations:
Between Buyers and Sellers
Public listings describe a practice in general terms without identifying it.
We share a Seller’s identity and confidential practice information only with:
- Buyers who have registered
- Buyers who have been approved
- Buyers who have agreed to keep information confidential
Where requested by the Seller, information will only be shared with Buyers specifically approved by the Seller.
When a Buyer asks about a practice, we may share the Buyer’s name, firm details, and profile information with that Seller.
Service Providers
We may share information with companies that help us operate the Website and our business, including:
- Web hosting providers
- Email delivery services
- Data storage providers
- Analytics providers
These service providers may only use your information to provide services to us and must protect your information to a standard comparable to ours.
Professional Advisers
We may share information with our professional advisers, including:
- Lawyers
- Accountants
- Insurance providers
These parties are required to keep information confidential.
Legal Reasons
We may disclose personal information when required or permitted by law, including situations involving:
- Court orders
- Regulatory requests
- Legal obligations
- Protection of our rights, property, or safety
Business Transfers
If our business is sold, merged, or transferred, personal information may be transferred to the new owner.
The new owner must continue using your information in accordance with this Privacy Policy.
8. Storage and Processing Outside Canada
Some of our service providers may store or process personal information outside Canada, including in the United States.
When your information is stored or processed in another country, it may be subject to that country’s laws.
Courts, law enforcement agencies, or national security authorities in those countries may have legal authority to access information.
We use contracts and other appropriate measures to ensure your personal information receives a comparable level of protection.
9. Accuracy and Retention
We try to keep personal information accurate, complete, and up to date for the purposes it is used for.
You can help us maintain accurate information by notifying us when your details change.
We keep personal information only for as long as necessary for the purposes it was collected or as required by law, such as tax and accounting requirements.
When personal information is no longer required, we will:
- Securely destroy it
- Erase it, or
- Make it anonymous so it can no longer identify you
10. Safeguards
We protect personal information using security measures appropriate to the sensitivity of the information.
Our safeguards include:
Technical Safeguards
- Encrypted connections (HTTPS)
- Access controls
- Secure hosting systems
Organizational Safeguards
- Limiting access to personal information only to individuals who need it for their work
- Implementing procedures to protect confidential information
Physical Safeguards
- Securing paper records
- Protecting devices and storage locations
No method of transmission or storage is completely secure.
While we take reasonable steps to protect your personal information, we cannot guarantee absolute security.
11. Privacy Breaches
If a security breach involving your personal information creates a real risk of significant harm to you, we will notify:
- You, and
- The Office of the Privacy Commissioner of Canada
as soon as possible, as required under PIPEDA.
We also maintain records of every breach of security safeguards involving personal information.
12. Your Right to Access and Correct Your Information
You have the right to request information about:
- Whether we hold personal information about you
- How your information has been used
- Who your information has been disclosed to
You may also request a copy of your personal information.
To make an access or correction request, contact our Privacy Officer through the contact form on our Contact page.
We may ask you to confirm your identity before processing your request.
We will respond within 30 days, or notify you if additional time is required and explain the reason, as permitted by PIPEDA.
Access to your information is provided free of charge or at minimal cost. If there is a cost involved, we will inform you before proceeding.
If we refuse your request, we will provide a written explanation unless the law prevents us from doing so.
We will also explain how you can challenge our decision.
If you show that information we hold about you is inaccurate or incomplete, we will correct it and, where appropriate, inform any parties we previously shared the information with.
13. Children’s Privacy
The Website is not intended for children under the age of 13.
We do not knowingly collect personal information from children.
If you believe a child has provided us with personal information, please contact our Privacy Officer.
We will take appropriate steps to delete the information.
14. Questions and Complaints
If you have questions, concerns, or complaints about this Privacy Policy or how we handle personal information, please contact our Privacy Officer through the contact form on our Contact page.
We will investigate every complaint and, where appropriate, take reasonable steps to resolve the issue.
If you are not satisfied with our response, you may file a complaint with:
Office of the Privacy Commissioner of Canada
15. Changes to This Policy
We may update this Privacy Policy from time to time.
Any updated version will be posted on this page with a new “Last updated” date.
If we make a material change, such as using your information for a new purpose, we will:
- Post a clear notice on the Website, and
- Obtain your consent where required by applicable privacy laws