Privacy Policy

Effective Date: March 2026 · Majdi Ibrahim, CPA Professional Corporation

This Privacy Policy constitutes a legally binding instrument governing the collection, processing, storage, disclosure, and destruction of personal information by Majdi Ibrahim, CPA Professional Corporation in connection with its digital properties and professional service engagements.

Majdi Ibrahim, CPA Professional Corporation (referred to as "the Corporation," "we," "us," or "our") operates as a professional corporation established under Ontario law and regulated by CPA Ontario under the Public Accounting Act, 2004 and the Chartered Professional Accountants of Ontario Act, 2017. The Corporation maintains digital properties at treehousecpa.com and associated domains (the "Platform"). Privacy inquiries, access requests, corrections, and compliance complaints should be directed to the Privacy Officer at the contact information provided below.

Personal information is collected for purposes a reasonable person would consider appropriate in the circumstances, and exclusively as required or permitted by applicable law:

• Responding to and processing engagement inquiries and service requests
• Establishing and fulfilling professional service engagements
• Measuring Platform performance through aggregated analytics
• Attribution measurement of paid digital advertising campaigns
• Compliance with CPA Ontario rules and federal/provincial legislation
• Enforcement of contractual and legal rights

The Corporation does not employ personal information for purposes of automated decision-making, algorithmic profiling, or any processing that produces legal or similarly significant effects upon data subjects without their explicit prior written consent.

The Corporation engages third-party service providers subject to contractual privacy protections:

Data subjects may opt out of Google advertising at adssettings.google.com and Microsoft Clarity at clarity.microsoft.com/optout.

The Platform deploys persistent and session-based HTTP cookies, web beacons, pixel tags, and analogous tracking technologies classified as:

• Strictly Necessary Technologies: Essential for Platform delivery and security
• Analytics and Performance Technologies: Google LLC and Microsoft Corporation services for engagement analysis
• Advertising and Attribution Technologies: Google LLC services for conversion tracking and audience management

Users may configure browsers to refuse or delete cookies, though this may impair functionality. Canadian residents' consent requirements are governed by PIPEDA and Canada's Anti-Spam Legislation (CASL); however, users retain withdrawal rights through browser controls.

The Corporation implements administrative, technical, and physical safeguards proportionate to the sensitivity of personal information held, consistent with the professional confidentiality obligations imposed by CPA Ontario's Rules of Professional Conduct. Contact form data is transmitted via TLS encryption and not maintained beyond retention periods outlined in Section 7. The Corporation does not sell, license, trade, rent, or otherwise transfer personal information to unaffiliated third parties for commercial marketing purposes, except as expressly disclosed herein or as required by applicable law. The Corporation disclaims liability for unauthorized access or data destruction beyond its reasonable control.

Data subjects may request deletion or de-identification by written request to the Privacy Officer. The Corporation will honor such requests to the fullest extent permitted by applicable law, subject to any statutory, regulatory, or professional retention obligations.

Under PIPEDA and provincial legislation, data subjects possess these rights:

• The right to be informed of the existence, use, and disclosure of personal information held by the Corporation
• Right to access personal information in intelligible format within reasonable time
• Right to challenge accuracy and seek amendments
• The right to withdraw consent to collection, use, or disclosure of personal information, subject to legal and contractual restrictions and upon reasonable notice
• Right to lodge formal complaints with the Office of the Privacy Commissioner of Canada

Requests must be submitted in writing to the Privacy Officer. The Corporation will respond within thirty calendar days.

The Corporation expressly reserves the unilateral right to modify, amend, restate, or replace this Privacy Policy in whole or in part at any time without prior notice to individual data subjects. Amendments become effective immediately upon posting. Continued Platform use constitutes acceptance of changes.