Mirza Law ("Mirza Law," "we," "our," or "us") is committed to protecting the privacy and confidentiality of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (mirzalegal.com), use our services, or interact with us. This policy complies with the Personal Information Protection and Electronic Documents Act (PIPEDA), the Law Society of Ontario's professional conduct rules, and other applicable Canadian privacy legislation.
1. Information We Collect
We collect information that you provide directly to us and information collected automatically through your use of our website.
Information You Provide
- Contact information: name, email address, phone number, mailing address
- Case details: employment history and the circumstances of your dismissal or workplace dispute, your compensation and benefits, and, for disability and LTD matters, information about your medical condition, treatment, and functional limitations
- Documents: employment contracts, termination and severance letters, pay records, records of employment (ROE), insurance policies, denial and termination letters, medical and clinical records, and other supporting documents
- Health information: for disability and LTD matters we collect sensitive medical information with your consent and treat it with heightened care
- Payment information: billing details for processing legal fees
- Communications: correspondence between you and Mirza Law, including emails, messages through our client portal, and consultation notes
Information Collected Automatically
- Device and browser information: IP address, browser type, operating system, device identifiers
- Usage data: pages visited, time spent on pages, referral source, click patterns
- Cookies and similar technologies: session cookies, analytics cookies, and functionality cookies (see Cookie Policy below)
2. How We Use Your Information
- Case processing: to assess your claim, advise you, and prepare and advance your matter, including negotiation, litigation, and correspondence with the opposing party, insurer, courts, and tribunals
- Communication: to respond to your inquiries, provide case updates, and send important notifications about your matter
- Service improvement: to improve our services, website functionality, and user experience through aggregated, anonymized analytics
- Legal obligations: to comply with our professional obligations as regulated by the Law Society of Ontario and applicable laws
- Billing and administration: to process payments, issue invoices, and maintain our business records
3. Legal Basis for Processing
We process your personal information based on:
- Consent: you provide express consent when you engage our services and sign a retainer agreement. You may withdraw consent at any time, subject to legal or contractual restrictions.
- Legal obligation: we are required by law and professional regulations to maintain certain records and report as required by regulatory bodies.
- Legitimate interest: we have a legitimate interest in providing legal services, improving our website, and operating our business, provided this does not override your privacy rights.
4. Who We Share Your Information With
We do not sell, rent, or trade your personal information. We may share your information with:
- Opposing parties and decision-makers: your employer, the insurer, opposing counsel, and the courts or tribunals (such as the Human Rights Tribunal of Ontario) as necessary to advance or resolve your matter, with your authorization
- Service providers: secure technology providers that support our operations (hosting, client portal, document management, payment processing), who are bound by confidentiality agreements
- Professional advisors and experts: co-counsel, and medical or vocational experts retained for your matter, with your consent
- Regulatory bodies: the Law Society of Ontario or courts, as required by law or professional obligation
We never share your personal information with third parties for marketing purposes. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties.
5. Data Security
We take the security of your personal information seriously and employ appropriate technical and organizational safeguards, including:
- Encrypted storage for all client documents and sensitive data
- Secure client portal with access controls and authentication
- Role-based access controls limiting who can view your information
- Regular security reviews and updates to our systems
- Secure transmission protocols (TLS/SSL) for all data in transit
While we strive to protect your personal information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.
6. Cookie Policy
Our website uses cookies and similar technologies for the following purposes:
- Essential cookies: required for the website to function properly, including session management and security features
- Analytics cookies: help us understand how visitors use our website through services like Google Analytics. This data is aggregated and anonymized.
- Functionality cookies: remember your preferences and settings to improve your experience
You can control cookie settings through your browser preferences. Disabling certain cookies may affect the functionality of our website.
7. Your Rights
Under PIPEDA, you have the following rights regarding your personal information:
- Access: you have the right to request access to the personal information we hold about you
- Correction: you have the right to request correction of inaccurate or incomplete personal information
- Deletion: you have the right to request deletion of your personal information, subject to our legal and regulatory obligations to retain certain records
- Portability: you have the right to request a copy of your personal information in a structured, commonly used format
- Withdrawal of consent: you have the right to withdraw your consent to the processing of your personal information at any time, subject to legal or contractual obligations
To exercise any of these rights, contact us at amir@mirzalegal.com. We will respond to your request within 30 days.
8. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes for which it was collected and to comply with our legal obligations. In accordance with the Law Society of Ontario's record retention requirements, client files are typically retained for a minimum of 10 years following the closure of your matter. After the applicable retention period, your information will be securely destroyed or anonymized.
9. Children's Privacy
Our website and services are not directed at individuals under the age of 18. We do not knowingly collect personal information from children. Our clients are adults, and any information about a third party that arises in a matter is collected through and managed with our client.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes are effective when posted to this page with an updated "Last updated" date. We encourage you to review this policy periodically. For material changes that affect how we handle your personal information, we will make reasonable efforts to notify affected individuals.
11. Contact Us
If you have questions or concerns about this Privacy Policy or our privacy practices, or wish to exercise your privacy rights, contact us at:
If you are not satisfied with our response, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca.