Last Updated: [5th June, 2026]

George Desmarais LLP (“we,” “us,” or “our”) is committed to safeguarding the privacy and security of your personal information that you provide to us, as well as information we collect from you, in accordance with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA). This Privacy Policy explains how we collect and handle your personal data, outlines your rights and responsibilities, and clarifies when and why your information is processed.

Who We Are

We are George Desmarais LLP, located at [info@georgedesmarais.com]. We are responsible for managing how your personal information is collected, used, stored, and disclosed.

Our appointed Privacy Officer is Christopher Hayes and can be reached at [info@georgedesmarais.com].

Information That We Collect

We collect, retain, and use the following types of personal information about you:

• Personal contact details including title, full name, addresses, phone numbers, and email addresses;

• Date of birth;

• Copies of your passport, driver’s license, or other identification documents.

Additionally, we may collect and handle more sensitive personal information, such as:

• Marital status and dependents;

• Social Insurance Number (SIN);

• Bank account details;

• Employment information;

• Citizenship and immigration-related information.

How Information Is Collected

We collect personal information:

• Directly from you when you engage our services;

• Through your connection with one or more of our clients;

• From third parties including previous legal representatives, financial advisors, government agencies, and identity verification providers.

How We Use Your Personal Information

We respect your privacy and, except where required by law, will not disclose, share, or sell your personal information without your consent. If you have agreed to our use of your personal data and marketing communications, you may withdraw this consent at any time.

We process personal information for the following purposes:

• To comply with contractual, legal, and regulatory obligations;

• To pursue legitimate business interests where these do not override your rights and freedoms;

• To fulfill our engagement terms with you;

• To conduct identity verification checks;

• To maintain and improve our client records;

• To provide legal services and advice;

• To send publications, legal updates, event invitations, and information about services that may be of interest to you.

We only use your personal information for the purposes for which it was collected unless another compatible purpose arises. Where required, we will notify you of any new purpose and the legal basis for processing.

Consequences of Not Providing Your Personal Information

You are not obligated to provide personal information to us. However, certain information is necessary for us to provide legal services and comply with legal obligations. Without this information, we may be unable to act on your behalf.

Your Rights

Subject to applicable laws, you have the right to:

• Be informed about the personal information we hold about you;

• Request access to your personal information;

• Request correction of inaccurate or incomplete information;

• Request deletion of your personal information where appropriate;

• Object to certain types of processing;

• Request restrictions on processing;

• Request the transfer of your personal information to another organization where applicable;

• Withdraw consent at any time where processing is based on consent;

• Lodge a complaint with the Office of the Privacy Commissioner of Canada.

To exercise any of these rights, please contact our Privacy Officer.

Sharing and Disclosing Your Personal Information

We do not share your personal information without your consent except as described in this Privacy Policy or where required by law.

We may share information with:

• Business partners;

• Professional advisors;

• Service providers and suppliers;

• Regulatory authorities;

• Financial institutions;

• Credit reporting agencies;

• Courts, tribunals, and legal authorities;

• Federal, provincial, and municipal government agencies.

Any third parties processing personal information on our behalf are required to maintain appropriate confidentiality and security measures.

Safeguarding Measures

We have implemented appropriate technical and organizational security measures to protect your personal information against unauthorized access, disclosure, alteration, misuse, or loss.

Access to personal information is restricted to employees, contractors, and third parties who require it for legitimate business purposes and who are subject to confidentiality obligations.

We also maintain procedures for responding to suspected data breaches and will notify affected individuals and regulatory authorities where required by law.

How Long We Keep Your Personal Information

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, regulatory, and reporting requirements.

When determining retention periods, we consider:

• The nature and sensitivity of the information;

• The purposes for which it is processed;

• Applicable legal requirements;

• The risk of unauthorized use or disclosure.

Marketing information will be retained until you withdraw your consent or request removal.

Lodging a Complaint

If you have concerns about how your personal information is handled, please contact our Privacy Officer at [info@georgedesmarais.com].

You also have the right to file a complaint with the Office of the Privacy Commissioner of Canada.

Changes to This Privacy Policy

George Desmarais LLP reserves the right to amend this Privacy Policy at any time. Any material changes will be posted on our website and, where appropriate, communicated directly to affected individuals.

For questions regarding this Privacy Policy or our privacy practices, please contact our Privacy Officer.