Skip to content

GDPC policies

Privacy policy

How GDPC handles the personal information shared through this website and the choices available to visitors.

Effective date: October 15, 2026

Important: This policy applies to the GDPC website. It does not replace the privacy terms that may apply under a separate client engagement letter or secure client portal.

1. Scope

G Dhillon Professional Corporation is an Alberta professional accounting firm. This policy explains how GDPC may collect, use, disclose, retain and protect personal information collected through this website. GDPC intends to handle personal information in accordance with applicable privacy law, including Alberta’s Personal Information Protection Act where it applies.

2. Information GDPC may collect

GDPC may collect information that you provide directly, including your name, business name, email address, telephone number, preferred contact method, the service you are interested in and limited business context provided through an enquiry form. The website may also collect limited technical information, such as browser information, referral information, page interactions, analytics data and advertising conversion data when you enable the related optional technologies.

When you submit an enquiry or resource request, the information is transmitted to GDPC's website lead system and retained to respond to your request and manage the related business record. A short lived browser session copy may also be used to display the confirmation page and is not the system of record.

To keep automated programs from sending the forms, the website uses Cloudflare Turnstile, a security check from Cloudflare, Inc. When a form is shown, it reviews technical signals from your browser to confirm that a person is using it, usually without asking you to do anything. According to Cloudflare, it does not use cookies to track you or to show you advertising, and it uses this information only to provide the security check. When you send a form, the website also keeps a coded version of your IP address that cannot be turned back into the address, so it can limit how many requests one connection sends in a short time. It is deleted after 24 hours.

Do not submit bank details, government identification, Social Insurance Numbers, tax slips, account passwords or financial documents through a general website form, email link or chat feature.

3. Why GDPC uses information

GDPC may use personal information to respond to an enquiry, assess whether a requested service may be a fit, arrange a consultation, operate and protect the website, understand how visitors find the website and improve its content. GDPC may use contact information for occasional resources or marketing only where you have separately chosen to receive those communications or where otherwise permitted by law.

4. Consent and your choices

By providing personal information through the website, you consent to its collection and use for the purposes explained at the time of collection and in this policy, subject to applicable law. You may withdraw consent for optional marketing, analytics or advertising measurement at any time. A withdrawal may affect GDPC’s ability to provide a requested response where certain information is reasonably needed to do so.

The website always counts visits anonymously, without cookies, through Google Analytics and Cloudflare Web Analytics. Analytics cookies and advertising measurement are optional. Review or change your choice in the Cookie Policy.

5. Disclosure to service providers

GDPC does not sell personal information. Information may be disclosed to service providers that support the website, communications, scheduling, analytics, advertising measurement or client relationship processes, but only as necessary for the service and subject to appropriate safeguards. These include website hosting, database and email notification providers, Google (Analytics, Tag Manager, Search Console and Ads), Meta (the Meta Pixel) and Cloudflare (Web Analytics and the Turnstile security check). Some of these providers store or process information outside Canada, including in the United States, where it may be accessible to authorities under the laws of that country. Information may also be disclosed where required or permitted by law, to protect rights or security, or with your consent.

6. Safeguards, retention and secure channels

GDPC uses reasonable administrative, technical and physical safeguards appropriate to the sensitivity of the information. No method of internet transmission or storage is completely secure. GDPC retains personal information only as long as reasonably necessary for the identified purpose, legal requirements, dispute resolution or legitimate business records, then securely deletes or de identifies it where appropriate.

If you become a GDPC client, the firm will provide instructions for approved secure document exchange. Do not assume that a website enquiry form is a secure client portal.

7. Access, correction and complaints

You may request access to, or correction of, personal information held by GDPC, subject to applicable legal limits. You may also raise a privacy concern directly with GDPC. If your concern is not resolved, you may have the right to contact the Office of the Information and Privacy Commissioner of Alberta.

To make a privacy request or ask a question about this policy, email the GDPC Privacy Contact at gdhilloncga@gdpc.ca, call 403-460-6855, use the contact page, or write to 3515 27 Street NE, Unit 23, Calgary, Alberta T1Y 5E4.

8. External websites

This website may link to third party websites, such as maps, booking services, government resources or social platforms. Their privacy practices are governed by their own policies. Review third party policies before providing information through those services.

9. Updates

GDPC may update this policy when its website practices, services or legal obligations change. The effective date above identifies the current version. Material changes will be posted on this page.