Website Privacy Notice
Last updated: 2026-08-10
This notice explains what personal information we collect when you visit www.convoyfinance.com, why we collect it, who we share it with, and the rights you have over it.
Scope: this notice covers this website only. Personal and financial information you provide to us during a client engagement is governed by the engagement letter you enter into with the relevant CPA firm (Nexoa CPA Professional Corporation or Zed Wang Professional Corporation) and by our professional confidentiality obligations as Chartered Professional Accountants, not by this notice.
Information you give us
If you complete the consultation form on our contact page, we collect your first name, last name, company name, email address, the service you are interested in, your indicated urgency, and anything you write in the message field. All of these except the message field are required to submit the form.
We use this information solely to respond to your enquiry and, where relevant, to prepare for an introductory call. We do not sell it, and we do not add you to a marketing list without asking you first.
If you book a call, that booking is handled by Calendly, and the information you enter into Calendly is collected directly by Calendly under its own privacy policy.
Information collected automatically
Like most websites, we collect limited technical information about your visit: pages viewed, approximate location derived from your IP address, referring source, device and browser type, and how you move through and interact with pages. We use it to understand which content is useful and where the site is confusing, so we can improve it.
Session recording: Microsoft Clarity records a reconstruction of your visit, including mouse movement, clicks, and scrolling. Text you type into form fields is masked before it leaves your browser, so we cannot read what you enter into the contact form. Recordings are used for diagnosing usability problems only.
Cookies and similar technologies
These are the third-party services that operate on this site and the purpose each one serves.
| Service | Provider | Purpose |
|---|---|---|
| Google Analytics 4 | Google LLC | Aggregate traffic and content performance measurement |
| Microsoft Clarity | Microsoft Corporation | Session recordings and heatmaps for usability diagnosis |
| Web3Forms | Web3Forms | Processing and delivering contact form submissions |
| Calendly | Calendly LLC | Scheduling introductory calls |
| Netlify | Netlify, Inc. | Website hosting, including standard server logs |
| Stripe | Stripe, Inc. | Processing client payments |
We do not run advertising or retargeting pixels on this site, and we do not use these tools to build advertising profiles.
Where your information goes
The providers listed above are located primarily in the United States, so information collected through this site is transferred outside Canada and outside the European Economic Area and is subject to the laws of those jurisdictions. We share information with these providers only as needed for the purposes described above, and each acts on our instructions as a service provider rather than for its own purposes.
We do not sell personal information. We may disclose information where required by law, by a regulator, or by a professional body governing our practice.
How long we keep it
Analytics data in Google Analytics is retained for 14 months, after which it is deleted automatically. Clarity recordings are retained according to Microsoft's standard retention period for the service.
Contact form submissions are retained for 24 months, after which they are deleted. Where an enquiry becomes a client engagement, the information moves into our client records and is retained under the record retention requirements applicable to CPA practice.
Your rights
Depending on where you live, you have some or all of the following rights over your personal information:
- Access a copy of the information we hold about you
- Have inaccurate information corrected
- Ask us to delete information we no longer need
- Withdraw consent to analytics and session recording
- Receive your information in a portable, structured format
- Object to, or ask us to stop, a particular use
- Complain to your privacy regulator if you are not satisfied with our response
If you are in Quebec, these rights arise under the Act respecting the protection of personal information in the private sector as amended by Law 25. Elsewhere in Canada, they arise under PIPEDA or the applicable provincial statute. If you are in the European Economic Area or the United Kingdom, they arise under the GDPR, and our lawful basis is your consent for analytics and session recording, and our legitimate interest in responding to you for contact form enquiries.
Opting out of analytics
You can opt out of Google Analytics across all websites by installing Google's browser opt-out add-on, and out of Clarity by using your browser's Do Not Track or global privacy control setting, which Clarity honours. Most browsers also let you block or delete cookies through their settings. Blocking these tools does not affect your ability to use this site or to contact us.
Security
This site is served over HTTPS. We limit access to contact form submissions to the Convoy Finance team members who need it to respond to you. No method of transmission over the internet is completely secure, so please do not send sensitive financial documents or identification through the website contact form. We will tell you how to share those securely once we are in touch.
Children
This site is aimed at businesses and is not directed at children. We do not knowingly collect personal information from anyone under 14.
Changes to this notice
We update this notice when our practices or the tools we use change. The date at the top reflects the most recent version.
Contacting us about privacy
Our Privacy Officer is Mo Yang, CPA, CFA, Founding Partner. To exercise any of the rights above, or to ask a question about this notice, contact clientservices@convoyfinance.com and mark your message for the attention of the Privacy Officer.
You can also write to us at 325 Front St W #2060, Toronto, ON M5V 2Y1, Canada.
We respond to requests within 30 days. If you are not satisfied with our response, you may complain to the Commission d'accès à l'information du Québec, the Office of the Privacy Commissioner of Canada, or your local supervisory authority.