Privacy Policy

Everything you need to know about getting a Privacy Policy on Goodlawyer: complexity tiered pricing, scope of work, why you need it, and frequently asked questions.

  1. What is a Privacy Policy?
  2. Who is it for?
  3. Pricing and Scope
  4. What is the Process?
  5. How will my business use a Privacy Policy?
  6. What risks will this protect my business from?
  7. Frequently Asked Questions
  8. Book a Privacy Policy

 


What is a Privacy Policy

If you have a website or app, you’re probably collecting personal information from your visitors and users, whether you know it or not. Under Canadian and International privacy law,  organizations that collect or use “personal information” must have a privacy policy in place that informs users about their privacy practices. A professionally-drafted Privacy Policy will keep your organization compliant with all relevant privacy laws by explaining why personal information is being collected, what the organization will do with it, how it will be protected, and who it might get shared with.

Who is this service for?

This service is for business owners, organizations, or individuals that have a website or mobile app. It is also required for companies or organizations that collect or use personal information from customers or clients. Organizations that do not have a website, mobile application or online presence can purchase this privacy policy for offline use.

Pricing and Scope

Privacy Policies can vary drastically, which means the complexity of the Privacy Policies and therefore the price varies as well. At Goodlawyer, part of our mission is to always provide upfront fixed prices for legal services, so we've created a basic and complex Privacy Policy to give business owners more choice and more control.

 

Basic ($360 + Tax)

$300 legal fee + $60 service fee

Suitable for:

  • Organizations operating in Canada collecting information from Canadian users and customers.
  • Organizations with simple and non-extensive personal information use and collection practices. 

Includes:

  1. Client intake meeting
    1. ~30 minutes;
    2. Includes a personal information collection and use audit to understand the client's current personal information uses, practices and future needs
  2. Single omnibus privacy policy 
    1. Omnibus policy governing all aspects of Company's personal information collection, storage, use, and disclosure;
    2. Applicable for Companies selling goods or services to its website users, or for contacting users for direct marketing purposes.
  3. Basic personal information
    1. Only basic personal information is collected (e.g. name, contact info, credit card info, IP address etc.).
  4. Low to medium customization to address client-specific data practices (simple).
    1. Practices may include:
      1. Simple opt-out provisions; and
      2. User access to their own personal information.
    2. Where customization efforts exceed medium threshold, the Privacy Policy moves to Complex Tier.
  5. Business/website operates only in Canada and only collects personal information from Canadian residents
  6. One round of minor revisions

Where customization efforts exceed the "basic" threshold, the Privacy Policy moves to the Complex tier outlined below.

Complex ($960 + Tax)

$800 legal fee + $160 service fee

Suitable for:

  • Organizations with more extensive personal information use and collection practices, either on a website or offline.
  • Organizations that operate a website or store/process/transfer personal information outside of Canada.

Includes all service elements from the Basic Tier. Inclusion of any of the below criteria will make a matter 'complex':

  1. Layered Policies: Just-in-time Policies; Differentiated Use Policies
    1. Applicable if business practices create numerous exceptions to an omnibus policy, or many alternative policy sections addressing different audiences/cases and personal information uses.
    2. Consider whether client:
      1. Has different products/services, geographic locations, companies/subsidiaries/divisions, audiences (i.e. Customers vs website visitors), or business areas; or 
      2. Is collecting personal information for a new purpose.
  2. Data practices include sensitive personal information, such as:
    1. Racial/ethnic origin; political opinions; religious beliefs; health information; personal information of employees;
    2. Personal information of minors.
  3. Medium to high customization to address client-specific data practices.
    1. Practices may include:
      1. User contributions are collected and displayed (user comments and forums)
      2. Complex/lengthy opt-out provisions, use of opt-in provisions (i.e. sensitive information, etc.).
    2. Where customization efforts exceed a high threshold, the Privacy Policy moves to Custom Tier.
  4. Business/website operates Internationally or Personal information is transferred, processed, or stored outside of Canada

    Where customization efforts exceed the “complex” threshold, a custom price quotation is suitable. Your lawyer will always seek your approval on custom quotes before proceeding — no surprises.

     

    Other Considerations

    • If you are just starting to develop your website, consider our Website Bundle and save up to $620. This bundle includes our Privacy Policy and Terms of Service services. 
      • See what's included in our Terms of Service here
    • If you are already using a Privacy Policy but want to ensure it’s meeting your business’s needs? Book a contract review with a Goodlawyer at $25 per page to have your Privacy Policy assessed.
     

    What is the process?

    1. Book a call: Pick a time to discuss your Privacy Policy with a Good Lawyer. They'll help you determine if you need a Basic or Complex agreement.
    2. Design your Document. You’ll have a call with your Good Lawyer to help them understand your business so they can draft a Privacy Policy that accurately reflects your business practices and makes you compliant with relevant privacy laws.
    3. Receive your Document: You will receive a copy of the Privacy Policy, ready for use.


    How will my business use a Privacy Policy?

    Comply with privacy laws.

    In Canada, businesses are required to publicly display their privacy policy, which must clearly outline how all personal information is collected and used. The Privacy Policy must be specific to your current practices and a generic policy will not cut it. Operating without a tailored and compliant privacy policy can result in government fines.

    Identify your privacy practices.

    Before drafting your Privacy Policy, your Good Lawyer will work with you to identify how you collect, store, and use personal information to ensure that your business practices are in accordance with applicable privacy laws and regulations. 

    Increase your credibility.

    Having a proper Privacy Policy in place demonstrates that you take your customers’ and website visitors’ privacy seriously, and handle their personal information with care.

     


    What risks will this protect my business from?

    Avoid government fines.

    Failing to create a Privacy Policy that meets privacy law requirements may lead to hefty government fines. A professionally-drafted Privacy Policy will ensure that all relevant privacy laws have been considered and incorporated into the policy, ensuring your personal information practices are operating within the law.

     


    Frequently Asked Questions

    Do I need a Privacy Policy?

    If you collect or use personal information, you need a Privacy Policy. This is a legal requirement in Canada and numerous other countries. Websites and mobile applications (apps) always require a Privacy Policy because personal information is always collected from website visitors, even if those visitors never become customers. If you collect personal information offline (e.g. in a retail setting), you are still required to have a Privacy Policy in place. 

    What is “personal information”?

    Personal information” constitutes any information that can identify an individual. That can include anything as simple as contact information collected on a sales form, to something as complex as the information collected and saved through cookies as part of online tracking and targeting for personalized advertising.

    As a Canadian business, do I need to comply with international privacy laws such as GDPR or CCPA?

    Although your business may operate exclusively in Canada, if you have users from other countries, you may be subject to international privacy laws. Your Good Lawyer will be able to identify if your Privacy Policy needs to comply with any international Privacy Laws based on your current business practices. 

    How does a Privacy Policy relate to a website’s Terms of Service?

    A Privacy Policy and Terms of Service Document are closely related as they both govern the relationship between your business’ online presence and your customers’ online visits. It is extremely common to get both documents drafted at the same time for increased efficiency and minimized costs. You can book both these services and save with Goodlawyer’s website bundle. 

    Do I need a lawyer in my province for a Privacy Policy?

    In most cases, you can get a Privacy Policy drafted by a lawyer in any province as most privacy laws are federal. However, some provinces such as Alberta and British Columbia have additional privacy laws that may require local expertise depending on the nature of your business. No matter where you’re located, Goodlawyer can connect you with the right lawyer for your Privacy Policy.

     


    "Excellent services, 10000x better than traditional legal firms. Helpful, quick and impressive online interface. I recommend Goodlawyer to anyone who needs legal help!"

    Fatima, July 2021 — 5-Star Google Review


     

    Are you ready to start developing your website?

    Book a Basic Privacy Policy

    Book a Complex Privacy Policy

    Your lawyer will assess your situation and make recommendations on which complexity tier you should consider accordingly.

    Still have some questions?

    Book a free Legal Concierge™ service