Service Providers and Data Handling Policy

Purpose

NEO relies on service providers for hosting, email, payments, e-signatures and other tools, and some of them handle client information. We remain responsible for that information. This policy explains how we choose and oversee providers.

Our policy

1. Need to know. We only share client information with a provider when it is needed for the service, and only as much as is needed.
2. Careful choice. We choose established providers with strong, preferably independently audited, security controls, and terms that protect confidentiality.
3. Written terms. Each provider's terms set out how they protect information, and restrict them from using it for their own purposes, as far as the market allows.
4. Location. Some providers store or process information outside Ontario or Canada. We consider this when choosing providers, and our Privacy Policy explains it.
5. Access control. Only the people who need access have it, and access ends promptly when it is no longer needed.
6. Review. We review our providers when we add a new one, when a provider changes its terms, and at least once a year.
7. Incidents. If a provider reports a security incident affecting our information, we act under our Information Security and Data Breach Response Policy.

Review

This policy is reviewed at least once a year, and whenever the Law Society's By-Laws or rules change. The principal approves every change.

Questions

Email info@neolegalservices.com, call 647-200-3526 or toll-free 888-519-2435, or write to us at Unit 236, 1099 Kingston Road, Pickering, Ontario L1V 1B5.