Privacy Policy
Last updated: 26 June 2026
OpenCompany (“we”, “us”), operated by CBES Group, provides business-registration services across Canada. This policy explains what personal information we collect, why, how we use and protect it, and your rights under Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.
Information we collect
We collect only what we need to provide our services and run our business:
• Identity & contact — your name, email, phone, and the names of directors, shareholders, officers, and partners you enter.
• Company details — proposed company name, jurisdiction, share structure, registered-office address, and related filing information you provide.
• Payment information — processed securely by Stripe; we never see or store your full card number.
• Form drafts — if you start a form and enter an email, we save your progress so you can finish later.
• Technical data — IP address, browser type, and basic usage data via cookies and similar technologies.
How we use your information
To prepare and file your business registrations with government registries; to process payments and send receipts; to confirm details and provide support; to comply with legal and regulatory obligations; to operate, secure, and improve our website; and — only with your consent — to send you helpful updates or offers.
Consent (CASL & PIPEDA)
We collect and use your information with your consent. We send commercial electronic messages only where permitted by Canada’s Anti-Spam Legislation (CASL); every marketing email includes an unsubscribe link, and transactional messages (order confirmations, receipts) relate to services you requested. You may withdraw consent at any time by contacting us.
Who we share it with
We do not sell your personal information. We share it only with trusted providers and authorities as needed to deliver our services:
• Government registries (e.g. Corporations Canada, provincial registries, NUANS) to make your filings.
• Stripe — payment processing.
• Brevo — transactional and (with consent) marketing email.
• Google — website analytics (Google Analytics 4) and advertising/conversion measurement (Google Ads).
• Microsoft — product-experience analytics and session replay (Microsoft Clarity).
• Cloudflare — content delivery, bot protection (Turnstile), and encrypted storage of documents you upload.
• Sentry — application error monitoring.
• Telegram — internal notifications to our team (an order alert may include your name and email).
• Hosting & infrastructure providers that run our website and database.
• Legal/regulatory bodies where required by law.
Several of these providers — including Google, Microsoft, Cloudflare, Stripe, Sentry, and Telegram — process data outside Canada, primarily in the United States, where it may be subject to the laws of those jurisdictions. We take reasonable steps to ensure comparable protection.
How long we keep it
We keep your information for as long as needed to provide our services, meet legal, tax, and accounting obligations, and resolve disputes. Unfinished form drafts are kept for a limited period and then deleted.
Your rights
You may request access to the personal information we hold about you, ask us to correct it, request deletion where we are not required to keep it, and withdraw consent to marketing. To exercise these rights, email [email protected]. We will respond within the timeframes required by law.
Cookies & analytics
We use essential cookies to make the site work and remember your form progress. We also use analytics and product-experience tools — Google Analytics 4 (under Google Consent Mode) and Microsoft Clarity(aggregated heatmaps and session replays) — to understand how the site is used and improve it, together with Google Ads conversion measurement.
Where the law requires prior opt-in consent (the EU/EEA and the UK), these non-essential cookies and tools load only after you accept our cookie banner, and you may decline. Elsewhere they run under implied consent and you can opt out through your browser settings or by contacting us. We do not use this data to make automated decisions about you.
Security
We use industry-standard safeguards (encryption in transit, access controls, a PCI-compliant payment processor) to protect your information. No method of transmission or storage is completely secure, but we work to keep your data safe.
Children
Our services are intended for adults (18+). We do not knowingly collect information from children.
Changes to this policy
We may update this policy from time to time. The “last updated” date above reflects the latest version, and material changes will be posted on this page.
Questions about this policy? Email [email protected] or write to 30 Wertheim Court, Unit 12, Suite 201, Richmond Hill, Ontario, L4B 1B9, Canada. See also our Privacy Policy, Terms of Service and Refund Policy.
