Privacy Policy
Last updated: October 7, 2026
1. Who we are and who is responsible
This website, ontariolandlordlawyer.ca, is operated by Amjad Law, the law practice of Saad Amjad, 6700 Century Ave., Suite 301, Mississauga, ON L5N 6A4. Saad Amjad is our privacy officer and is responsible for how we handle personal information: saad@ontariolandlordlawyer.ca, (647) 550-0784.
This policy covers information collected through this website, enquiries made through it and our newsletter. Information about clients' matters is also protected by a lawyer's professional duty of confidentiality and is handled under the client's retainer agreement.
2. What we collect
Information you send us
- Contact form: your name, email address, telephone number (optional), the other party's name (optional, for our conflict check), the type of matter (Landlord and Tenant Board, Divisional Court appeal, criminal or other), a subject line and your message.
- Email and telephone: whatever you choose to tell us when you contact us directly.
- Newsletter: your email address and, if you give it, your name, plus a record of when and how you agreed to receive the newsletter.
Please send only a short summary and the names of the other people involved, so that we can check for conflicts of interest. Do not send documents or detailed facts, and do not include information about a criminal charge or allegation beyond what is needed to describe the type of matter, until we confirm that we can act for you.
Information we add
- Enquiry status: we record where each enquiry stands (submitted, contacted, documents sent, retained, not retained, or spam).
- Blocked senders: if we mark an enquiry as spam, the sender's email address is added to a block list and later messages from it through this website are not delivered to us. If you think you have been blocked by mistake, please telephone.
Information collected automatically
- Security and spam prevention: when a form submission is blocked as suspected spam, we keep a record of the time, the page, your IP address, your browser's user-agent string and the first part of what was submitted. A submission can occasionally be blocked by mistake; if you have not heard from us within one business day, please telephone.
- Server and network logs: our hosting and network providers record technical information such as IP address, browser type, the page requested and the time. Our web server keeps these logs for 14 days. Cloudflare keeps its own logs under its privacy policy.
- Analytics: see section 7.
3. Why we use it
- to reply to your enquiry and arrange a free consultation;
- to check for conflicts of interest and decide whether we can act for you;
- if you become a client, to open and run your file;
- to keep the website secure and filter spam;
- to confirm that the contact form is working (see section 5);
- if you subscribe, to send you our newsletter; and
- to understand, in aggregate, how the website is used so we can improve it.
We do not sell personal information. We do not add people who send an enquiry to the newsletter unless they separately ask to subscribe.
4. Consent
By sending the contact form or emailing us, you consent to our using your information for the enquiry purposes in section 3. The newsletter and analytics cookies each need your separate consent. You may withdraw consent at any time by contacting us, subject to legal and professional obligations; if you withdraw consent to the use of your enquiry, we may be unable to respond or act for you.
5. Who can see your information
Your enquiry is emailed to Saad Amjad and stored in the website's database, where it can be viewed in a password-protected staff dashboard. We use these service providers, who handle personal information for us:
- Hetzner Online GmbH (Germany) hosts the website and its database on a server in Helsinki, Finland.
- Migadu-Mail GmbH (Switzerland) hosts our email, including enquiry emails; Migadu states that its servers are in France.
- Cloudflare, Inc. (United States) provides domain name service, network security, content delivery and Cloudflare Web Analytics. Every visit to the website passes through Cloudflare.
- Google LLC (United States) provides Google Analytics (only if you accept analytics cookies) and Google Fonts.
- Exhibit A Media (Hamilton, Ontario) built and maintains this website. It has technical access to the website, its staff dashboard, its database, its server and its backups, and can therefore see enquiries stored there. Exhibit A Media acts for us under a written confidentiality agreement and may use this information only to maintain the website. Nightly backup copies of the database are kept on the server and on Exhibit A Media's computer and cloud storage (Dropbox). Dropbox may store these copies in the United States. Backups are kept on a rolling schedule (7 daily, 4 weekly and 6 monthly copies), so a deleted record can remain in a backup for up to about 6 months.
Delivery check. Each time an enquiry arrives, Exhibit A Media receives a short automatic notice saying that a message arrived and whether it was delivered to us. The notice contains no name, contact details or message. From 6 to 7 October 2026 a full copy of each enquiry was sent to Exhibit A Media's mailbox (hosted by Google in the United States) instead; those copies will be deleted by 6 November 2026.
We may also disclose information where the law requires it, or to the Law Society of Ontario where required. We do not tell anyone that you have consulted us unless you agree or the law requires it.
6. Information stored outside Canada
Our service providers store or process information outside Canada, including in Finland, France, Germany, Switzerland and the United States. While it is there, it may be accessible to the courts, law enforcement and national security authorities of those countries.
7. Cookies and analytics
A cookie is a small file a website stores in your browser. This website uses:
| Name | Provider | Purpose | Duration | When |
|---|---|---|---|---|
| csrftoken | This website | Security: protects forms against forged submissions | 1 year | Always (necessary) |
| sessionid, messages | This website | Staff login and on-screen confirmation messages | Up to 2 weeks / session | Staff area and form confirmations (necessary) |
| oll_consent | This website | Remembers your analytics choice | 180 days | After you choose |
| _ga, _ga_7JRZR8EV90 | Google Analytics | Distinguishes visitors and sessions to count visits and pages viewed | Up to 2 years | Only if you click "Accept" |
Your choice. Google Analytics runs only if you click "Accept" in the cookie banner. If you click "Reject", or make no choice, it does not load. You can change your choice at any time with the "Cookie settings" link at the bottom of every page. Analytics never runs in the staff area.
Google Analytics tells us which pages are visited, how visitors arrive and roughly where they are (city or region), using a random identifier. We do not send your name, email or message to Google. Google Signals and advertising personalisation are turned off. Cloudflare Web Analytics counts page views and performance without setting cookies.
Fonts: pages load typefaces from Google Fonts, so your browser sends your IP address to Google when a page loads.
Links out: join links on our LTB hearing-rooms page pass through a link-shortening service (bit.ly) before opening Zoom. Those services receive your click under their own privacy policies.
8. How long we keep information
Enquiries that do not lead to a retainer are deleted 3 months after they arrive, unless we are still discussing the matter with you; in that case they are deleted once 12 months pass with no further progress. The spam-prevention log is deleted after 3 months.
Blocked-sender entries are kept until we remove them. Newsletter subscription records are kept while you are subscribed and for as long afterwards as we need them to show that you consented. If you become a client, your file is kept for the period required by the Law Society of Ontario and the law, as explained in your retainer agreement.
9. Newsletter
We send the newsletter only to people who have ticked the newsletter box or otherwise expressly asked for it. Every issue identifies Amjad Law, gives our mailing address and contact details, and contains an unsubscribe link. Unsubscribing takes effect without delay and in any case within 10 business days, with nothing more for you to do. The newsletter is sent from noreply@ontariolandlordlawyer.ca through our email provider, Migadu (servers in France).
10. Google reviews
We display reviews that people have chosen to post publicly on Google, with the reviewer's first name and last initial. We do not add any information about the reviewer or their matter, and we do not display a review that reveals a criminal matter or other details of a matter. If you posted a review and would like it removed from this website, contact us and we will remove it here; to change or delete it on Google, use your Google account.
11. How we protect it
The website uses encrypted (HTTPS) connections, the staff dashboard is password protected, and access to enquiries is limited to Saad Amjad and, for technical work, Exhibit A Media. No method of transmission or storage is completely secure, which is one reason we ask you to send only a short summary through the website.
12. Your choices and rights
You may ask to see the personal information we hold about you, ask us to correct it, or withdraw your consent, by contacting Saad Amjad at saad@ontariolandlordlawyer.ca. We may need to confirm your identity, and some information may be withheld where the law permits, for example where it is privileged or concerns another person. If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada.
13. Changes to this policy
We may update this policy by posting a new version here with a new "last updated" date.