Privacy notice
Last updated November 2026.
Shull Law Professional Corporation ("Shull Law", "we") is committed to protecting the personal information entrusted to us. This notice explains how we collect, use, disclose and safeguard personal information in connection with this website and our legal and advisory services, in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and the rules of the Law Society of Ontario.
Information we collect
When you contact us through this website, we collect the information you provide, such as your name, email address, telephone number, organization and a description of your matter. When you become a client, we collect the information necessary to provide our services, including identification and verification information required by Law Society of Ontario by-laws.
In the course of a matter, we may also collect personal information about people who are not our clients, such as opposing parties, witnesses and others involved in a dispute, transaction or investigation. We collect, use and disclose that information only as the matter requires and as permitted by law and our professional obligations, and we protect it in the same way as client information.
This website does not use advertising or tracking cookies, and its fonts, images and scripts are served from our own domain. It is hosted by Cloudflare, which may collect standard technical information (such as IP address, browser type and pages visited) in server logs for security and performance purposes. We also use Cloudflare Web Analytics, a privacy-preserving measurement tool that counts page views and page-load performance without cookies, without fingerprinting, and without identifying or tracking individual visitors across websites.
How we use information
We use personal information to respond to inquiries, conduct conflict checks, provide our services, manage our relationship with you, invoice for services and meet our legal and professional obligations.
Service providers and where information is kept
We rely on a small number of established service providers to operate the practice, each under confidentiality obligations:
- Clio (Themis Solutions Inc.), for client intake, practice management, billing and our secure client portal (Clio for Clients), with data stored in Canada;
- Dropbox Sign, for the electronic signature of engagement letters and other documents that we send through Clio;
- Microsoft 365, for email and document storage, with data stored in Canada;
- Amazon Web Services, for secure off-site backups, stored in Canada; and
- Cloudflare, for website hosting, security and analytics.
We also use artificial intelligence tools to assist with tasks such as organizing correspondence, legal research and drafting. We select these tools with confidentiality in mind, and we use them only under business terms that do not permit the provider to use our information to train its models. They support, rather than replace, a lawyer's judgment: all work product is reviewed by a lawyer.
Some of our service providers, including Cloudflare, Dropbox Sign and providers of artificial intelligence tools, may process personal information outside Canada, including in the United States. Information processed in another country is subject to the laws of that country and may be accessible to its courts, law enforcement and national security authorities.
Disclosure
We do not sell personal information. We disclose it only as necessary to provide our services (for example, to the service providers described above), as required by law, or with your consent. Communications with a lawyer are also protected by solicitor–client privilege where applicable.
Safeguards and retention
We use reasonable physical, organizational and technical safeguards appropriate to the sensitivity of the information. We share documents and sensitive messages with clients through our secure client portal. Client files are retained for the period required by the Law Society of Ontario and applicable law, and then securely destroyed.
Your rights
You may request access to, or correction of, your personal information, subject to legal and professional limits. Requests and questions about this notice may be directed to Aaron Shull through the contact form on this website, by telephone at 226 646 4451, or by mail to 191 King Street South, Suite 106, Waterloo, Ontario N2J 1R1. You may also contact the Office of the Privacy Commissioner of Canada.