Legal

Privacy Policy

Last updated: August 7, 2026

1. Introduction

This Privacy Policy explains how Duezy ("Duezy," "we," "us," or "our") collects, uses, discloses, and safeguards personal information. Duezy is a legal-services technology platform operated by In-House Receivable Services Ltd., doing business as IRS Collections, that provides skip tracing and process-serving services to lawyers, law firms, and other legal professionals in Canada.

We are committed to protecting personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA), British Columbia's Personal Information Protection Act (PIPA), and other applicable Canadian privacy legislation. Because our services involve the handling of sensitive personal information about individuals, we take our privacy obligations seriously.

By accessing or using the Duezy platform (the "Platform"), you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Platform.

2. Who This Policy Applies To

This Policy addresses two distinct categories of individuals:

Platform users — the legal professionals and their authorized staff who register for and use Duezy to request and manage services.

Subject individuals — the individuals about whom our users request services, such as defendants, debtors, or other persons named in a Notice of Claim or related legal matter ("Subject Individuals"). Duezy processes information about Subject Individuals on behalf of, and at the direction of, our users in support of legitimate legal proceedings.

3. Information We Collect

3.1 Information you provide as a user

  • Account and identity information: name, business/firm name, professional role, email address, telephone number, and login credentials.
  • Case information: Notice of Claim documents, court file details, matter references, and other documents or instructions you upload or enter.
  • Communications: messages, support requests, and correspondence you send to us.
  • Billing information: where applicable, billing contact details and payment records. Payment card processing is handled by third-party payment processors; we do not store full payment card numbers.

3.2 Information about Subject Individuals

To perform skip tracing and process serving, we and our users may collect and process information about Subject Individuals, which may include name, known or suspected addresses, contact details, employment information, asset information, date of birth, and other identifying details drawn from your instructions and from lawful public records and database searches.

3.3 Information collected automatically

  • Usage and device data: IP address, browser type, device identifiers, pages viewed, and actions taken on the Platform.
  • Service verification data: for process serving, we may collect GPS location data, timestamps, and photographs documenting service attempts and completion.
  • Cookies and similar technologies: used to keep you signed in, remember preferences, and understand how the Platform is used. See Section 10.

4. How We Use Personal Information

We use personal information to:

  • provide, operate, and maintain the Platform and deliver requested skip-tracing and process-serving services;
  • locate Subject Individuals and confirm addresses through database searches and public-records investigation;
  • serve legal documents, generate certified proof of service, and prepare court-ready affidavits;
  • create case reports, confidence ratings, and status updates for our users;
  • verify identity, authenticate users, and manage accounts;
  • communicate with you about your cases, account, and support requests;
  • process billing and maintain financial records;
  • improve, secure, and monitor the Platform, and detect and prevent fraud or misuse;
  • comply with legal, regulatory, and court obligations.

We collect, use, and disclose personal information only for purposes that a reasonable person would consider appropriate in the circumstances, and only to the extent necessary for the identified purposes.

5. Legal Basis and Consent

For Subject Individuals, information is collected and used to support legitimate legal claims, litigation, debt recovery, and the lawful service of legal process. In accordance with PIPEDA and applicable provincial law, consent may not be required in certain circumstances — for example, where collection or use is reasonable for an investigation of a breach of an agreement or contravention of law, is related to legal proceedings, or is otherwise permitted or required by law. Users of the Platform are responsible for ensuring they have a lawful basis and proper authority for the matters they submit.

For platform users, we rely on your consent and on the necessity of processing your information to provide the services you request.

6. How We Share Personal Information

We do not sell personal information. We may share personal information with:

  • The requesting user and their authorized representatives, in the form of reports, findings, and proof-of-service documentation;
  • Service providers and process agents — including field process servers, court registries, licensed bailiffs, and data or public-records providers — who assist in delivering the services, and who are bound by confidentiality and privacy obligations;
  • Our affiliate, IRS Collections / In-House Receivable Services Ltd., where necessary to deliver related recovery or enforcement services you have requested;
  • Payment processors and technology providers who support Platform operations;
  • Courts, regulators, law enforcement, and legal advisors, where required or permitted by law, or to establish, exercise, or defend legal claims.

Where service providers are located outside your province or outside Canada, personal information may be processed in those jurisdictions and may be accessible to courts, law enforcement, and regulatory authorities under the laws of those jurisdictions. We take reasonable steps to ensure comparable protection through contractual and other safeguards.

7. Data Retention

We retain personal information only as long as necessary to fulfill the purposes described in this Policy, to provide the services, and to meet legal, regulatory, accounting, and litigation-related requirements. Case files, proof-of-service records, and affidavits may be retained for extended periods because they may be needed as evidence in legal proceedings. When personal information is no longer required, we securely destroy, erase, or anonymize it.

8. Safeguards and Security

We maintain administrative, technical, and physical safeguards appropriate to the sensitivity of the information, including encryption in transit, access controls, authentication requirements, and role-based permissions that limit access to personal information to those who need it. While we work to protect personal information, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Breach Notification

If a breach of security safeguards involving personal information under our control occurs and it is reasonable to believe the breach creates a real risk of significant harm to an individual, we will, in accordance with PIPEDA:

  • report the breach to the Office of the Privacy Commissioner of Canada as soon as feasible;
  • notify affected individuals as soon as feasible, containing sufficient information to allow the individual to understand the significance of the breach and to take steps, if possible, to reduce the risk of harm or mitigate it; and
  • notify other organizations or government institutions that may be able to reduce the risk of harm, where applicable.

We assess "real risk of significant harm" by considering the sensitivity of the information involved and the probability that it has been, is being, or will be misused. We maintain records of every breach of security safeguards involving personal information for at least 24 months, whether or not the breach was determined to create a real risk of significant harm, and will provide these records to the Privacy Commissioner on request.

10. Cookies and Analytics

We use cookies and similar technologies to operate the Platform, keep you logged in, remember your preferences, and analyze usage. You can control cookies through your browser settings; disabling certain cookies may affect Platform functionality.

11. Your Privacy Rights

Subject to applicable law and to any legal or evidentiary reasons that may limit disclosure, you have the right to:

  • Access the personal information we hold about you and be informed of how it has been used and disclosed;
  • Correct inaccurate or incomplete personal information;
  • Withdraw consent, subject to legal or contractual restrictions and reasonable notice;
  • Ask questions or make a complaint about our handling of personal information.

Because Duezy processes much of its information on behalf of our users and in connection with legal proceedings, some requests — particularly those from Subject Individuals — may need to be directed to the user (law firm or legal professional) who initiated the matter, or may be subject to legal limitations. We will respond to verified requests within the timeframes required by applicable law.

12. Access and Correction Requests

To make an access or correction request, or to ask a question about this Policy, contact our Privacy Officer using the details in Section 15. We may need to verify your identity before responding. We will respond to a verified access request generally within 30 days of receiving it, as required by PIPEDA (and within the timeframe required by BC PIPA), or we will notify you if we require an extension permitted by law. Where the law permits or requires us to refuse access — for example, where disclosure would reveal personal information about another individual, is subject to solicitor-client privilege, or could compromise an ongoing legal proceeding or investigation — we will explain the reason for the refusal to the extent we are able.

13. Children's Privacy

The Platform is intended for use by legal professionals and is not directed to children. We do not knowingly collect personal information directly from children through the Platform.

14. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date reflects the most recent revision. Material changes will be communicated through the Platform or by other appropriate means. Your continued use of the Platform after changes take effect constitutes acceptance of the revised Policy.

15. Contact Us — Privacy Officer

If you have questions, concerns, or complaints about how we handle personal information, please contact our Privacy Officer:

Duezy (operated by In-House Receivable Services Ltd. / IRS Collections)
Attn: Privacy Officer
800–525 West 8th Ave
Vancouver, BC V5Z 1C6
Email: info@duezy.ca
Phone: 1-877-282-0197 (Mon–Fri, 9:00 AM – 5:00 PM PT)