Stay on the right side of Canadian law. CASL, GST/HST, privacy rules, and provincial requirements — all in one place.
Get express or implied consent before sending any commercial messages
Include your legal business name and mailing address in every email
Include a clear, easy unsubscribe option in every message
Process unsubscribe requests within 10 business days
Keep written records of consent — who, when, and how they agreed
Audit your consent records yearly — implied consent expires after 2 years
Register for GST/HST once your revenue hits $30,000 in any 4 consecutive quarters
Collect the correct rate: 5% GST (AB, BC, MB, SK), 13% HST (ON), 15% HST (NS, NB, NL, PEI)
File your GST/HST returns on schedule (monthly, quarterly, or annual)
Keep all receipts and invoices for Input Tax Credits
Show your GST/HST registration number on all invoices over $30
Post a privacy policy on your website that explains what data you collect and why
Name a privacy officer responsible for data compliance in your business
Only collect personal information you actually need — nothing extra
Get consent when collecting, using, or sharing personal data
Quebec businesses: comply with Law 25 — stricter than PIPEDA
Register your business name with your province
Obtain any required municipal business licence for your city
Hold appropriate business liability insurance
Keep a separate business bank account — never mix personal and business funds
Retain all financial records for at least 6 years (CRA requirement)
How devMYK can help
We fix these leaks for local businesses — done for you.