A CRM implementation is the work of turning your sales process into records, rules and responsibilities that your team can use consistently. The software needs to show what has happened, what must happen next and who is accountable. Importing a contact list and renaming a few pipeline stages does not establish any of those things.
This guide is for Canadian small businesses that have chosen a CRM or are checking whether a shortlisted system can support their process. It gives you a practical implementation plan, from defining sales stages to testing integrations and handing the system over. If you are still comparing products, start with our small-business CRM comparison, then use the requirements here to assess implementation fit.
The working example is Harbour Office Care, a fictional commercial-cleaning business. Its people, accounts, amounts and scenarios are invented solely to demonstrate the decisions. The companion CSV workbook and field dictionary contain hypothetical examples, with test results left unfilled. They are planning documents, not files to import directly into a live CRM.
Define what a completed CRM implementation must do
Start with operational questions. Can an enquiry reach the correct person? Can a replacement employee understand an open opportunity? Can operations identify exactly what the customer accepted? Can the business explain why a record appears in a report?
Translate each question into something observable. “Better follow-up” is an objective. “Every open opportunity has an active owner and a dated next action, and missing values appear in an exception list” is a requirement you can test. A useful requirement names the record, the rule, the responsible role and the evidence needed for acceptance.
Give requirements stable identifiers, such as ST-02 for a stage rule or IN-01 for an integration. Reference those identifiers in test cases. When a salesperson reports a problem, the team can distinguish a broken agreed rule from a new request. Both deserve attention, but they affect scope differently.
Agree the first release and its boundaries
For Harbour Office Care, the first release covers new enquiries, site assessments, proposals, accepted contracts and the handoff to operations. It connects a website form and a job-management system. Payroll, employee scheduling and marketing campaigns are outside this release. A customer can still receive service while those later projects remain separate.
Document the actual licence, integration access and administrator permissions available before configuration. A feature shown in a sales demonstration may require a different subscription or may behave differently through an import. Record a verified capability, an acceptable manual workaround or an unresolved dependency against each requirement. Do not let an unverified feature become a launch assumption.
| Phase | Work product | Evidence required to advance |
|---|---|---|
| 1. Discover | Current process, data inventory and first-release scope | Sales and operations agree the real workflow and its exceptions. |
| 2. Design | Stage definitions, field dictionary, access matrix and integration map | Each rule has an owner and a testable expected result. |
| 3. Configure | Working process in a controlled test environment | Representative records can move through the process without unsafe side effects. |
| 4. Rehearse | Trial migration and user acceptance tests | Reconciliation is complete; blocking defects are resolved and retested. |
| 5. Cut over | Controlled transfer of daily work | Production checks pass and the fallback remains usable. |
| 6. Stabilize | Issue log, trained users and operating documentation | The business can administer routine changes and handle failures. |
We set up and connect CRMs so no enquiry is lost between your website, phone and team.
Estimate effort after examining the records and interfaces. Assign dates to decisions, data preparation and testing as well as configuration. A single pipeline with one form is a different project from several acquired businesses with conflicting customer identifiers. The phase gates matter more than copying someone else’s launch calendar.
Map the work before you name the fields
Walk through a small, deliberately varied sample of recent enquiries with the people who handled them. Include a straightforward sale, a lost proposal, a repeat customer, an incomplete enquiry and a sale that required an exception. Use approved access and avoid copying unnecessary personal information into workshop notes.
For each case, record the trigger, information received, decision made, person responsible and next recipient. Mark where people used an inbox, spreadsheet or conversation to fill a gap. The current process may contain useful judgement that should survive implementation, alongside workarounds that should disappear.
At Harbour Office Care, an administrator receives an enquiry. A sales representative confirms service fit. An estimator visits the premises and prepares the scope. Sales sends a proposal. Operations accepts the job details after the customer accepts the commercial terms. Each transition requires information that the next person cannot safely guess.
Separate people, organizations, opportunities and delivery
A contact represents a person. An account represents an organization. An opportunity represents a specific potential purchase. A service location represents where work will happen, if your process needs that distinction. A job or project represents delivery after acceptance. Your CRM may use different names, but the relationships must remain clear.
One property manager could be connected to several buildings. One customer could request two unrelated proposals. Creating a new contact for every proposal fragments the relationship; putting every building into one opportunity hides which scope the customer is deciding on. Write the relationship rule before choosing the platform feature used to implement it.
Harbour uses one account per contracting organization, contacts linked to their relevant accounts, and one opportunity per buying decision. A proposal covering two buildings stays together when it has one approval and one commercial decision. Separate approvals produce separate opportunities. Delivery receives location-specific instructions even when the sale is combined.
Decide what stays outside the CRM. Detailed cleaning schedules belong in the job system in this example. The CRM holds a linked job identifier and handoff status. Copying a full operational record into both systems would create two versions that somebody must keep aligned.
Write sales stages as evidence-based decisions
A stage should tell the team what is known about the opportunity. “Called twice” describes an activity. “Requirements confirmed” describes a change in the sales situation. Keep calls and reminders as activities unless they genuinely define a different business state.
For every stage, write entry criteria, exit criteria, required information, owner and next action. Entry criteria explain why a record belongs there now. Exit criteria explain what evidence permits the next transition. A stage with no meaningful difference from its neighbour can usually be combined with it.
| Stage | Evidence needed to enter | Exit criterion and owner |
|---|---|---|
| New enquiry | A service request and usable contact route exist. | Administrator assigns an active owner; sales confirms fit or records a disqualification reason. |
| Qualified | Service type, location and decision contact are confirmed. | Sales arranges an assessment or documents an approved reason to skip it. |
| Assessment | The assessment is booked or an exception is approved. | Estimator records sufficient scope, access constraints and pricing inputs to prepare an offer. |
| Proposal issued | A dated proposal version was sent to the correct recipient. | Sales records acceptance evidence, a loss reason or a customer-agreed deferral. |
| Closed won | Acceptance evidence matches the current proposal and required commercial conditions are met. | Sales starts the operations handoff; delivery readiness is tracked separately. |
| Closed lost | The opportunity has a recorded loss reason and decision date. | Sales records any permitted future follow-up separately from the closed opportunity. |
Harbour’s illustrative commercial policy treats a signed agreement as the acceptance evidence and requires no deposit. A different business might require a deposit or purchase order. Define that policy explicitly. The stage configuration should implement the business’s approved rule; it should not silently establish contract terms.
Decide how exceptions affect the pipeline
A familiar customer may need a quote without another site visit. Allow an assessment waiver with a reason and manager approval. Do not fabricate a completed visit to satisfy a required field. A legitimate exception should be visible enough that a colleague can understand it later.
For a deferred opportunity, Harbour records an on-hold status, reason and review date while retaining the last valid stage. Its active pipeline report excludes on-hold records and displays them separately. This prevents a delayed project from looking like current sales activity without pretending it was lost.
Agree how reopening works. A correction to a wrongly closed record needs an audit note. A new scope requested months later may deserve a new opportunity linked to the old one. Define which dates and history survive, and test whether reopening would repeat a customer email or create a second job.
Stage probabilities are optional planning assumptions, not evidence of conversion. If you use them, label and review the assumptions. Closed-won value is also not automatically invoiced or recognized revenue. Keep the definitions distinct so the CRM does not turn a sales report into a misleading financial statement.
Build a field dictionary that people can maintain
Every proposed field should answer a practical question: what decision, handoff or report uses this value? If nobody can name the use, leave it out of the first release. A long form filled with guesses produces less trustworthy data than a short form that accepts an honest unknown.
The field dictionary records the object, stable internal name, user-facing label, data type, allowed values, required point, source, editing rights and validation rule. Include a description that appears beside the field where possible. Different employees should give the same answer when asked what a value means.
| Field | Definition and format | When required |
|---|---|---|
| Opportunity owner | An active user responsible for the next sales action. | Before an enquiry leaves the assignment queue. |
| Service type | A controlled list of services actually offered; no ambiguous “miscellaneous” default. | Qualification. |
| Next action and due date | A concrete task and a date or timestamp with a defined time zone. | Every open, active opportunity. |
| Monthly service amount | Recurring amount in the recorded currency, excluding tax and one-time work. | Proposal issuance, when recurring service applies. |
| Proposal version | An identifier and restricted link to the exact offer sent. | Proposal issuance. |
| Acceptance evidence | A reference to the accepted version and acceptance date. | Closed won. |
| Loss reason | A controlled reason, with explanation when “other” is selected. | Closed lost. |
| Handoff status | Not started, pending, accepted or returned, with receiving owner. | After closed won. |
Require information when it becomes knowable. An enquiry should not need an exact contract value before anyone has assessed the work. Harbour allows an unknown budget at intake, but does not allow a proposal to be marked issued without its amount and version. If the CRM cannot enforce a stage-specific rule, document the manual check and test its exception report.
Define blanks, dates, money and source consistently
Blank, unknown and not applicable mean different things. A blank service location may be unfinished work. “Unknown” may be a recorded answer awaiting confirmation. “Not applicable” may be valid for a remote service. Choose the permitted meaning for each field; do not use zero as a substitute for missing money.
Use unambiguous date formats in migration files and specify how timestamps are interpreted. A date-only service start should not move a day when someone in another province opens it. Test accents, apostrophes and French-language names. Store postal codes and identifiers as text where formatting must survive spreadsheet handling.
For Harbour’s hypothetical CAD 1,800 monthly service, the monthly amount is 1,800, the currency is CAD and the agreed initial term is 12 months. A derived first-term recurring value is CAD 21,600. It excludes any one-time charge, tax, renewal or accounting recognition. Name the calculated field accordingly and show the formula in the dictionary.
Keep the original enquiry source separate from the most recent interaction. A returning customer who fills out a website form has both an existing relationship and a new form event. Specify whether an incoming value may overwrite each source field. A single “source” dropdown cannot reliably answer every attribution question.
Assign permissions and ownership before connecting real data
Separate responsibility for a sale from authority to change the system. The opportunity owner manages the next action. The process owner approves stage definitions. The CRM administrator implements approved changes. An integration owner investigates failed transfers. One employee may hold several roles, but each responsibility still needs a named backup.
Create a permission matrix covering viewing, editing, exporting, merging, deleting and administering. Include field-level restrictions where needed, along with access through reports, attachments, mobile applications and connected systems. Hiding a field on one screen does not demonstrate that a user cannot retrieve it elsewhere.
| Role | Needed access | Restriction to test |
|---|---|---|
| Sales representative | Assigned opportunities and relevant customer contacts | Cannot export the complete customer list or change access rules. |
| Sales manager | Team pipeline, assignment and documented stage exceptions | Cannot automatically alter integration credentials. |
| Operations coordinator | Accepted scope, service contacts and delivery requirements | Cannot browse unrelated prospect notes. |
| CRM administrator | Configuration and approved data maintenance | Uses an individual account; privileged changes are traceable. |
| Integration identity | Only records and actions needed by its connection | Cannot perform unrelated exports or administrative actions. |
These are design requirements, not a promise that every CRM edition supports them. Where a restriction cannot be enforced, assess a supported alternative before importing sensitive records. Document who approved the approach and its limits. Train people with the permissions they will actually use, rather than demonstrating everything through an administrator account.
Make privacy and communication rules testable
For organizations subject to PIPEDA, the Office of the Privacy Commissioner describes requirements around identified purposes, limited collection, appropriate retention, accuracy and safeguards. Confirm the federal, provincial and sector-specific requirements applicable to your business before translating them into CRM rules. See the OPC’s fair information principles.
As an implementation practice, assign a purpose and retention rule to each personal-information category. Keep sensitive delivery details out of general sales notes when a restricted operational system is more appropriate. Identify who handles access, correction and deletion requests, including copies in connected systems and exports.
Communication permissions need their own records. An enquiry source or customer stage is not, by itself, proof that a particular marketing message is permitted. The CRTC explains that the sender must be able to demonstrate the consent relied upon. Record the applicable basis, evidence reference, collection date and relevant review or expiry date rather than assuming that every imported contact is marketable. See the CRTC’s consent guidance.
The CRTC says unsubscribe requests must be processed without delay and no later than 10 business days. Test suppression across every sending system, including a request entered manually after a telephone conversation. Have the person responsible for compliance approve the communication rules and applicable exceptions; a CRM checkbox does not settle them. See the CRTC’s CASL questions and answers.
Official privacy and anti-spam sources checked on October 8, 2026.
Map integrations as business rules, not just connections
For each integration, write the source event, source record, destination record, matching key, field transformation and accountable owner. Specify the authoritative system for each shared field. “Two-way sync” is incomplete until you know what happens when both systems change a value or one system sends an empty field.
Harbour’s website form supplies an enquiry identifier, contact details and requested service. The CRM owns the sales stage and opportunity owner. The job system owns the delivery schedule. The job system can return a job identifier and readiness status without taking control of the sales pipeline.
| Question | Hypothetical rule | Test |
|---|---|---|
| What identifies a repeated event? | Website submission ID identifies one submission. | Replay that event; no second enquiry or notification appears. |
| What identifies the customer? | A stored cross-system ID links established records. | An email change updates the correct contact without creating another account. |
| What does a blank mean? | An omitted phone field does not erase a verified phone number. | Send an update without the field; the number remains. |
| Who wins a conflict? | The job system controls the confirmed service schedule. | A CRM edit cannot silently overwrite an operational booking. |
| What follows a failed transfer? | The event is visible in an error queue with an owner. | Repair the fault and retry without creating a duplicate job. |
An event identifier and a person identifier solve different problems. Two submissions from the same person may be separate buying requests. Conversely, a retry of one submission should not create a new request. Use a rule for repeated events and a separate rule for recognizing existing people and organizations.
Define how long a failure may remain unresolved during staffed hours, who receives the alert and how work continues while the connection is unavailable. A notification alone is insufficient: somebody must review a persistent queue and reconcile it against the source. Check for missed events even when the integration reports no errors.
Test delayed and out-of-order updates. An old proposal event must not move a won opportunity backwards. An unsubscribe followed by an older contact update must not restore marketing eligibility. If the connector cannot distinguish versions or event times, use a controlled review queue for the conflict rather than trusting arrival order.
Keep credentials out of worksheets and screenshots. Record the credential owner, access scope, storage location reference and rotation procedure. Verify current official documentation for the chosen connector’s supported operations and limits during configuration; generic implementation advice cannot establish those product-specific behaviours.
Clean and migrate data with a reconciliation plan
Begin with a source inventory: files, systems, record types, volumes, owners and known problems. Decide which records need migration, which should remain in an approved archive and which need review before any transfer. Retaining everything forever is not a substitute for a retention decision.
Preserve a controlled source snapshot and assign a migration batch identifier. Keep the original source ID in the destination or a mapping table. That relationship lets you explain where a record came from, correct a mapping error and repeat a migration step without relying on names.
Deduplicate conservatively
Normalize formatting for comparison without destroying the original value. Trim accidental spaces, handle phone extensions separately and use a reviewed convention for email matching. Do not assume that a shared telephone number means two contacts are the same person. A receptionist, property manager and accounts-payable contact can share an office number.
Use progressively weaker signals. An exact trusted source ID is strong evidence of the same record. Matching email addresses can identify a review candidate, but a shared mailbox may represent several people. Similar names or postal addresses should normally prompt human review, not an automatic merge.
A merge rule must explain which values survive. Harbour keeps the verified current phone number, retains historical activities and preserves the original identifiers. Conflicting communication-permission evidence goes to review; the merge cannot silently turn a suppressed record into a marketable one. Test which activities, attachments and relationships your actual merge operation preserves.
Record the proposed master record, duplicate record, reason, reviewer and outcome in a merge log. Some platforms cannot reverse a merge cleanly. Review a representative sample before enabling bulk operations, and keep exports only within the business’s approved access and retention controls.
Rehearse a small but difficult import
Include records with missing values, accents, duplicate candidates, multiple contacts per account, old owners, closed opportunities and existing opt-outs. Test long notes and attachment links, not just short names. Disable outbound messages, live job creation and other side effects in the rehearsal environment.
Import records in an order that preserves relationships, using the platform’s supported method. For example, accounts may need to exist before opportunities can link to them. If import tooling handles related objects together, verify the resulting relationships rather than assuming that a successful upload confirms them.
Reconcile by object and disposition. In a hypothetical batch of 240 source contact rows, the plan might produce 222 destination contacts, account for 10 rows through approved merges and hold 8 rows for review. The equation balances, but that alone proves little. Confirm that each source row has a recorded destination or disposition and that the right people remain linked to the right accounts.
Also compare open opportunity amounts by currency, counts by stage, ownership assignments and suppression states. Investigate every discrepancy against a predefined tolerance. Critical items such as lost opt-outs or wrong customer relationships should not receive a casual percentage allowance.
Define rollback before the production import. Identify how to isolate the migration batch, restore changed records and preserve activity entered after launch. Deleting the latest imported rows may leave broken associations or remove legitimate updates. Rehearse the supported recovery method and write down where recovery is incomplete.
Follow one fictional opportunity through the finished design
Harbour Office Care receives a request from a fictional property manager at Example Property Group for cleaning at two office locations. The manager already has a contact record because of an earlier proposal. The form generates submission ID WEB-1042. The integration recognizes the existing contact, creates a new enquiry for the new buying decision and links the records.
A repeated delivery of WEB-1042 creates nothing new. A later request for a third building has a different submission ID and enters a review step to determine whether it extends the existing opportunity or represents a separate purchase. The email address alone does not answer that question.
The administrator assigns the opportunity to the sales representative covering the service area. That representative confirms the service type, both locations and who will approve the contract. Harbour’s hypothetical internal rule calls for assignment within four staffed business hours. The rule defines the working calendar and fallback owner; it is not a universal response-time benchmark.
An estimator assesses both sites and records a proposed recurring scope. The sales representative issues proposal P-1042-v2 at CAD 1,800 per month for a 12-month initial term. The CRM stores the version reference, amounts and next action. It does not mark the opportunity won merely because the proposal was opened.
The customer accepts version two. Sales records the evidence and closes the opportunity as won. The CRM starts a handoff with status pending. Operations finds that the access arrangements for one location remain unresolved and returns the handoff with a reason. The sale remains won, while the unresolved delivery issue appears in a separate queue.
Sales resolves the missing information and resubmits the same handoff. Operations accepts it, the job system returns a job ID and the CRM records the receiving owner and timestamp. Replaying the accepted handoff does not create a second job. This is the full business journey the implementation must demonstrate before launch.
Turn the workbook into user acceptance tests
User acceptance testing, often shortened to UAT, asks whether the agreed process works for the people responsible for it. Configuration review asks whether settings look correct. You need both. A field can exist with the right label while imports bypass its validation or a restricted user cannot complete the intended task.
Each test should identify the requirement, starting data, user role, steps, expected result, actual result and evidence. Record the environment and configuration version so a later retest means something. Use synthetic records and controlled destinations; do not test customer messages by sending them to real prospects.
Choose a business reviewer who understands the process and can challenge the setup. If the same person configures and tests a small implementation, acknowledge that limitation and have another responsible person review the critical evidence. Do not label an unperformed review as independent approval.
| Test | Action | Expected evidence |
|---|---|---|
| New enquiry routing | Submit valid synthetic data during staffed hours. | One enquiry has the correct owner, source and next action. |
| Missing contact route | Submit a request without usable contact information. | The request is rejected or enters a visible exception queue; it is not silently lost. |
| Stage validation | Try to issue a proposal without a proposal version. | The agreed control prevents completion or flags the exception for review. |
| Assessment waiver | Skip the visit for an approved repeat-customer scenario. | The reason and approver are recorded; no fictitious visit is created. |
| Duplicate event | Replay the same form event twice. | Only one enquiry exists and duplicate notifications are suppressed. |
| Permission boundary | Attempt an unauthorized export using a sales account. | Access is denied through the tested interface. |
| Communication suppression | Record an opt-out, then replay an older contact update. | Suppression remains in effect across connected sending systems. |
| Migration relationships | Inspect a customer with several contacts and opportunities. | Source IDs, links, ownership and history match the approved mapping. |
| Integration outage | Make the destination unavailable in the test environment. | The failure is visible; a repaired retry creates one destination record. |
| Returned handoff | Operations rejects incomplete access details. | A reason and correction owner appear without reopening the sale. |
| Departed owner | Deactivate a test owner with open work. | Work remains visible and follows the documented reassignment procedure. |
| Reporting reconciliation | Compare known test records with stage and value reports. | Inclusions, exclusions and totals match written definitions. |
Expand critical tests across the interfaces the team actually uses. If a stage rule matters, try it through the user interface, import and integration where those routes can change stages. If a restriction matters, check reports and exports as well as the record screen. A passing result applies to the routes tested, not automatically to every feature.
Agree defect severity before testing begins. Unauthorized data access, missing enquiries, restored marketing eligibility and duplicate job creation are examples of potential launch blockers. A wording problem may be deferrable. Each deferred defect needs an owner, workaround, due date and explicit acceptance by the accountable business lead.
Do not accept “the vendor is investigating” as a working control. If a critical defect remains, reduce launch scope to a tested process, use an approved manual alternative or delay the affected release. Retest the failed scenario after a repair and check any directly affected neighbouring process.
Cut over with a controlled fallback
Name one cutover lead with authority to proceed, pause or roll back. Record the final export time, any editing freeze, the migration sequence, integration switch points and the people checking each step. Choose a window when those people can respond, not simply the earliest available date.
Capture the changes made after the rehearsal export. Decide how newly created records and edits enter the final migration, and how the team will prevent the same enquiry from being worked in two systems. Keep the old system available according to the approved retention and access plan, with its operational status clearly labelled.
Before opening the new process to everyone, check a controlled production enquiry, assignment, permissions, suppression, reports and delivery handoff. Keep test messages and jobs within approved test destinations. Confirm that production credentials and settings match the tested design; a successful rehearsal does not verify production configuration.
The fallback needs its own working instructions. If a connection fails, who records new enquiries, where are they held, and how are they later reconciled? Preserve event identifiers so recovery does not create duplicates. A spreadsheet can serve as a temporary queue when access is controlled and its records have a defined route back into the CRM.
Train for decisions and recovery
Ask users to complete their own realistic tasks: qualify an enquiry, record an uncertain answer, request an exception, find a missing handoff and correct a mistaken value. Give each role a short operating guide with the decisions it owns. Training is incomplete if everyone watched a demonstration but nobody tried the workflow.
During stabilization, review exception queues and sample records with the people doing the work. Watch for unassigned enquiries, overdue next actions, handoffs awaiting acceptance and integration failures. Agree a review frequency that fits the business’s volume and staffing, then reduce it only when responsibility is clear.
Distinguish configuration defects from process friction. If users repeatedly enter placeholder values, inspect whether the field is required too early or its meaning is unclear. If accepted handoffs remain untouched, inspect receiving capacity and ownership. More automation cannot resolve every operational problem.
Hand over a system the business can own
The final package should include the approved process map, stage definitions, field dictionary, permission matrix, integration mappings, migration reconciliation, test evidence and unresolved issue log. Record the configuration version, system owner, backup administrator and change-approval route. Store recovery instructions where authorized staff can reach them during an outage.
For agency-led work, confirm business ownership of the subscription and the practical ability to administer it. List connected accounts, renewal responsibilities, vendor support routes and where credentials are securely held. Record agency access, the support scope and the process for changing or ending that access. Canada Create’s CRM implementation services provide context for commissioning this work; the project’s own approved scope should define its deliverables.
Agree who maintains each rule after launch. Sales owns stage meaning; operations owns handoff requirements; the appropriate data owner approves retention and communication rules; the administrator maintains configuration. Revisit permissions when people change roles, and review integration failures when connected systems change.
Use the editable implementation workbook
The companion package includes 51 workbook rows, 29 field definitions and 15 unexecuted acceptance tests. The workbook uses one row per stage, permission, integration, migration decision, handoff, test or release gate. Filter by record type to run a focused workshop. Replace the hypothetical owners and examples with your own decisions, while retaining the stable IDs that connect rules to tests.
The field dictionary is a worked starting set, not a complete deployable schema. Add any remaining fields your approved rules need, such as stage, account links and handoff owner. Adapt labels, allowed values and required points to your process. The workbook notes explain every worksheet column and how to record evidence. Leave test status as “not run” until someone performs the stated steps; a convincing expected result is still only an expectation.
Acceptance checklist
- Approved scope, rules and field definitions match the tested configuration.
- Migration records, relationships, values and suppression states reconcile.
- Required tests have actual results, dated evidence and an accountable reviewer.
- Blocking defects are resolved and retested; accepted exceptions have owners and due dates.
- Production checks, recovery instructions, access ownership and support responsibilities are documented.
Finish by answering four questions with evidence: can the team capture work, move it forward, transfer responsibility and recover when something fails? A CRM implementation is ready for acceptance when the agreed scope passes those checks, material exceptions are resolved or explicitly accepted, and the business knows who will maintain it.
Sources and method
This guide combines an original implementation framework with the following official Canadian sources, checked October 8, 2026:
- Office of the Privacy Commissioner of Canada, PIPEDA fair information principles: purposes, collection, retention, accuracy and safeguards where PIPEDA applies.
- CRTC, Guidance on Implied Consent: evidence supporting the consent relied upon.
- CRTC, Frequently Asked Questions about Canada’s Anti-Spam Legislation: unsubscribe handling.
Harbour Office Care, its records and all calculations are hypothetical. The worksheets are original planning examples; no CRM configuration or acceptance test was performed. Verify product-specific capabilities and applicable privacy and communication requirements for your own implementation.

