Privacy policy

1. Scope

This policy applies to website visitors, account applicants, users, and people who contact support. A separate service provider may have its own privacy notice for financial services it delivers.

2. Information you provide

We may receive names, contact details, account preferences, support messages, complaint information, identity-verification data, payment-method ownership evidence, and documents you choose or are required to provide.

3. Information collected automatically

Technical records can include IP address, approximate location, browser, device, pages viewed, session identifiers, security events, and interaction timestamps. We do not activate Google Analytics unless a valid identifier is later configured.

4. Information from providers

Identity, payment, security, and service providers may return verification status, transaction references, risk indicators, or account events relevant to the service.

5. Purposes of use

Information is used to provide and secure the site, process registration, verify identity, respond to support, prevent fraud, meet legal duties, handle complaints, improve accessibility and reliability, and communicate material service information.

6. Legal basis and consent

Processing may rely on consent, performance of a requested service, legal obligation, or a legitimate interest such as security and fraud prevention. Where consent is the basis, it can be withdrawn subject to legal and operational limits.

7. Cookies and local storage

Essential storage may maintain session, security, form, language, and interface state. Optional analytics remains inactive while GA_METRIC_ID is empty. Browser controls can clear storage, although doing so may interrupt account features.

8. Sharing

We may share necessary information with identity-verification services, hosting and security providers, payment providers, account-service entities, professional advisers, regulators, or authorities. We do not sell personal information as a list to unrelated advertisers.

9. International processing

Some service providers may process information outside Canada, where local authorities can lawfully access it. We use contractual, organisational, and technical safeguards appropriate to the service and information.

10. Retention

Records are retained for the period needed to provide services, meet legal and financial-record obligations, resolve disputes, and prevent fraud. Retention can continue after account closure where required.

11. Security

Measures include encrypted transport, restricted access, logging, review, and incident procedures. No internet service can promise absolute security, so users should protect credentials and report suspicious activity.

12. Your choices and rights

Subject to applicable Canadian law, you may request access or correction, ask questions about use and disclosure, withdraw certain consent, or raise a privacy complaint. Identity must be confirmed before sensitive information is released.

13. Automated processing

Systems may flag unusual access or transaction patterns for review. A flag can lead to a request for information or temporary restriction, but material outcomes should be reviewed through the applicable process.

14. Children

The service is not directed to minors and is not intended for people below the age required to open the relevant account. Contact us if information appears to have been submitted by a minor.

15. Contact and updates

Email privacy questions to [email protected]. We may update this policy when services or legal requirements change and will post the revised version with an effective date.

Privacy requests in practice

Describe the information or processing you are asking about and provide a safe way for us to reply. We may ask focused questions to locate records and verify identity. This protects personal information from being disclosed to an impostor.

Access rights are subject to lawful exceptions. A response may withhold information about another person, privileged legal advice, or security methods where disclosure would create a meaningful risk. If an exception applies, we explain it where permitted.

Accuracy and correction

Account holders should keep names, addresses, phone numbers, and payment ownership details current. Some historical records cannot be overwritten because they document what was known when a transaction or decision occurred. In that case, a correction or explanatory note can be attached.

Changes to high-risk details may trigger additional verification or a temporary restriction. That delay is designed to reduce account takeover and does not imply wrongdoing.

Service communications and marketing

Operational messages can include security alerts, verification requests, policy changes, transaction status, and essential account information. These are different from optional marketing. Where marketing consent is required, an unsubscribe method will be provided.

Unsubscribing from promotional communication does not stop messages necessary to secure or administer an active account.

Analytics configuration

The site includes an inactive Google Analytics configuration slot for future use by the operator. While the identifier remains empty, the related script is not rendered and no request is sent by that slot. If analytics is activated, consent and policy implementation should be reviewed before deployment.

The market ticker, registration form, and geo-aware calculator use technical information needed to provide their functions. Geo information selects relevant display settings such as currency and is not a guarantee of precise physical location.

Privacy complaints

Raise a privacy concern with Client Support & Compliance at [email protected]. Explain the event, affected information, relevant date, and desired response. We investigate under the Complaints process and provide information about further recourse where applicable.