Privacy Policy

1. Introduction and Scope

This Privacy Policy (the "Policy") describes how the operator of this website (the "Operator") collects, uses, discloses, stores, and otherwise processes information in connection with the website, newsletter subscriptions, downloadable resources, and related online services (collectively, the "Services"). By accessing or using the Services, you acknowledge that you have read this Policy. If you do not agree with this Policy, you should discontinue use of the Services.

This Policy applies to visitors and subscribers who interact with the Services in a personal capacity. It does not replace or override any separate privacy notice or agreement that may apply if you establish a regulated client relationship with a financial services firm through channels other than this website.

2. Personal Information We May Collect

Depending on how you interact with the Services, the Operator may collect or receive the following categories of information, some of which may qualify as personal information under applicable privacy laws:

• Contact and account identifiers. For example, your email address when you subscribe to a newsletter, submit a form, or correspond with the Operator.
• Technical and usage data. For example, Internet Protocol (IP) address, browser type, device type, operating system, referring URLs, pages viewed, date and time of access, and similar diagnostic data generated when you load pages or interact with the Services. Such data may be collected by the Operator or by hosting, content delivery, or analytics vendors as described below.
• Cookies and similar technologies. For example, session cookies used to maintain authenticated sessions for authorized editors of the content management system, or other cookies that may be required for security or basic functionality.
• Content you voluntarily provide. Any information you include in free-text fields, email messages, or attachments you choose to send to the Operator.

The Operator does not intend to collect sensitive personal information through the public Services (for example, government identifiers, health information, or financial account numbers) unless a specific form clearly requests it and explains why it is needed. You should not submit sensitive information through general contact forms unless you are instructed to do so through a secure, appropriate channel.

3. Purposes of Collection and Use

The Operator uses personal information for purposes that are consistent with operating the Services and with applicable law, including:

• Providing, maintaining, improving, and securing the website;
• Delivering newsletters, guides, or other materials you have requested or agreed to receive;
• Responding to inquiries, troubleshooting technical issues, and communicating about the Services;
• Complying with legal obligations, responding to lawful requests from public authorities, and protecting the rights, property, or safety of the Operator, users of the Services, or others;
• Detecting, preventing, or addressing fraud, abuse, or security incidents; and
• Compiling aggregated or de-identified statistics that do not reasonably identify you.

The Operator does not sell your personal information to third parties in the conventional sense of selling lists of individuals for monetary consideration.

4. Newsletter and Electronic Communications

If you subscribe to a newsletter or similar mailing list, the Operator (or an email service provider acting on its behalf) will process your email address and related delivery metadata to send messages you have signed up for. You may withdraw consent or unsubscribe using the mechanism provided in each commercial email (for example, an unsubscribe link in the footer), where required by law, or by contacting the Operator using the contact method published on the Services.

Transactional or service-related messages (for example, confirmations of a subscription change) may be sent even after you opt out of marketing content, where permitted by law.

5. Cookies, Sessions, and Similar Technologies

The Services may use cookies, local storage, or similar technologies for purposes such as authentication of authorized editors, session continuity, load balancing, or security. Cookies used for editorial sign-in are functional in nature and are not used to serve third-party advertising through this Policy's intended configuration of the site. Your browser may allow you to refuse or delete cookies; doing so may affect how certain features function.

6. Service Providers and Disclosure

The Operator may engage third-party vendors to host the website, route email, store backups, provide analytics, or perform other processing on its behalf. Those vendors may access or process personal information only as needed to perform their services and in accordance with contractual or legal obligations. The Operator may also disclose personal information if required to do so by law, court order, or lawful government request, or when the Operator believes in good faith that disclosure is necessary to protect rights, safety, or the integrity of the Services.

A sale, merger, reorganization, or similar transaction involving the Operator could result in the transfer of information to a successor entity. In such circumstances, the Operator will take reasonable steps to require the successor to honor this Policy or provide notice as required by law.

7. Retention

The Operator retains personal information only for as long as reasonably necessary to fulfill the purposes described in this Policy, including to satisfy legal, accounting, or reporting requirements, to resolve disputes, and to enforce agreements. Retention periods may vary depending on the nature of the information and the systems in which it resides. Technical logs may be retained for shorter or longer periods based on security and operational needs and on vendor defaults.

8. Security

The Operator employs reasonable administrative, technical, and physical safeguards designed to protect personal information against loss, theft, unauthorized access, disclosure, copying, modification, or destruction. No method of transmission over the Internet or electronic storage is completely secure. You acknowledge that you provide information at your own risk and that you are responsible for protecting your own devices, passwords, and credentials.

9. Location of Processing

The Operator is based in Canada. Personal information may be processed in Canada or, depending on the location of hosting and service providers, in other countries. Those countries may have data protection laws that differ from those in your province or country of residence. By using the Services, you understand that your information may be transferred to and processed in such jurisdictions, subject to applicable law.

10. Your Rights and Choices

Subject to applicable law in your jurisdiction, you may have the right to request access to, or correction of, personal information the Operator holds about you, to withdraw consent where processing is based on consent (without affecting the lawfulness of processing prior to withdrawal), or to lodge a complaint with a supervisory or privacy commissioner. To exercise these rights, or to ask questions about this Policy, please contact the Operator using the contact method published on the Services for privacy or general inquiries.

The Operator will respond to verifiable requests in accordance with applicable law. You may be required to provide information sufficient to confirm your identity before certain requests are fulfilled.

11. Children

The Services are not directed to individuals under the age of majority in their jurisdiction of residence, and the Operator does not knowingly collect personal information from children without appropriate parental or guardian consent where required by law. If you believe that personal information has been collected from a child inappropriately, please contact the Operator so that appropriate steps can be taken.

12. Changes to This Policy

The Operator may update this Policy from time to time to reflect changes in practices, technology, legal requirements, or other factors. The revised Policy will be indicated by an updated "Last updated" date at the top of this page. Material changes may, where appropriate, be communicated through additional notice on the Services or by email. Your continued use of the Services after the effective date of an updated Policy constitutes your acknowledgment of the revised Policy, except where your express consent is required by law.

13. Disclaimer; Limitation of Liability

TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, THIS POLICY IS PROVIDED FOR INFORMATIONAL PURPOSES AND DOES NOT CREATE CONTRACTUAL OBLIGATIONS BEYOND WHAT IS REQUIRED BY LAW. THE OPERATOR AND ITS OWNERS, DIRECTORS, OFFICERS, EMPLOYEES, CONTRACTORS, AND AFFILIATES SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF DATA, GOODWILL, OR PROFITS, ARISING OUT OF OR RELATED TO THIS POLICY, THE SERVICES, OR THE HANDLING OF PERSONAL INFORMATION, INCLUDING ALLEGED UNAUTHORIZED ACCESS, EXCEPT WHERE SUCH LIABILITY CANNOT BE EXCLUDED OR LIMITED UNDER APPLICABLE STATUTE.

14. Governing Law

This Policy shall be governed by and construed in accordance with the laws of the Province of Ontario and the federal laws of Canada applicable therein, without regard to conflict-of-law principles that would require the application of the laws of another jurisdiction, except where mandatory privacy or consumer protection rules in your place of residence cannot be waived by contract.