Privacy Policy

1. Key meanings

“Personal information” means information about an identifiable individual. “Processing” includes collection, use, disclosure, storage and deletion. “Service provider” means an organization that handles information for a specified operational purpose.

“Account data” includes information connected to a registered or prospective client. Aggregated information that cannot reasonably identify an individual is not personal information for the purposes of this policy.

2. Accountability

Adroite Capitorc is responsible for the personal information under its control for website and onboarding operations. Client Support & Compliance coordinates privacy questions and requests at [email protected].

Where a separate provider controls transaction, custody or payment information, that organization may act under its own privacy notice. We identify the role before information is transferred where required.

3. Information you provide

We collect first and last name, telephone number, email address and the content of a request. During onboarding, information can also include date of birth, residential address, occupation, identity-document details, verification images, account preferences and source-of-funds context where required.

Support records can contain correspondence, complaint details, screenshots and call notes. Payment or transaction providers may return status, method and reference information without disclosing complete credentials.

4. Usage and technical data

When you use the site, systems may record IP address, browser type, device characteristics, pages requested, timestamps, referring information and security events. This information supports delivery, diagnostics, abuse prevention and understanding how visitors navigate the site.

Technical data is not used to claim a financial profile that the information cannot support. Access is limited to people and providers who need it for a specified task.

5. Cookies and similar storage

Necessary cookies can preserve security, session or referral information needed for the site and form process. If analytics is enabled in the future, it will be configured through the site’s designated analytics setting and handled according to the resulting notice and consent requirements.

Browser settings can block or delete cookies, but essential functions may then fail. We do not describe a cookie as necessary when it is used only for advertising.

6. Purposes of collection and use

Information is used to answer requests, arrange onboarding, verify identity, provide account support, process instructions through the appropriate provider, protect accounts, detect fraud, investigate complaints and meet legal obligations. Contact preferences can also be used to send requested educational or service material.

We limit use to purposes a reasonable person would consider appropriate in the circumstances, along with compatible purposes permitted by law. A materially new purpose requires notice and, where necessary, consent.

7. Legal bases and consent

Processing may be necessary to take steps at your request, perform an agreement, meet a legal duty or pursue a legitimate operational interest such as security and service improvement. Marketing communication relies on consent where applicable and can be stopped without ending necessary account notices.

Canadian privacy requirements emphasize meaningful consent and reasonable purposes. Consent requests should explain the nature, purpose and consequences in understandable language.

8. Retention

Unconverted contact requests are normally retained for up to 24 months to respond, document consent and prevent abuse. Support and complaint records are normally kept for seven years after resolution where needed for accountability. Identity and transaction-related records may be retained for at least five years or longer when an applicable Canadian requirement, legal hold or dispute demands it.

Security logs are kept for a period proportionate to investigation and prevention needs. When information is no longer required, it is deleted, anonymized or securely isolated according to the system and legal context.

9. Service providers and transfers

Information can be processed by hosting, communications, identity-verification, security, analytics, payment, transaction and professional-service providers. They receive only the categories needed for their role and are expected to protect them under contract and applicable law.

A provider may process information outside your province or outside Canada. In that case, the information can be subject to lawful access rules in the place of processing. We assess the provider and safeguards appropriate to the sensitivity and purpose.

10. Disclosure

Information may be disclosed to an affiliated operation supporting the service, the legal entity providing a chosen transaction, a competent regulator, law-enforcement body, court or other authority where a valid duty or process applies. It may also be disclosed to investigate fraud, protect rights or complete a corporate transaction with appropriate safeguards.

We do not sell identity documents or telephone lists. A disclosure is limited to what is reasonably necessary for the stated basis.

11. Security

Safeguards include encrypted transport, controlled access, authentication measures, logging, provider assessment and procedures for suspected incidents. The level of protection reflects the sensitivity, amount, format and retention period of the information.

No online system can promise absolute security. Clients should use unique credentials, multi-factor authentication and verified contact channels, and should report suspicious events promptly.

12. Individual rights

You may ask for access to personal information under our control and request correction of inaccurate or incomplete information. Depending on applicable law and context, you may also ask about use and disclosure, withdraw consent, object to marketing or request deletion where retention is not required.

We verify identity before acting and explain any lawful refusal or limitation. Requests can be sent to [email protected]. A complaint about our response may be raised through the internal Complaints Process or with the appropriate privacy authority.

13. Analytics and advertising

The delivered site does not activate its optional analytics slot until a valid identifier is configured. If analytics is enabled, technical interaction data may be processed to understand site performance and navigation. The implementation and notice must reflect the actual tool and consent requirements.

We do not currently describe behavioural advertising or retargeting as active. If those practices are introduced, this policy and any necessary choice mechanism will be updated before use.

14. External links, children and changes

External websites have their own practices, and this policy does not govern information submitted directly to them. The service is not directed to children, and we do not knowingly seek to open investment accounts for minors through this website.

We update this policy when practices, providers or legal obligations change. The revised version is effective when posted, with additional notice for a material change where appropriate. Continued use after notice does not override a consent right that law requires us to obtain separately.

15. Contact

Send privacy questions or rights requests to [email protected], addressed to Client Support & Compliance. Postal correspondence can be sent to 350 Albert Street, Ottawa, ON K1R 1A4, Canada.

Describe the request and identify the account email, but do not send passwords, authentication codes or unrequested identity documents. We will explain any additional verification needed through a confirmed channel.