Privacy Policy

Privacy Policy

Effective Date: 23 October 2025 • Last Reviewed: 23 October 2025

Sites Covered: finma.ca and all related sub‑domains (collectively, the “Site”).

This Policy explains how FINMA Inc. (“FINMA”, “we”, “us”, “our”) collects, uses, discloses, protects, and retains personal information obtained via the Site and other digital channels that link to this Policy. It applies to visitors, prospects, clients, deal counterparties and their representatives across Québec and the rest of Canada. We align with Québec’s Act Respecting the Protection of Personal Information in the Private Sector (as modernized by Law 25) and Canada’s PIPEDA.

Our Commitment
  • No sale of personal information. We do not sell or rent personal information.
  • Limited sharing. We disclose data only to comply with law, deliver requested services through vetted providers, facilitate a business transaction under contractual safeguards, or with your consent.
What We Collect & Why
Category
Examples
Collection Method
Legal Basis*
Identification & Business Contact
Name, role, company, work email/phone
Web forms, meetings, email
Consent / contractual necessity
Deal & Diligence Data
Cap tables, financials, stakeholder info, references
Secure uploads, virtual data rooms (VDR), interviews
Contractual necessity / legitimate interests / legal obligation
KYC/Compliance (if applicable)
Purpose of engagement, beneficial ownership, sanctions screening
Secure portals, attestations
Legal obligation (where applicable)
Website & Device Data
IP, pages viewed, clicks, user agent
Cookies, analytics tags (opt‑in where required)
Legitimate interests (security/performance) / consent
* We rely on express consent for any purpose not required by law or contract.

How We Use Personal Information
  • Advisory & Deal Workflows: Evaluations, outreach, diligence, valuations, modelling, execution, engagement administration.
  • Client Onboarding & Relationship Management: Identity verification (as applicable), proposals, engagement letters, billing.
  • Regulatory & Legal Compliance: Responses to lawful requests, records retention, AML/ATF checks where applicable.
  • Site Operations & Security: Fraud prevention, audit logs, performance analytics.
  • Communications: Responding to inquiries, sending updates or thought leadership (unsubscribe anytime).
Cookies & Similar Technologies

We use essential cookies for security and core functionality. Non‑essential (e.g., analytics, marketing) are off by default and used only after your opt‑in. You can manage choices anytime via Cookie Settings; declining may affect some features.

Disclosure to Third Parties
Recipient
Purpose
Safeguards
Legal/Regulatory Authorities
Comply with lawful requests/orders
Disclosure limited to what is required
Service Providers
Cloud hosting, VDRs, e‑signature, secure email, analytics
Contracts with security & confidentiality obligations
Deal Counterparties & Advisors
Buy‑side/sell‑side diligence, Q&A, execution
NDAs, data‑room controls, least‑privilege access
Business Transfers
Merger, acquisition, reorganization
Privacy protections equivalent to Law 25/PIPEDA
International & Interprovincial Transfers

Personal information may be processed outside Québec/Canada by service providers or deal participants. Before such communication, we conduct a privacy impact assessment (PIA) and implement contractual measures to ensure protections equivalent to Québec law (Law 25) and PIPEDA.

Retention & Destruction

We retain records for the longer of seven (7) years after matter closure or the period required by law (e.g., tax, corporate, or regulatory rules). Thereafter, data is securely destroyed or irreversibly anonymized.

Security Measures (and Limits)
  • Encryption: TLS in transit; strong encryption at rest.
  • Access Controls: Role‑based permissions; least‑privilege; logs.
  • Facilities: Reputable data centres with physical security.
  • Incident Response: Breach‑notification protocol consistent with Law 25/CAI guidance.
No method of transmission or storage is 100% secure; residual risk remains.

Automated Decision‑Making & Profiling

We do not make decisions solely by automated processing that produce legal or similarly significant effects. If we ever do, we will provide prior notice, explain the logic, and outline your rights to comment/contest.

Your Rights (Québec & Canada)
  • Access & Portability (where feasible for data collected by technological means)
  • Rectification of inaccurate or incomplete data
  • Withdraw Consent for non‑essential processing
  • Erasure when data is no longer required (subject to legal retention)
  • Complaint to the OPC (PIPEDA) or CAI (Québec)
How to exercise: Email the Privacy Officer (Section below) with details to identify you and the data concerned. We respond within statutory timelines.

Person in Charge of Personal Information (Privacy Officer)

As required by Law 25, FINMA designates a person in charge and publishes their title and contact information.

Privacy Officer (Person in charge):
[[Name/Title]]
FINMA Inc., [[Mailing Address]]
Email: privacy@finma.ca • Tel: [[Phone]]

Minors

The Site targets professionals and businesses. We do not knowingly collect information from children under 14. If a minor provided data, contact us to delete it promptly.

Changes to This Policy

We may update this Policy to reflect legal or operational changes. We will revise the Effective Date and post a notice on the Site. Continued use after an update signifies acceptance.

Disclaimer: Use of Financial Tools & EstimatorsAny calculators, models, deal‑readiness checkers, or valuation/IRR estimators on our Site are illustrative. Outputs depend on user inputs and assumptions that may not reflect market conditions, discount rates, or your specific facts. They are not financial, investment, legal, accounting, or tax advice, nor an offer or solicitation to buy/sell securities. Do not rely on these tools to make decisions without consulting qualified advisors. FINMA assumes no liability for actions taken based on tool outputs.

Life Insurance​

    Health Insurance​

      Disability Insurance​

        Long-Term Care Insurance​

          SPEAK TO AN ADVISOR