Privacy Policy

Personal information

• Full name and preferred name
• Email address and phone number
• Mailing address and postal code
• Date of birth (where required for underwriting or licensing)
• Marketing and communication preferences
• Appointment details you provide when booking
• Documents you upload voluntarily during a consultation

Technical information

• IP address and approximate geographic location
• Browser type and version
• Operating system and device information
• Referring URLs, pages visited and time on page
• Cookie identifiers and analytics events

• Contact and consultation forms submitted through this website
• Calendly appointment bookings
• Newsletter and educational-content subscriptions
• Live chat (where offered)
• Google Analytics, Google Ads, Meta Pixel and LinkedIn Insight Tag
• First- and third-party cookies
• Website interactions such as clicks, scrolls and form submissions
• Email communication with our advisors and staff
• Phone calls (recorded only where you are notified in advance)
• Integrations with trusted third-party services listed below

• Responding to inquiries and providing requested information
• Scheduling and confirming appointments with licensed advisors
• Delivering educational resources, newsletters and event invitations
• Marketing and business-opportunity communications (with consent)
• Meeting regulatory, licensing and compliance obligations
• Preventing fraud, misuse and unauthorized access
• Measuring and improving website performance and user experience
• Providing customer support and quality assurance
• Aggregated business analytics and reporting

We use the following categories of cookies:

• Necessary cookies — required for the site to function.
• Analytics cookies — help us understand aggregate usage.
• Marketing cookies — used for advertising personalization.
• Performance cookies — monitor stability and speed.
• Functional cookies — remember preferences.

You can disable or delete cookies at any time through your browser settings. Blocking certain cookies may affect the availability of some features. See our Cookie Policy for full details.

We share limited information with the following service providers under contract:

• Google (Analytics, Ads, reCAPTCHA)
• Meta (Facebook, Instagram advertising)
• Microsoft (LinkedIn Insight Tag, Clarity)
• Calendly (appointment scheduling)
• Our CRM and email-marketing platforms
• Cloud hosting and infrastructure providers

These providers are contractually required to protect your information and use it only for the purposes we specify.

• HTTPS and HSTS across all pages
• TLS/SSL encryption in transit
• Encryption at rest for stored personal data
• Secure, access-controlled cloud servers
• Role-based access controls and least-privilege permissions
• Regular backups and disaster-recovery procedures
• Continuous monitoring and intrusion detection
• Multi-factor authentication for staff systems
• Periodic security audits and penetration testing

We retain personal information only as long as necessary for the purposes described in this policy or as required by law, licensing regulators, or tax authorities. Typical retention periods include:

• Prospective client inquiries: up to 24 months from last contact
• Client records: as required by regulators (typically 7+ years)
• Marketing consent records: at least 3 years under CASL
• Website analytics: aggregated and anonymized after 26 months

When information is no longer required, it is securely destroyed, erased or anonymized.

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion where legally permitted
• Withdraw consent for marketing communications at any time
• File a complaint with our Privacy Officer
• Escalate to the Office of the Privacy Commissioner of Canada if unresolved

Our services are not directed to individuals under the age of majority in their province of residence. We do not knowingly collect personal information from minors. If you believe a minor has provided us information, please contact our Privacy Officer so we can delete it.

Some of our service providers process data outside of Canada, including in the United States and the European Union. Where information is transferred internationally, we require contractual, technical and organizational safeguards consistent with Canadian privacy laws.

• Privacy Officer: [Name — placeholder]
• Email: privacy@canadagfi.ca
• Phone: [Phone — placeholder]
• Mail: GFI Canada, Toronto RHQ, Ontario, Canada