This Privacy Policy outlines the strict data processing protocols maintained by Brentonvale Trust GOV ("the Platform", "we", "us", or "our"), headquartered at Suite 3100, 161 Bay Street, Toronto, ON M5J 2S1, Canada. We act as the Data Controller in compliance with the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation. To ensure absolute data integrity and regulatory alignment, we have appointed a dedicated Data Protection Officer (DPO) reachable at [email protected].
Identity Metrics: Full legal name, date of birth, nationality, and government-issued identification documentation for mandatory Know Your Customer (KYC) and Anti-Money Laundering (AML) verification.
In accordance with the principles of data minimisation and purpose limitation, we collect:
Financial Telemetry: Source of funds, bank account parameters, digital asset wallet addresses (public keys), and comprehensive transaction histories.
Digital Footprint: IP addresses, device hardware specifications, browser configurations, and granular interaction logs with our analytical interfaces.
Contractual Necessity: Essential for establishing, managing, and maintaining your account and delivering our digital analytics services.
Our collection, use, and disclosure of your personal information are founded upon:
Statutory Obligations: Compliance with Canadian financial reporting mandates, taxation laws, and the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA) as overseen by FINTRAC.
Legitimate Business Interests: Proactive fraud detection, network optimization, security enhancement, and protection of our digital infrastructure.
Explicit Consent: For tailored market insights, informational alerts, and non-essential analytical cookies (which may be withdrawn by the user at any time).
All data at rest is secured utilizing industry-standard AES-256 cryptographic protocols.
All data in transit is protected via TLS 1.3 end-to-end encryption.
Data is primarily hosted and processed within secure Canadian data center clusters, ensuring that local data residency and sovereignty requirements are stringently maintained.
We retain identity, tax, and financial records for a minimum period of seven (7) years following account closure to meet Canada Revenue Agency (CRA) and FINTRAC statutory retention mandates. Under PIPEDA, you possess the right to access the personal information we hold about you, request corrections to inaccurate records, and challenge our compliance. Requests regarding your data rights must be sent in writing to [email protected]. You also maintain the right to lodge a formal complaint with the Office of the Privacy Commissioner of Canada (OPC).