Rennford Asset Management (referred to as “Rennford,” “we,” “our,” or “us”) is committed to protecting the privacy and security of your personal information.This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and related investment services (collectively, the “Services”).
This Policy applies to all users, including investors, prospective investors, and former investors. By using the website, you agree to the collection and use of information in accordance with this policy.
To provide you with our investment services and comply with legal obligations, we collect several types of information, including:
a. Personal Identification Information: When you open an account, we collect your full name, date of birth, residential and postal address, email address, phone number, and government-issued identification (e.g., driver's license, passport) . This is mandatory for identity verification under “Know Your Customer” (KYC) and Anti-Money Laundering (AML) laws.
b. Technical and Usage Data: When you use our website, we automatically collect device information (type, operating system, unique device identifiers), IP address, and usage data such as the pages you view and the features you use.
c. Information from Third Parties: We may receive information about you from data brokers, fraud prevention agencies, and identity verification service providers to supplement the data we collect and for security purposes.
We use your personal information for the following lawful purposes:
To Provide and Manage Services: To create and administer your account, facilitate deposits and withdrawals, execute trades, and manage your investment portfolio.
To Comply with Legal Obligations: To verify your identity (KYC/AML), detect and prevent fraud, comply with court orders, and meet CSA/IIROC recordkeeping requirements.
For Business Operations: To operate our business, perform analytics, improve our website, and develop new features.
For Communication: To send you important administrative messages, security alerts, and (with your consent) promotional information about our services.
We do not sell your personal information to third parties. However, we may share your data in the following circumstances:
With Service Providers: We share data with trusted third parties who perform services on our behalf, such as identity verification providers, clearing brokers, payment processors, and cloud infrastructure providers. These parties are authorized to use your information only as necessary to perform their services.
With Affiliates: We may share information with our subsidiaries and affiliates for internal business and audit purposes.
In Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
We implement robust technical and organizational safeguards to protect your data. We use TLS 1.3 encryption for data in transit and AES-256 encryption for data at rest. Our infrastructure is maintained in soc 2 Type II certified data centers, with 24/7 monitoring to protect against unauthorized access. We also adhere to the PIPEDA Safeguards Rule, requiring us to maintain a comprehensive information security program.
Securtiy Incidents: In the unlikely event of a security breach involving your sensitive information, we will notify you in accordance with SEC Regulation S-P and applicable state laws within 30 days of becoming aware of the incident.
We retain your personal information for as long as necessary to fulfill the purposes outlined in this Policy, unless a longer retention period is required by law.
Investment Advisory Records: As an SEC-registered investment adviser, we are required to retain certain records (e.g., account documents, trade confirmations) for at least 5 years as per SEC regulations.
Platform Account Data: Non-advisory data is typically retained for up to 12 months after your account is closed or subscription expires, after which it is deleted or anonymized.
Depending on your jurisdiction, you may have certain rights regarding your personal information:
Right to Know: You can request details about the categories and specific pieces of personal information we have collected about you.
Right to Delete: You can request that we delete your personal information, subject to regulatory retention requirements.
Right to Opt-Out: You have the right to opt-out of the “sale” of your personal information (we do not sell your data) and to restrict certain disclosures to nonaffiliated third parties for marketing purposes under the PIPEDA.
Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.
To exercise any of these rights, please contact us using the information in Section 7.
If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:
Email: [inquires@rennford.org]
We reserve the right to update this Privacy Policy to reflect changes in our practices or legal obligations. We will notify you of any material changes via email or through a notice in the Website. The effective date at the top of this Policy indicates when it was last revised.
