Privacy Policy

Your privacy and data protection are fundamental to our investment services

Last updated: July 29, 2025

Our Commitment to Data Protection

At Verdlumi Corp, we understand that your personal and financial information is among your most valuable assets. Our commitment to protecting your privacy is unwavering and forms the foundation of our client relationships. We adhere to the highest standards of data protection while providing exceptional natural resource investment services.

This privacy policy outlines how we collect, use, protect, and manage your personal information in compliance with Canadian privacy legislation, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.

We believe transparency builds trust. This policy provides comprehensive details about our data practices, your rights, and the measures we take to ensure your information remains secure and confidential throughout your investment journey with us.

Information We Collect

Personal Identification Data

We collect personal information necessary for investment services including full name, date of birth, residential address, citizenship status, and government-issued identification numbers as required by Canadian financial regulations.

Legal name and contact information
Government identification verification
Employment and income verification

Financial and Investment Data

Financial information required for investment suitability assessment, portfolio management, and regulatory compliance including income details, investment experience, risk tolerance, and existing asset holdings.

Investment portfolio details and performance
Banking and account information
Transaction history and account activity

Digital Interaction Data

Technical information collected through your use of our digital platforms including device information, browser details, IP addresses, and usage patterns to enhance security and user experience.

Platform usage analytics and preferences
Communication records and correspondence
Device and security authentication logs

Legal Basis for Collection

Our data collection is based on legitimate business interests, contractual necessity for service provision, and compliance with Canadian financial regulations including anti-money laundering requirements and investor protection legislation.

Regulatory compliance and reporting obligations
Investment service delivery and management
Client consent and contractual agreements

How We Use Your Information

Investment Service Delivery

We use your personal and financial information to provide comprehensive natural resource investment services including portfolio management, investment recommendations, performance reporting, and ongoing account administration. This includes analyzing your financial situation to ensure investment suitability and regulatory compliance.

Risk Assessment and Management

Your information enables us to conduct thorough risk assessments, monitor portfolio performance, and implement appropriate risk management strategies. We analyze market conditions, investment performance, and your changing financial circumstances to optimize your natural resource investment portfolio.

Regulatory Compliance and Reporting

We process your information to meet Canadian financial regulatory requirements including customer identification procedures, suspicious transaction reporting, tax reporting obligations, and investor protection measures. This ensures full compliance with securities regulations and anti-money laundering legislation.

Communication and Client Support

Your contact information allows us to provide timely market updates, investment reports, regulatory notifications, and responsive client support. We use this data to maintain ongoing communication about your investments and to provide educational resources about natural resource markets.

Platform Enhancement and Security

Technical data helps us improve our digital platforms, enhance security measures, detect fraudulent activity, and personalize your user experience. We analyze usage patterns to optimize platform performance and implement advanced security protocols to protect your investment accounts.

Data Protection and Security Measures

Encryption and Secure Storage

All sensitive data is encrypted using industry-standard AES-256 encryption both in transit and at rest. Our secure servers are located in Canadian data centers with physical security controls, environmental monitoring, and restricted access protocols to protect your information.

Access Controls and Monitoring

We implement strict access controls with multi-factor authentication, role-based permissions, and regular access reviews. All system activities are continuously monitored with automated threat detection and security incident response protocols to identify and address potential risks.

Regular Security Audits

Independent security assessments and penetration testing are conducted quarterly to identify vulnerabilities and ensure our protection measures remain current. We maintain certifications and compliance with Canadian financial industry security standards and best practices.

Breach Notification Procedures

In the unlikely event of a data security incident, we have established protocols to assess the situation, contain any potential impact, and notify affected clients and regulatory authorities within required timeframes. Our incident response team ensures rapid and effective management of any security concerns.

Your Privacy Rights and Controls

Right to Access Personal Data

You have the right to request comprehensive information about what personal data we hold about you, how it's being used, and who it's been shared with. We provide detailed reports of your data usage within 30 days of receiving a verified request.

Right to Rectification and Correction

If any of your personal information is incorrect or incomplete, you have the right to have it corrected or updated. We provide easy mechanisms to update your profile information and will verify and implement changes promptly.

Right to Data Erasure

Subject to regulatory retention requirements, you can request deletion of your personal data when it's no longer necessary for the purposes it was collected, or when you withdraw consent for its processing.

Right to Data Portability

You can request your personal data in a structured, machine-readable format for transfer to another service provider. We provide data exports in standard formats including CSV and JSON as appropriate.

Right to Object to Processing

You can object to certain types of data processing, particularly for marketing purposes or automated decision-making. We respect your preferences and will adjust our processing activities accordingly.

How to Exercise Your Rights

To exercise any of these rights, contact our Privacy Officer through our secure client portal or by written request. We verify all requests for security purposes and respond within the timeframes required by Canadian privacy legislation.

Data Retention Periods

We retain personal information only as long as necessary for the purposes outlined in this policy or as required by Canadian financial regulations. Investment account records are typically retained for seven years after account closure, while marketing and communication preferences are held until you opt out or request deletion. Detailed retention schedules are available upon request.