Privacy Policy
At Bridgelex Labs, we understand that your financial data deserves the highest level of protection. This privacy policy explains how we collect, use, and safeguard your personal information when you use our investment applications and services. We're committed to transparency in our data practices and ensuring you have control over your information.
Data Collection & Usage Matrix
Information We Collect
Personal Identification Information
- Full name, date of birth, and government-issued ID numbers
- Social Insurance Number for tax reporting purposes
- Contact information including address, phone, and email
- Employment information and income verification documents
Financial Information
- Bank account details and investment account information
- Investment objectives, risk tolerance, and financial goals
- Transaction history and portfolio performance data
- Credit information when required for margin accounts
Technical Data
We automatically collect device information, IP addresses, browser types, and usage patterns to ensure security and optimize our platform performance.
How We Use Your Information
Investment Services
Your financial data enables us to provide personalized investment recommendations, execute transactions, and manage your portfolio according to your specified goals and risk tolerance.
Regulatory Compliance
Canadian securities regulations require us to maintain detailed records of client information, transactions, and communications for regulatory reporting and audit purposes.
Security and Fraud Prevention
- Monitoring account activity for suspicious transactions
- Verifying identity during login and high-value transactions
- Maintaining audit trails for security investigations
Service Communication
We use your contact information to send account statements, market updates, regulatory notices, and important service announcements related to your investments.
Data Sharing and Disclosure
Essential Service Providers
We share necessary information with custodial banks, payment processors, and technology vendors who help deliver our investment services. All partners sign strict confidentiality agreements.
Regulatory Requirements
Canadian securities regulators, the Canada Revenue Agency, and other government bodies may require access to your information for compliance, tax reporting, or investigation purposes.
Legal Obligations
We may disclose information when required by court orders, subpoenas, or other legal processes, or to protect our rights and prevent fraud or illegal activities.
What We Never Do
- Sell your personal information to marketing companies
- Share data with unauthorized third parties
- Use your information for purposes unrelated to investment services
Your Privacy Rights
Access and Correction
You can request copies of your personal information and ask us to correct any inaccuracies. Most account information is accessible through your secure online dashboard.
Data Portability
You can request your investment data in a structured format to transfer to another investment platform, subject to regulatory requirements and processing fees.
Marketing Communications
You can opt out of promotional emails and marketing communications at any time. However, you cannot opt out of essential service notifications and regulatory communications.
Account Closure
To close your account and request data deletion, contact our privacy team. Some information must be retained for regulatory compliance even after account closure.
Privacy Complaints
If you have concerns about our privacy practices, contact our privacy officer first. You also have the right to file complaints with the Privacy Commissioner of Canada.
Security Measures
Encryption and Protection
- 256-bit SSL encryption for all data transmission
- Advanced encryption standard (AES) for data storage
- Multi-factor authentication for account access
- Regular penetration testing and security audits
Physical Security
Our data centers in Canada feature 24/7 monitoring, biometric access controls, and redundant backup systems to ensure your information remains secure and accessible.
Employee Access
Employee access to client data is strictly limited based on job requirements. All staff undergo background checks and regular privacy training.
Incident Response
In the unlikely event of a security breach, we have procedures to quickly contain the incident, assess the impact, and notify affected clients and regulators as required by law.
Data Retention and Deletion
Retention Periods
We retain client information according to Canadian regulatory requirements, typically seven years after account closure for most financial records and three years for communication records.
Automatic Deletion
Non-essential data like marketing preferences and usage analytics are automatically deleted after shorter periods when no longer needed for service delivery.
Secure Disposal
When information reaches the end of its retention period, we use certified data destruction methods to ensure complete and irreversible deletion from our systems.
Backup Systems
Data in backup systems follows the same retention and deletion schedules, though technical limitations may extend deletion timelines by up to 90 days for backup archives.
Privacy Questions or Concerns?
Our privacy team is here to help you understand and exercise your privacy rights. We typically respond to privacy inquiries within 48 hours during business days.