Personal Information Privacy Notice

SafeByLaw treats the responsible handling of your personal information as a core obligation. This notice explains what we collect, how and why we use it, how long we retain it, and the protections applied under Canadian privacy law.

1. Privacy oversight and responsible contacts

Under applicable privacy legislation, the website operator and the SafeByLaw platform oversee the handling of your personal information. Our legal notices contain further details and contact information. Privacy-related questions may be directed to our privacy officer.

2. Information we collect

We limit collection and use to information reasonably required to deliver services, satisfy legal duties and keep the platform secure. This can include:

  • Identity details: your first and last names and date of birth, used to verify who you are and confirm that you meet age requirements.
  • Contact details: email address, optional telephone number, province or country of residence and, when relevant, postal address.
  • Account and usage records: payment information, deposits, withdrawals and records of activity on the account.
  • Technical and sign-in data: IP address, browser and device attributes, login timestamps and connection records.
  • Verification records: identity documents, proof of address or other materials needed for applicable KYC/AML procedures.

We normally do not seek sensitive information, including health information or religious views, unless required by law or provided with your clear authorization.

3. Where personal information comes from

Personal information reaches us through a range of protected interactions and communication methods:

  • Information you submit: for instance, when creating an account, changing your profile, completing verification or contacting our team.
  • Information generated during use: such as cookies, server records, analytics data and technical signals sent by your device while you use the platform.
  • Information supplied by other organizations: including payment providers handling deposits or withdrawals, KYC/AML vendors and social sign-in services when you permit the connection.

4. How personal information is used

We handle personal information for defined and lawful purposes that are communicated to you, including:

  • Creating, supporting and administering your account, including access to the platform features provided to you.
  • Managing and securing payment operations, including account funding and withdrawals.
  • Responding to support requests and delivering suitable assistance.
  • Meeting legal and regulatory duties, including KYC, AML and tax-related requirements.
  • Defending our systems and limiting fraud, misuse and cybersecurity risks.
  • Reviewing and enhancing the platform and the overall user experience.
  • Sending promotional or educational messages when you have chosen to receive them.

5. Lawful bases and authorized processing

  • Delivering a service you ask for or taking steps at your request before entering an agreement.
  • Fulfilling legal duties, including anti-money-laundering requirements.
  • Supporting legitimate business needs, such as maintaining a reliable and protected platform.
  • Using your explicit permission for optional functions or marketing messages.

6. When information may be disclosed

Information is disclosed only when necessary and to recipients or providers that have been suitably reviewed, including:

  • Banks, financial institutions and payment processors that support account funding or withdrawal processing.
  • Vetted specialist firms carrying out KYC/AML verification.
  • Cloud infrastructure and technology providers subject to appropriate data-processing arrangements.
  • Analytics and security vendors that, where practical, use anonymized or pseudonymized data.
  • Professional advisers, such as legal or tax specialists, when needed for legal or compliance purposes.
  • Courts and government bodies where disclosure is legally required or necessary to defend legal interests.

We do not sell personal information or provide it to third parties for their own marketing or commercial purposes.

7. Processing outside Canada

Certain providers, including cloud and analytics suppliers, may operate outside Canada. Where this occurs, we apply measures designed to safeguard your information in accordance with applicable Canadian privacy requirements.

8. Safeguarding personal information

We use technical and organizational controls intended to secure personal information, including:

  • Protected transmission using up-to-date controls, including TLS 1.3 or a later release.
  • Robust encryption for sensitive information at rest, including AES-256 when appropriate.
  • Planned security assessments, penetration tests and reviews by independent experts.
  • Continuous monitoring for suspicious behaviour and attempted unauthorized entry.
  • Role-based access controls limiting employee access to information required for assigned responsibilities.
  • Client funds maintained separately through regulated service providers.

No digital system can eliminate every security risk, but these controls are intended to significantly reduce the possibility of unauthorized access or disclosure.

9. How long information is kept

Personal information is retained only for the identified purpose or the period mandated by applicable law:

  • Throughout the period your account remains open and the applicable contractual relationship is in effect.
  • Following closure, for the duration required by law, which can be 5–10 years for tax and regulatory records.
  • When consent supports processing, including marketing, until you withdraw that permission.

When information is no longer necessary, we securely delete it or anonymize it where suitable.

10. Your privacy-related rights

Subject to the circumstances, Canadian privacy legislation may provide you with these rights regarding your personal information:

  • Ask whether we hold personal information relating to you.
  • Ask us to correct inaccurate information or complete an incomplete record.
  • Ask for deletion when no legal duty requires continued retention.
  • Ask that processing be restricted where permitted under applicable law.
  • Obtain information in a commonly used, structured and machine-readable format where portability rights are available.
  • Withdraw consent for future processing when consent is the applicable legal basis.
  • Submit a complaint to the relevant Canadian privacy or data-protection authority.

11. Cookies and similar tools

Cookies and similar tools help the site operate, understand visitor activity and improve usability. Necessary cookies may run for essential functions; analytics and advertising cookies are used only after consent. See our separate cookie notice for more details.

12. Changes to this notice

This notice may be amended from time to time to reflect changes to the law, regulations or our services. The current version will appear online, and material changes may also be shared by email or within the platform.

13. Contacting us about privacy

For privacy questions, requests concerning your rights or help understanding this notice, email $site_gmail or submit the website contact form. Our privacy officer will assess your request and reply within a reasonable period.

By visiting or using SafeByLaw, you confirm that you have reviewed this notice and accept its provisions.