Privacy Policy

1. Scope and applicability

TopNation Global (“we,” “us,” “our”) respects your privacy and is committed to protecting the personal information you share with us. This policy explains what data we collect, how we use it, and the rights you have under Canadian (PIPEDA), European (GDPR), and other applicable privacy laws.

2. What we collect

We collect personal information directly from you when you submit an enquiry form, request a factsheet, schedule a consultation, or engage us as your adviser. We also collect limited technical data automatically when you visit the site.

Category	Examples	Source
Identity & contact	Name, email, phone, country of residence, nationality	Direct from you
Engagement details	Investment budget, preferred jurisdictions, family size, timeline	Direct from you
Due-diligence file	Passport, proof of funds, source-of-funds documentation	Direct from you (engagement only)
Technical data	IP address, browser, device type, pages viewed, referral URL	Automatic (cookies, server logs)
Marketing preferences	Email subscription status, communication consent	Direct from you

3. How we use your data

• Respond to enquiries and provide programme information you’ve requested;
• Deliver advisory services under a signed engagement letter;
• Conduct due diligence and KYC/AML checks required by programme authorities;
• Improve the site by analysing aggregate usage patterns;
• Send programme updates if you’ve consented to marketing communications (you may unsubscribe at any time);
• Comply with legal obligations, including tax, regulatory, and anti-money-laundering reporting.

4. Legal basis for processing (GDPR)

Where European data-protection law applies, our legal bases for processing are:

• Contract — to perform the advisory engagement you’ve signed;
• Consent — for marketing emails (you may withdraw consent at any time);
• Legal obligation — to satisfy AML, KYC, and tax-reporting duties;
• Legitimate interests — to operate, secure, and improve the site, balanced against your rights.

5. Sharing with third parties

We do not sell or rent your personal information. We share data only with carefully selected partners who help us deliver the service:

• Government authorities and licensed agents — to file your application under the chosen programme;
• Independent legal counsel and translators — engaged on your specific matter;
• Due-diligence providers — for AML/KYC screening (Refinitiv, World-Check or equivalent);
• Technology vendors — hosting, email delivery, analytics, CRM (under written data-processing agreements);
• Regulators — where compelled by law or court order.

6. International transfers

Some of our service providers operate outside Canada and the EEA. Where personal data is transferred to a third country, we ensure adequate protection through:

• Adequacy decisions issued by the European Commission, where applicable;
• Standard Contractual Clauses (SCCs) with non-adequate-country processors;
• Strict data-minimisation — we transfer only what is needed for the specific purpose.

7. Retention periods

Data type	Retention period
Enquiry and consultation records	3 years from last contact
Engagement / KYC files	7 years after engagement closure (regulatory minimum)
Marketing subscription records	Until you unsubscribe + 12 months audit retention
Server logs and analytics	13 months

8. Your rights

Subject to applicable law, you have the right to:

• Access the personal data we hold about you;
• Rectify inaccurate or incomplete data;
• Erase your data (“right to be forgotten”) where retention is no longer required;
• Restrict or object to certain processing activities;
• Port your data to another provider in a structured machine-readable format;
• Withdraw consent for marketing at any time;
• Lodge a complaint with the Office of the Privacy Commissioner of Canada (priv.gc.ca) or your local data-protection authority.

To exercise any of these rights, email [email protected]. We will respond within 30 days.

9. Cookies and tracking

We use cookies and similar technologies to operate the site and understand how it is used. Details are in our Cookie Policy.

10. Security measures

We protect personal data using industry-standard safeguards:

• HTTPS (TLS 1.3) encryption for all traffic;
• Encryption at rest for sensitive engagement files;
• Role-based access controls and audit logging;
• Multi-factor authentication for staff accessing client systems;
• Annual third-party security review.

No system is completely secure; we encourage you to use strong, unique passwords and report any suspicious activity to us immediately.

11. Children

The site and our services are not directed to individuals under 18. We do not knowingly collect personal data from minors. Family applications including dependent minors are handled directly between us and the principal applicant.

12. Changes to this policy

We may update this Privacy Policy periodically. Material changes will be communicated by email to engaged clients and reflected in the “Last updated” date above.

13. Contact our privacy officer

For privacy-related questions or to exercise your rights:

Privacy Officer, TopNation Global
Email: [email protected]
Phone: +1 587 414 7701