Privacy Policy

1. Information We Collect

IA Investments Inc. collects information through several channels, depending on how you interact with us. The categories below describe what we gather and why each piece matters to the services we provide.

Personal Identification

• Full name, mailing address, email address, and telephone number — provided when you submit our contact form, call our office, or begin an advisory engagement.
• Date of birth, Social Insurance Number (SIN), and government-issued identification — collected only for clients entering a formal Investment Management Agreement, as required by Know Your Client (KYC) regulations under the British Columbia Securities Commission.

Financial Account Data

• Investment account statements from all institutions, tax returns, corporate financial records, and business bank statements — provided voluntarily by advisory clients to enable portfolio analysis, cash flow modeling, and multi-account consolidation.
• Risk tolerance questionnaire responses, investment objectives, and time horizon data — gathered during client onboarding.

Business Records

• Corporate structure documentation, ownership agreements, succession plans, and capital expenditure records — shared by business-owner clients for services such as CapEx timing optimization and succession modeling.

Website Usage Data

• IP address, browser type, operating system, pages visited, time on page, and referral source — collected through cookies and analytics tools when you browse iainvstmnts.com.
• Form submission metadata (timestamp, page of origin) — logged when you send an inquiry through our contact form.

2. How We Use Your Information

Every piece of data we collect serves a specific, bounded purpose. We do not mine client data for secondary uses, and we do not build profiles for advertising or resale.

• Advisory Services: Building AI-powered portfolio models, generating cash flow forecasts, running Monte Carlo simulations, performing due diligence analyses, and producing investment research reports — all tailored to your specific financial situation.
• Regulatory Compliance: Meeting KYC, anti-money-laundering (AML), and suitability obligations under the British Columbia Securities Commission's National Instrument 31-103 and related regulations.
• Communication: Responding to inquiries, delivering account statements, sharing research publications you've subscribed to, and sending engagement-related correspondence.
• Service Improvement: Analyzing aggregate, anonymized website usage patterns to improve site functionality and content relevance. Individual browsing behavior is never linked to advisory client files.

3. Legal Basis for Processing

We process your information under three legal bases, depending on the context:

• Contractual Necessity: Processing required to fulfill our obligations under a signed Investment Management Agreement or project engagement letter. This covers portfolio construction, model training, report generation, and account administration.
• Legitimate Interests: Processing necessary for purposes that are reasonable and expected — such as responding to contact form inquiries, securing our systems against unauthorized access, and analyzing anonymized web traffic to maintain a functional website.
• Regulatory Obligations: Processing mandated by securities law, tax law, or anti-money-laundering statutes. This includes identity verification, transaction record-keeping, and filing requirements with the BCSC, Canada Revenue Agency (CRA), and the Mutual Fund Dealers Association of Canada (MFDA).

4. Information Sharing

We do not sell your data. We do not share it with marketing platforms, advertising networks, or data brokers. We share information only in the following circumstances:

• With Your Professional Advisors: At your explicit written direction, we share model outputs, portfolio analysis reports, and tax-related findings with your accountant, CPA, estate lawyer, or other professional service providers. This coordination improves outcomes — it is never initiated without your consent.
• With Regulators: The British Columbia Securities Commission (BCSC), the Canada Revenue Agency (CRA), the Mutual Fund Dealers Association of Canada (MFDA), and law enforcement agencies may require disclosure under applicable law. We comply with all lawful requests and inform clients of regulatory inquiries when legally permitted to do so.
• With Technology Service Providers: Our custodial platform, cloud infrastructure (encrypted, Canadian-hosted), and analytics tools operate under strict data processing agreements. These providers process data on our behalf — they do not own, retain, or monetize it.

5. Data Security

Protecting client data is a structural commitment, not a checkbox exercise. Our security framework includes:

• Encryption: All client data is encrypted in transit (TLS 1.3) and at rest (AES-256). Financial records and model outputs are stored on encrypted Canadian-hosted servers with geographic redundancy.
• Access Controls: Role-based access ensures that team members view only the data relevant to their function. Angela Forsythe, Operations & Compliance Manager, administers access permissions and conducts quarterly access audits.
• Third-Party Security Audits: An independent cybersecurity firm conducts an annual penetration test and vulnerability assessment. Findings and remediation actions are documented and reviewed by the compliance team.
• Disaster Recovery: Our disaster recovery framework includes daily encrypted backups, geographically distributed redundancy, and a tested restoration protocol with a target recovery time of four hours.

6. Data Retention

We retain client advisory records — including account statements, model outputs, engagement correspondence, and KYC documentation — for a minimum of seven years following the termination of an advisory engagement. This retention period aligns with requirements under the British Columbia Securities Commission's record-keeping obligations (NI 31-103, Section 11.5) and Canada Revenue Agency guidelines.

Website usage data collected through cookies and analytics is retained for a maximum of 26 months. Contact form submissions from non-clients are retained for 12 months, then permanently deleted unless the inquiry results in a formal engagement.

7. Your Rights

You hold meaningful control over your personal information. Under Canadian privacy law (PIPEDA) and British Columbia's Personal Information Protection Act (PIPA), you have the right to:

• Access: Request a copy of all personal information we hold about you. We respond within 30 days.
• Correction: Request correction of any inaccurate or incomplete personal information in our records.
• Deletion: Request deletion of your personal information, subject to our regulatory retention obligations. Where deletion conflicts with securities regulation record-keeping, we will explain the specific legal basis for continued retention.
• Portability: Request that your data be provided in a structured, commonly used format (CSV, PDF) for transfer to another service provider.
• Withdraw Consent: Where processing is based on consent (e.g., research email subscriptions), you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at contact@iainvstmnts.com or call (672) 895-8776. We verify your identity before processing requests — a necessary step to prevent unauthorized access to your data.

8. Cookies & Analytics

Our website uses a limited set of cookies to maintain functionality and understand aggregate traffic patterns. Here is exactly what we use and why:

• Essential Cookies: Session management and cookie consent preference storage. These cannot be disabled — the site requires them to function.
• Analytics Cookies: We use privacy-focused web analytics to track page views, session duration, and referral sources in aggregate. No individual user profiles are created. No data is shared with advertising platforms.
• No Third-Party Marketing Cookies: We do not use retargeting pixels, social media tracking scripts, or advertising cookies of any kind. Your browsing on iainvstmnts.com is not tracked by Facebook, Google Ads, or any similar platform.

You can control cookie settings through our cookie consent banner or through your browser's privacy settings. Disabling analytics cookies does not affect site functionality.

9. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices, technology, regulatory requirements, or legal obligations. When we make material changes, we will:

• Post the updated policy on this page with a revised "Last Updated" date.
• Notify active advisory clients by email at least 30 days before material changes take effect.
• Provide a summary of changes at the top of the updated policy for 90 days following the revision.

Continued use of our website or services following a policy update constitutes acceptance of the revised terms. If you disagree with any changes, you may exercise your rights under Section 7 above.

10. Contact

Questions, concerns, or requests related to this Privacy Policy should be directed to:

If you believe your privacy rights have been violated and we have not addressed your concern satisfactorily, you may file a complaint with the Office of the Information and Privacy Commissioner of British Columbia (OIPC) at oipc.bc.ca or the Office of the Privacy Commissioner of Canada (OPC) at priv.gc.ca.