Privacy Notice

1. Scope

This notice explains what personal information Regal Investments collects through regalinvestments.ca, why, and what rights you have. It covers both the public platform and private-capital access requests.

2. What we collect

When you create an account: name, email address, password (stored only as a cryptographic hash, never in readable form), and optionally your country, segment and profile headline.

When you use the platform: which Blueprints and lessons you open, your progress and any notes you write, and standard technical data such as IP address, browser type and timestamps.

When you buy something: plan, amount, currency, status and the payment provider's transaction reference. We never receive or store your card number or wallet keys — PayPal and NOWPayments handle the payment and hold those details.

When you file a private access request: the information on the form, including your stated eligibility basis, jurisdiction, mandate and objectives, plus the IP address and browser string of the submission.

When you contact us or subscribe: your name, email and message.

3. Why we use it

• To provide the service: your account, access, progress and purchases
• To communicate: service messages, receipts, and the Brief if you opted in
• To review private access requests and meet know-your-client and anti-money-laundering obligations
• To keep the platform secure: rate limiting, fraud prevention, abuse investigation
• To improve the service through aggregate, non-identifying analysis
• To meet legal, regulatory, tax and record-keeping obligations

Our legal bases are performance of our contract with you, your consent (for marketing), our legitimate interests in operating and securing the service, and compliance with law.

4. What we do not do

We do not sell your personal information. We do not share it with advertisers. We do not use third-party advertising or tracking cookies, and the platform loads no third-party scripts.

5. Who we share it with

• Payment providers — PayPal and NOWPayments, only what is needed to take a payment
• Infrastructure — our hosting and email providers, under contract
• Professional advisers — counsel, accountants and auditors where necessary
• Authorities — where we are legally required to, or to protect rights and safety

Where we transfer information outside Canada, we use appropriate safeguards.

6. Cookies

We set one essential cookie, ri_session, which keeps you signed in. It is HTTP-only, SameSite=Lax and secure over HTTPS. It is strictly necessary and there is no analytics, advertising or cross-site tracking cookie on this site.

7. How long we keep it

Account data is kept while your account is open and for up to 24 months after closure. Transaction records are kept for seven years to meet tax and accounting requirements. Private access requests and related know-your-client records are kept for seven years after the last interaction, as regulatory record-keeping requires. Security logs are kept for 12 months.

8. Security

Passwords are hashed with a modern memory-hard algorithm. Traffic is encrypted in transit with TLS. Access to production data is limited to those who need it. Sessions are bound to the browser and rotated periodically. No system is perfectly secure, but we take this seriously.

9. Your rights

Subject to your jurisdiction, you may request access to your information, correction of it, deletion of it, a portable copy, withdrawal of consent for marketing, or that we restrict or stop certain processing. Write to ir@regalinvestments.ca and we will respond within 30 days.

In Québec, you also have rights under the Act respecting the protection of personal information in the private sector, and you may complain to the Commission d'accès à l'information. Elsewhere in Canada, you may complain to the Office of the Privacy Commissioner of Canada.

10. Children

The platform is not directed at anyone under 16, and we do not knowingly collect information from them.

11. Changes

We will post any update here and, if the change is material, notify you directly.

12. Contact

Privacy enquiries: ir@regalinvestments.ca