Last updated: December 10, 2025

Privacy Policy – Advisor Advisory Inc.

1. About Advisor Advisory and the scope of this policy

Advisor Advisory Inc. (“Advisor Advisory”, “we”, “us” or “our”) operates the Advisor Advisory platform at https://advisoradvisory.ca (and related domains, the “Site”). Advisor Advisory is a federally incorporated Canadian company that provides an online directory and information platform where clients can discover, compare and connect with licensed investment advisors.

Clients can search for advisors, view profiles, leave reviews and contact advisors through web forms. Advisors can create free or premium profiles, upload biographies, credentials and other documents, and respond to client inquiries. We may display advertisements or sponsored content on the Site, and advisors may subscribe to paid plans for premium features. We do not provide financial, investment, legal or tax advice, and we do not participate in or facilitate financial transactions between clients and advisors.

This Privacy Policy explains how we collect, use, store and share the personal information of clients, advisors and visitors (collectively, “users”) who use our services. It describes your rights under the Personal Information Protection and Electronic Documents Act (PIPEDA) and any substantially similar provincial laws. PIPEDA is Canada’s federal privacy law that regulates how private-sector organizations handle personal information in the course of commercial activities. Provincial privacy laws in British Columbia, Alberta and Québec offer similar protections and may apply to personal information collected within those provinces.

This policy applies regardless of where you reside, including where personal information is collected, used or disclosed across provincial or national borders.

By using our Site or services, you agree to the practices described in this Privacy Policy.

2. Personal information we collect

2.1 Information you provide directly

Account and profile details.

When you create an account (either as a client or advisor), we collect information such as your name, email address and password. Advisors also provide professional information such as licences and registrations, certifications, designations, areas of specialty, professional bios, education and work history, and may upload documents (for example, brochures, PDFs) and photographs (such as headshots and firm logos).

Contact and communication data.

If you fill out a contact form, request information or interact with us by email, chat or other channels, we collect the information you provide, such as your name, email address, phone number and message content. When clients contact advisors through the Site, we relay the content of those messages to the selected advisor.

Reviews and other user-generated content.

Clients can submit reviews and ratings about advisors. Reviews may include ratings, comments, and any other information you choose to provide. You are responsible for what you submit. Please do not post confidential or sensitive personal information about yourself or others.

Subscription, billing and payment details.

Advisors who subscribe to premium plans provide payment information such as name, billing address and payment card details. Payments are processed by third-party payment processors; we do not store full credit card numbers on our servers. We may store the last four digits of your card, card type and expiry date as provided by our payment processor for record-keeping, invoicing, refund and fraud prevention purposes.

Support, feedback and surveys.

If you contact us for support or provide feedback, suggestions or respond to surveys, we collect the information you provide, including any personal information contained in those communications.

2.2 Information we collect automatically

Usage and device information.

  • IP address
  • Browser type and version
  • Device identifiers and operating system
  • Pages and profiles viewed, search queries, referring URLs and exit pages
  • Date and time of visits and interactions with the Site

Some of this information alone may not identify you, but we treat it as personal information when it can be associated with an identifiable individual.

Cookies and similar technologies.

We use cookies, web beacons, pixels and similar technologies to operate our Site, remember your preferences, analyze how the Site is used and deliver advertisements and sponsored content. For more details, see Section 6 (“Cookies and tracking technologies”).

2.3 Information from other sources

Advisor verification and public sources.

  • Confirm advisors’ licences and registrations using public registries or regulators
  • Collect information about disciplinary history and insurance status from public sources

Verification is performed, if at all, at or around the time of registration or when an advisor requests certain features. Verification is a point-in-time snapshot only; we do not monitor advisor licence status in real time and we assume no ongoing duty to update this status unless we are notified of a change.

Analytics and advertising partners.

We receive aggregated and de-identified reports from analytics providers about Site traffic and performance (for example, page views, conversion rates). Advertising partners may provide us with information about ad impressions, clicks and conversions so we can measure campaign effectiveness.

3. How we use personal information

We collect, use and disclose personal information only for purposes that are identified at or before the time of collection, or as otherwise permitted or required by law.

Advisor Advisory uses personal information for the following purposes:

To provide and improve our services.

We use account and usage information to operate, maintain and improve the Site, including:

  • Displaying advisor profiles and reviews
  • Allowing clients to search, filter and contact advisors
  • Allowing advisors to create and manage profiles and subscriptions
  • Maintaining the security and integrity of our systems

To facilitate communication.

We relay client inquiries to advisors and notify clients when advisors respond. We may send transactional communications such as confirmations, receipts, administrative messages, account alerts, password reset emails, renewal notices and service-related announcements.

To verify advisors and maintain trust.

Where we perform any verification, we may use advisor information to confirm professional credentials and eligibility to be listed. However, verification is a point-in-time snapshot only, and advisors remain solely responsible for keeping their licensing and regulatory status accurate and current.

To process payments and manage subscriptions (including refunds).

We use subscription and payment information to:

  • Process initial payments and renewals
  • Manage billing cycles, refunds and chargebacks
  • Apply our refund policy (for example, 30-day refunds on initial payments, no refunds on renewals as described in our Terms & Conditions)

Payments are handled by third-party payment processors subject to their own privacy policies.

To personalize content, advertising and user experience.

We may use cookies, usage data and approximate location (for example, province or city) to remember your preferences and deliver relevant content, such as:

  • Showing you advisors in your region
  • Displaying advertisements or sponsored content that match your interests

We follow guidance from the Office of the Privacy Commissioner of Canada (OPC) regarding online behavioural advertising, including using opt-out consent where appropriate and limiting information used for ads to non-sensitive categories.

To conduct research and analytics.

We analyze how users interact with the Site to:

  • Improve functionality and design
  • Develop new features and tools
  • Understand trends, performance and usage patterns

For automated tools and moderation.

We may use automated tools (including machine-learning systems) to help detect spam, abusive content, fake accounts, fraudulent reviews or other violations of our Terms. These tools assist our human review process but do not make binding legal decisions about users.

For security and fraud prevention.

We monitor activity to prevent misuse of the Site, detect fraud, investigate suspicious activity, and protect the security of user accounts.

To comply with legal and regulatory obligations.

We may use or disclose personal information as needed to:

  • Comply with applicable laws, regulations and legal processes
  • Respond to lawful requests and inquiries from regulators
  • Enforce our Terms & Conditions
  • Protect our rights, property, safety, and that of our users or others

We will not use personal information for purposes beyond those described in this policy without obtaining your consent or as otherwise required or permitted by law.

4. Legal basis and consent

We follow PIPEDA’s Fair Information Principles, including accountability, identifying purposes, obtaining consent, limiting collection, limiting use/disclosure/retention, ensuring accuracy, safeguarding personal information, openness, individual access and providing mechanisms to challenge compliance.

Consent.

We obtain meaningful consent before collecting, using or disclosing personal information, except where otherwise permitted or required by law. Consent may be:

  • Express, for example, when you check a box, click “I agree” or provide written consent; or
  • Implied, for example, when you use our Site after receiving notice of our practices and your information is non-sensitive and used in ways that are reasonably expected.

We obtain express consent for:

  • Collecting or using sensitive information
  • Using personal information for materially different purposes than originally identified

You may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice. Withdrawal of consent may affect our ability to provide you with certain services.

5. How we share personal information

We do not sell personal information. We share personal information only as described below or as otherwise permitted or required by law.

With advisors (for client inquiries).

When clients submit inquiries or requests to advisors, we share the client’s name, contact information and message content with the selected advisor so they can respond. Advisors are independent professionals and are responsible for handling personal information according to their own legal and regulatory obligations, privacy policies and professional standards.

With service providers.

We engage third-party companies and individuals (our “service providers”) to perform services on our behalf, such as:

  • Website hosting and infrastructure
  • Payment processing and billing
  • Email delivery and communication tools
  • Analytics and audience measurement
  • Advertising technology and marketing tools
  • Security, logging and fraud detection

Service providers may have access to personal information only as necessary to perform their functions, and are contractually required to:

  • Use personal information only for the purposes we specify
  • Maintain appropriate administrative, technical and physical safeguards
  • Provide a level of protection comparable to that required by Canadian privacy laws

With analytics and advertising partners.

We may allow certain partners to use cookies, pixels or similar technologies to collect information about your device and browsing behaviour for analytics and advertising purposes. These partners use the information to provide us with aggregated reports (for example, number of views, clicks) and to deliver ads based on your interests. We implement opt-out mechanisms where feasible and do not knowingly use these tools for tracking children or on websites aimed at children.

For legal reasons.

We may disclose personal information:

  • To comply with legal obligations, court orders or lawful requests
  • To protect and defend the rights, property or safety of Advisor Advisory, our users or others
  • To investigate or prevent fraud, abuse or other harmful activity

Business transfers.

In the event of a proposed or actual merger, acquisition, financing, reorganization, sale of assets or similar transaction, personal information may be transferred as part of that transaction. We will ensure that confidentiality is maintained and that any successor organization agrees to protect personal information in a manner consistent with this Privacy Policy.

Aggregated or de-identified data.

We may use and share aggregated or de-identified information that cannot reasonably be used to identify you, for example, to publish statistics about platform usage or for research and analytics.

6. Cookies and tracking technologies

  • Essential cookies – Necessary for basic website operations (such as security, login sessions and page navigation). These cannot be disabled through our systems.
  • Functional cookies – Remember your preferences and settings (such as language or recently viewed profiles) to improve your experience.
  • Analytics cookies – Collect information about how visitors use the Site (such as which pages are visited most often, how users move between pages) so we can improve performance and design.
  • Advertising and marketing cookies – Help deliver advertisements and sponsored content, measure their effectiveness and build aggregate audience segments.

When you first visit the Site, we display a notice (banner) about our use of cookies, with a link to this policy and, where applicable, options to manage your preferences or opt out of non-essential cookies. You may also configure your browser to reject or delete cookies. If you disable some cookies, parts of the Site may not function properly.

We do not knowingly use cookies or similar technologies to track children or to serve targeted ads on websites aimed at children.

7. Data retention and security

Retention.

We retain personal information only as long as necessary to fulfill the purposes for which it was collected, or as required or permitted by law. We consider factors such as:

  • The nature and sensitivity of the information
  • Legal, regulatory, tax and accounting requirements
  • The potential need to resolve disputes or enforce agreements

As general guidance:

  • Account information is retained while your account is active and for a reasonable period after closure (for example, up to 2 years) to respond to inquiries, enforce our rights or comply with record-keeping obligations.
  • Advisor profiles and client reviews may be retained for the operational life of the platform, unless removed under our content policies or upon valid request, subject to legal requirements.
  • Billing and payment records are typically retained for at least 7 years for tax and audit purposes.
  • Logs and security-related data may be retained for a period sufficient to detect, investigate and prevent fraud or security incidents.

Security.

We implement reasonable administrative, technical and physical safeguards to protect personal information against loss, theft and unauthorized access, disclosure, copying, use or modification. These measures may include:

  • Encryption in transit and at rest where appropriate
  • Access controls and authentication practices
  • Network and application security measures
  • Regular backups and monitoring
  • Staff training and confidentiality obligations

However, no system is completely secure. In the event of a breach of security safeguards that poses a real risk of significant harm, we will comply with applicable breach notification laws, including:

  • Reporting the breach to the Office of the Privacy Commissioner of Canada (and relevant provincial regulators, if applicable)
  • Notifying affected individuals as required
  • Maintaining records of all security incidents

8. International data transfers

Our primary servers are currently located in Canada. However, some of our service providers may be located or may process personal information in other countries, including the United States and member states of the European Union or other jurisdictions.

When personal information is transferred outside of Canada, it may be subject to the laws of the receiving jurisdiction, which may provide a different level of protection than Canadian laws. In such cases, we use contractual and other safeguards (for example, data protection agreements and appropriate technical measures) to require that service providers protect personal information in a manner comparable to Canadian standards.

9. Your rights under Canadian privacy laws

  • Right to be informed – To receive clear information about our data practices.
  • Right of access – To request access to personal information we hold about you, subject to limited exceptions.
  • Right to correction/rectification – To request correction of inaccurate or incomplete personal information.
  • Right to withdraw consent – To withdraw your consent to our use or disclosure of your personal information, subject to legal or contractual restrictions and reasonable notice.
  • Right to complain – To file a complaint with us and/or with the Office of the Privacy Commissioner of Canada or applicable provincial privacy regulator.

Residents of Québec may also have additional rights under Québec’s Law 25, including rights to data portability and erasure, subject to legal and technical limitations.

10. How to exercise your rights

To make a privacy request (for example, access, correction or withdrawal of consent), please contact us at:

Email: support@advisoradvisory.com
Subject line: “Privacy Request – Advisor Advisory”

We may ask you for additional information to verify your identity and to help us locate the personal information we hold about you. We will respond within a reasonable time (generally within 30 days), or inform you if we require an extension and explain your options if you are not satisfied with our response.

If we refuse your request as permitted by law, we will explain the reasons and identify any recourse that may be available to you, including the right to complain to the relevant privacy regulator.

11. Third-party services and links

Our Site may contain links to third-party websites, applications or services that are not owned or controlled by Advisor Advisory, including advisor websites and external tools (for example, payment processors, scheduling tools, social media platforms). This Privacy Policy does not apply to the privacy practices of those third parties.

We are not responsible for the privacy, security or content of third-party sites. We encourage you to review their privacy policies before providing any personal information.

12. Children’s privacy

Our services are intended for adults. We do not knowingly collect personal information from individuals under the age of majority in their province, state or country of residence. If we become aware that a child has provided us with personal information without parental consent, we will take steps to delete such information as soon as reasonably possible.

We do not knowingly allow targeted advertising on websites aimed at children.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements or for other operational reasons. When we make material changes, we will update the “Last updated” date at the top of this page and may provide additional notice (for example, by email or a prominent notice on the Site).

Your continued use of the Site after the effective date of any revised policy constitutes your acceptance of the updated Privacy Policy.

14. Contact us

If you have any questions, concerns or complaints about this Privacy Policy or our privacy practices, please contact us at:

Email: support@advisoradvisory.com

We are committed to addressing your concerns in a timely and transparent manner and, where appropriate, working with regulatory authorities to resolve any privacy issues.