Privacy Policy

Effective Date: May 21, 2026  ·  Last Updated: May 21, 2026

1. Introduction

13810682 Canada Inc., doing business as "Informed & Invested" and "Modern Value Investor" (referred to as "we," "us," "our," or the "Company"), respects your privacy and is committed to protecting your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard personal information when you access or use the websites located at informedandinvested.com, learn.informedandinvested.com, and any subdomains thereof (collectively, the "Site"), and the educational courses, training materials, webinars, community platforms, software applications, and related services we offer (collectively, the "Services").

This Privacy Policy is designed to comply with applicable privacy laws, including:

• The Personal Information Protection and Electronic Documents Act (Canada) ("PIPEDA")
• Canada's Anti-Spam Legislation ("CASL")
• The General Data Protection Regulation (European Union) ("GDPR")
• The California Consumer Privacy Act and California Privacy Rights Act ("CCPA/CPRA")
• Other applicable U.S. state privacy laws (including those of Virginia, Colorado, Connecticut, and Utah)

By using the Site or Services, you acknowledge that you have read this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein.

2. Privacy Officer and Accountability

In accordance with PIPEDA's accountability principle, the Company has designated a Privacy Officer who is responsible for our compliance with this Privacy Policy and applicable privacy laws.

You may contact our Privacy Officer at any time with questions about this Privacy Policy or to exercise your privacy rights.

3. Information We Collect

3.1 Information You Provide Directly

When you interact with the Site or Services, you may provide us with personal information, including:

• Identity information: First name, last name
• Contact information: Email address, telephone number, mailing address
• Account information: Username, password (stored in encrypted form), profile preferences
• Payment information: Payment card details, billing address (processed and stored by our third-party payment processors; we do not store full payment card numbers)
• Communications: Messages, questions, feedback, or other content you send to us
• Survey and questionnaire responses: Information you provide in pre-call questionnaires, feedback forms, or community discussions
• Investment background information: General information about your investment experience or interests that you voluntarily share (we do not collect detailed financial information, account balances, or holdings)

3.2 Information Collected Automatically

When you access the Site, we automatically collect certain technical information:

• Device and connection information: IP address, browser type and version, operating system, device type, screen resolution, language preferences
• Usage information: Pages viewed, time spent on pages, click patterns, referring and exit pages, date and time of access, search terms used to find the Site
• Location information: Approximate geographic location derived from IP address (city/region level, not precise location)

3.3 Information from Third Parties

We may receive information about you from third parties, including:

• Payment processors (transaction confirmations)
• Marketing platforms (advertising performance data)
• Analytics providers (aggregated usage statistics)
• Social media platforms (if you interact with our content on those platforms)
• Webinar and video hosting platforms (attendance, viewing duration)

3.4 Cookies and Tracking Technologies

We use cookies, pixels, web beacons, and similar tracking technologies to:

• Maintain your session and remember your preferences
• Analyze how the Site is used and improve user experience
• Measure the effectiveness of marketing campaigns
• Provide personalized content
• Detect and prevent fraud

You can manage cookie preferences through your browser settings. Disabling cookies may affect the functionality of the Site.

The Site uses the following categories of cookies:

• Strictly necessary cookies: Required for the Site to function (e.g., authentication, security)
• Functional cookies: Remember your preferences and settings
• Analytics cookies: Help us understand how visitors use the Site (we use providers including Google Analytics)
• Marketing cookies: Used to deliver and measure advertising (we use providers including Google Ads, Meta Pixel)

4. How We Use Your Information

We use your personal information for the following purposes:

4.1 To Provide and Improve the Services

• Create and maintain your account
• Process payments and provide access to purchased Services
• Deliver educational content, course materials, and webinars
• Operate community platforms and respond to your inquiries
• Improve the quality, design, and functionality of the Site and Services
• Develop new products and features

4.2 To Communicate with You

• Send transactional messages (purchase confirmations, account notifications, technical updates)
• Send educational content and resources you have requested
• Send marketing communications about our Services (only with your consent, where required by law)
• Respond to your questions and provide customer support
• Notify you of changes to our policies or Services

4.3 For Marketing and Advertising

With your consent, where required by law, we may use your information to:

• Send newsletters and educational content
• Inform you about new Services, features, or offers
• Personalize advertising on third-party platforms (such as Google, YouTube, and Meta)
• Conduct lookalike audience targeting for advertising purposes

4.4 For Legal and Security Purposes

• Verify your identity and prevent fraud
• Enforce our Terms and Conditions
• Comply with applicable laws and regulations
• Respond to lawful requests from government authorities
• Protect the rights, property, and safety of the Company, our users, and the public
• Maintain records required by law, including securities and financial regulations applicable to our business

4.5 For Analytics

• Analyze user behavior and engagement
• Measure the performance of marketing campaigns
• Generate aggregated, de-identified statistics about Site usage

5. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, our legal basis for processing your personal information depends on the specific information and the context:

• Consent: For marketing communications, certain cookies, and other purposes where you have provided express consent
• Contract performance: To provide the Services you have purchased
• Legal obligation: To comply with applicable laws
• Legitimate interests: To operate and improve our business, prevent fraud, and provide security, where these interests are not overridden by your rights

You have the right to withdraw consent at any time, where consent is the legal basis for processing.

6. Commercial Electronic Messages — CASL Compliance

In accordance with Canada's Anti-Spam Legislation, we will only send you commercial electronic messages (such as marketing emails or SMS) where:

• You have provided express consent
• We have implied consent under CASL (such as an existing business relationship arising from a recent purchase)
• The message falls within a recognized exception under CASL

Every commercial electronic message we send will:

• Identify the sender (Informed & Invested, 13810682 Canada Inc.)
• Provide our contact information including a mailing address
• Include a working unsubscribe mechanism that processes your request within ten (10) business days

You may unsubscribe from marketing communications at any time by clicking the unsubscribe link in any email, by replying STOP to any SMS message, or by contacting our Privacy Officer.

7. Sharing and Disclosure of Information

We do not sell your personal information. We may share your information in the following circumstances:

7.1 Service Providers

We share information with third-party service providers who help us operate our business, including:

• Payment processors: Stripe, PayPal, or similar (for payment processing)
• Customer relationship management: GoHighLevel (CRM and marketing automation)
• Email and SMS providers: For sending communications
• Webinar and video hosting: For delivering training content
• Analytics providers: Google Analytics, similar tools (for understanding site usage)
• Advertising platforms: Google Ads, Meta, for marketing campaigns
• Cloud hosting and storage: For storing data and operating the Site
• Community platforms: Telegram, Discord, or similar (for community access)

These service providers are contractually obligated to handle your information securely and use it only for the purposes for which we engage them.

7.2 Legal Requirements

We may disclose your information when we believe disclosure is necessary to:

• Comply with applicable law, regulation, legal process, or government request
• Enforce our Terms and Conditions
• Protect the rights, property, or safety of the Company, our users, or others
• Detect, prevent, or address fraud, security issues, or technical issues

7.3 Business Transfers

If we are involved in a merger, acquisition, asset sale, or similar transaction, your personal information may be transferred as part of that transaction. We will notify you of any such transfer and any change in privacy practices.

7.4 With Your Consent

We may share your information for other purposes with your express consent.

7.5 Aggregated and De-identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you for any purpose.

8. International Data Transfers

The Company is based in Canada, and your personal information may be processed in Canada, the United States, and other countries where our service providers operate.

If you are located outside Canada, your information will be transferred to and processed in Canada, which may have data protection laws that differ from those of your country. By using the Services, you consent to such transfers.

For users in the European Economic Area, the United Kingdom, or Switzerland: Canada has been designated by the European Commission as providing an adequate level of data protection for personal data transferred from the EU under the GDPR (with respect to commercial organizations subject to PIPEDA). For transfers to other jurisdictions (such as the United States), we implement appropriate safeguards, including Standard Contractual Clauses where applicable.

9. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including:

• For the duration of your relationship with us as a customer or subscriber
• To comply with our legal, regulatory, accounting, and reporting obligations
• To resolve disputes and enforce our agreements
• To maintain records required by law, including those required under Canadian, U.S., and other applicable laws

Specific retention periods include:

• Account information: Retained for the duration of your account and for seven (7) years after account closure (for tax and legal compliance)
• Transaction records: Seven (7) years (for tax and accounting requirements)
• Marketing consent records: Three (3) years after the relationship ends (CASL requirement)
• Communications: Up to seven (7) years
• Cookies and analytics data: Up to twenty-six (26) months

When personal information is no longer needed, we will securely delete, destroy, or anonymize it.

10. Data Security

We implement reasonable physical, technical, and administrative safeguards designed to protect personal information against unauthorized access, use, disclosure, alteration, or destruction. These safeguards include:

• Encryption of data in transit using TLS
• Encryption of sensitive data at rest
• Access controls and authentication requirements
• Regular security reviews of our systems and service providers
• Employee and contractor confidentiality obligations
• Incident response procedures

However, no security measure is perfect, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately of any suspected unauthorized access.

11. Your Privacy Rights

11.1 Rights Under PIPEDA (Canada)

If you are a resident of Canada, you have the following rights regarding your personal information:

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Withdrawal of consent: Withdraw consent to the collection, use, or disclosure of your information (subject to legal or contractual restrictions)
• Complaint: File a complaint with the Office of the Privacy Commissioner of Canada (www.priv.gc.ca)

11.2 Rights Under GDPR (EU/UK)

If you are a resident of the European Economic Area, the United Kingdom, or Switzerland, you have the following rights:

• Access: Request access to your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Request restriction of processing
• Portability: Request a copy of your data in a structured, machine-readable format
• Objection: Object to certain processing, including direct marketing
• Withdrawal of consent: Withdraw consent at any time
• Complaint: Lodge a complaint with your local data protection authority

11.3 Rights Under CCPA/CPRA (California)

If you are a California resident, you have the following rights:

• Right to know: Request disclosure of the categories and specific pieces of personal information we have collected about you
• Right to delete: Request deletion of your personal information
• Right to correct: Request correction of inaccurate personal information
• Right to opt-out of sale or sharing: We do not sell personal information; we may share information for cross-context behavioral advertising and you may opt out by contacting us
• Right to limit use of sensitive personal information: We do not collect categories of "sensitive personal information" as defined under the CPRA
• Right to non-discrimination: You will not be discriminated against for exercising your rights

11.4 Rights Under Other U.S. State Laws

Residents of Virginia, Colorado, Connecticut, Utah, and other states with comprehensive privacy laws have similar rights, including access, correction, deletion, and opt-out rights. Contact us to exercise these rights.

11.5 Exercising Your Rights

To exercise any of these rights, please contact our Privacy Officer at [email protected]. We will respond to your request within the timeframes required by applicable law (typically 30-45 days, with possible extensions).

We may need to verify your identity before processing your request. We will not discriminate against you for exercising your privacy rights.

If you have an authorized agent making a request on your behalf, we will require proof of authorization.

12. Children's Privacy

The Services are not directed to children under 18, and we do not knowingly collect personal information from children under 18. If you are under 18, please do not provide any information to us.

If we learn that we have collected personal information from a child under 18 without verified parental consent, we will delete that information promptly. If you believe we have collected information from a child, please contact our Privacy Officer.

We comply with the Children's Online Privacy Protection Act (COPPA) in the United States to the extent applicable.

13. Third-Party Links and Services

The Site may contain links to third-party websites, services, or content. This Privacy Policy does not apply to third-party services, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third party before providing personal information.

The Site integrates with third-party platforms (such as Google, Meta, Telegram). Your interactions with these platforms are governed by their respective privacy policies.

14. Do Not Track Signals

Some browsers transmit "Do Not Track" signals. Because there is no industry standard for responding to these signals, we do not currently respond to them. We respond to verified privacy requests as described in Section 11.

15. Automated Decision-Making

We do not engage in automated decision-making, including profiling, that produces legal or similarly significant effects on you.

We may use automated processes to deliver personalized advertising or content recommendations, but you can opt out of such uses by contacting us or by adjusting your account preferences.

16. Data Breach Notification

In the event of a data breach affecting your personal information, we will notify you and applicable regulators as required by law. Notification will include the nature of the breach, the categories of information involved, and the steps you can take to protect yourself.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. We will notify you of material changes by posting a notice on the Site, sending an email to your registered address, or by other reasonable means.

The "Last Updated" date at the top of this Privacy Policy indicates when it was last revised. Your continued use of the Services after the updated policy becomes effective constitutes your acceptance of the changes.

18. Specific Information for California Residents

In addition to the general rights described above, this section provides additional information required by California law.

Categories of Personal Information Collected

In the past 12 months, we have collected the following categories of personal information (as defined by California law):

• Identifiers (name, email, phone, IP address)
• Customer records (contact information, payment information)
• Internet and network activity (browsing history on our Site)
• Geolocation data (approximate location from IP)
• Inferences drawn from the above (preferences, interests)

Sources of Personal Information

• Directly from you
• From your interaction with the Site
• From third-party service providers
• From marketing partners

Purposes for Collection

As described in Section 4 of this Privacy Policy.

Sale or Sharing

We do not sell personal information in exchange for monetary consideration. We may share information for cross-context behavioral advertising (such as retargeting on Google or Meta). You may opt out of such sharing by contacting our Privacy Officer.

19. Contact Us

For questions, concerns, or to exercise your privacy rights, please contact:

Privacy Officer
Amit Chandan
13810682 Canada Inc., doing business as Informed & Invested
Email: [email protected]

For Canadian residents who are unsatisfied with our response, you may also contact:

Office of the Privacy Commissioner of Canada
30 Victoria Street
Gatineau, Quebec K1A 1H3
Telephone: 1-800-282-1376
Website: www.priv.gc.ca

For EU/UK residents, you may contact your local data protection authority.

For California residents, you may contact the California Attorney General at oag.ca.gov.