Privacy Policy

KianTrust is responsible for the personal information it collects through kiantrust.ca and holds under its control.

Our Privacy Officer oversees how we handle personal information and answers questions and requests about it. You can reach the Privacy Officer through our Contact page. For Quebec residents, the Privacy Officer is also the person in charge of the protection of personal information.

We collect only what we need to run the site and serve you. Depending on how you use it, that includes:

• Account details — your email address and a password. Your password is stored only as a one-way cryptographic hash, so nobody at KianTrust can read it.
• Profile details you choose to provide — name, salutation, date of birth, phone number, mailing address, occupation, province, employer, income figures, and beneficiary name and relationship.
• Messages you send us — your name, email address, optional phone number and message when you use the Contact page or the consultation form in the calculators.
• Consent records — the date you accepted this policy and whether you agreed to receive marketing communications.
• Technical and security data — our hosting provider automatically records standard information about each request, such as IP address, browser type, pages requested and time, for security and to keep the site running.

We do not collect your Social Insurance Number, health or medical information, or banking or payment-card details through this site, and we ask that you do not send them to us through the Contact page or by email.

The numbers you enter into the calculators are processed in your browser to show you results. They are not sent to us unless you choose to include them in a message.

We use personal information to:

• create and run your account and the client portal
• verify your email address and let you reset your password
• respond to your questions and requests, and provide the consultations and planning services you ask for
• keep the site and your account secure and prevent misuse
• meet our legal and regulatory obligations
• send you marketing communications, only if you have agreed to receive them

We collect and use your information with your consent. By creating an account you agree to this policy. Agreeing to marketing communications is optional and separate — you can decline and still use the site.

You can withdraw your consent at any time, including unsubscribing from marketing messages, by contacting us. Withdrawing consent may limit the services we can provide.

We do not sell your personal information, and we do not use it for automated decision-making or profiling.

We do not share your personal information with third parties for their own marketing. We share it only as follows:

• Service providers that process information on our behalf: Vercel (website hosting), Neon (database hosting) and Resend (delivery of emails such as verification codes and contact-form messages, which uses Amazon Web Services). They may use the information only to provide their services to us.
• Authorized KianTrust personnel who need access to do their jobs. Staff access to client accounts is restricted by role.
• Authorities or other parties when required or permitted by law, such as under a court order.
• A successor organization, if KianTrust is involved in a merger, acquisition or sale of its business, subject to the protections in this policy.

Our service providers store and process information on servers located in the United States. Your information may therefore be subject to the laws of that country and may be accessible to its courts, law enforcement and national security authorities.

By using the site and creating an account you acknowledge this transfer. If you have concerns, please contact our Privacy Officer before providing your information.

KianTrust uses a single essential cookie, kt_session, to keep you signed in to the client portal. It is HttpOnly, sent only over secure connections, lasts up to seven days, and is removed when you sign out.

We do not use advertising cookies, tracking pixels or third-party analytics on this site, and the fonts we display are served from our own domain.

We keep account information for as long as your account is active. If you ask us to close your account, we delete or de-identify your information unless the law requires us to keep it.

Messages sent through the Contact page are kept in our email records for as long as needed to handle your request and for reasonable record-keeping. Verification and reset codes are short-lived and expire after ten minutes.

We use safeguards appropriate to the sensitivity of the information, including the measures listed below. No system is completely secure. If a breach creates a real risk of significant harm, we will notify affected individuals and the Privacy Commissioner of Canada (and, where applicable, Quebec’s Commission d’accès à l’information) as the law requires.

• encrypted (HTTPS) connections
• passwords stored only as salted one-way hashes
• email verification for new accounts, and time-limited, attempt-limited codes for verification and password resets
• role-based access, so only authorized staff can view or change client accounts

Subject to applicable law, you can make the following requests through our Contact page. We may need to verify your identity first, and we will respond within 30 days or tell you why we need more time.

You may ask us to:

• tell you what personal information we hold about you and how we use it
• correct information that is inaccurate or incomplete
• delete your information or close your account
• give you a copy of your information in a commonly used format
• stop using your information for marketing

If you have a question or concern about how we handle your information, please contact our Privacy Officer first so we can try to resolve it.

You also have the right to complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca) or, if you live in Quebec, to the Commission d’accès à l’information du Québec (cai.gouv.qc.ca).

This site is intended for adults. We do not knowingly collect personal information from anyone under the age of majority in their province or territory. If you believe a minor has given us information, please contact us and we will delete it.

We may update this policy from time to time. The date at the top shows when it was last changed. If we make a significant change to how we use your information, we will let you know before it takes effect.