Privacy Policy

At Scotia Connect, we are committed to protecting your privacy and handling your personal information with the highest standards of transparency, integrity, and care. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website at scotiaconnext.com, use our services, or interact with us in any way. Please read this policy carefully to understand our practices.

This Privacy Policy is governed by the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation in Canada, including provincial privacy laws where applicable. We also align our practices with the internationally recognized principles of the General Data Protection Regulation (GDPR) as a global best-practice benchmark for privacy protection.

By accessing or using our website and services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our website and services.

1. About Scotia Connect

Scotia Connect operates the website scotiaconnext.com and provides general services to individuals and organizations across Canada. As the entity responsible for your personal information, Scotia Connect acts as the data controller for the purposes of this Privacy Policy.

For all privacy-related inquiries, requests, or concerns, you may contact us using the following details:

2. Scope of This Privacy Policy

This Privacy Policy applies to:

• All visitors to our website at scotiaconnext.com
• Registered users and account holders of our services
• Individuals who contact us through our inquiry or contact forms
• Individuals who subscribe to our newsletters, updates, or communications
• Business partners, contractors, and service providers who interact with us
• Any person whose personal information we process in connection with our services

This policy does not apply to third-party websites, platforms, or services that may be linked from our website. We encourage you to review the privacy policies of any third-party sites you visit, as we have no control over their practices.

3. Information We Collect

We collect various categories of personal information depending on how you interact with Scotia Connect. The types of information we may collect include:

3.1 Personal Identification Information

When you register for our services, fill out a form, or contact us directly, we may collect information that identifies you personally, including:

• Full name
• Email address
• Phone number
• Mailing or billing address
• Company or organization name (if applicable)
• Job title or professional role
• Username and password (for account holders)
• Any other information you voluntarily provide to us

3.2 Financial and Transactional Information

If you engage in transactions through our platform, we may collect:

• Payment card information (processed securely through third-party payment processors)
• Billing and invoicing information
• Transaction history and records
• Bank account details where applicable

Please note that we do not store complete payment card numbers on our servers. Payment processing is handled by trusted third-party payment processors who maintain their own security standards.

3.3 Usage and Behavioral Data

When you visit our website or use our services, we automatically collect certain information about your interactions, including:

• Pages viewed and features used
• Time and duration of your visits
• Links clicked within our website
• Search queries made within our platform
• Actions taken within user accounts
• Referring website URLs
• Error logs and performance data

3.4 Device and Technical Information

We collect technical information about the devices you use to access our services, including:

• IP address
• Browser type and version
• Operating system and version
• Device type (desktop, mobile, tablet)
• Screen resolution and display settings
• Internet service provider
• Geographic location data (at the city or region level, derived from IP address)
• Unique device identifiers

3.5 Cookie and Tracking Data

We use cookies, web beacons, pixels, and similar tracking technologies to collect information about how you interact with our website. Please refer to Section 9 of this Privacy Policy for detailed information about our cookie practices.

3.6 Communications Data

When you communicate with us, we may collect and retain:

• Content of emails, messages, or inquiries sent to us
• Records of correspondence and support tickets
• Survey responses and feedback submissions
• Information provided during telephone conversations (where applicable)

3.7 Information from Third Parties

We may receive personal information about you from third-party sources, including:

• Social media platforms (if you connect your social media account or interact with us through social platforms)
• Business partners and referral partners
• Publicly available databases and directories
• Analytics and data enrichment service providers

4. How We Use Your Information

Scotia Connect uses the personal information we collect for legitimate, specified purposes. We process your information only when we have a valid legal basis to do so under Canadian privacy law and GDPR principles. Our purposes include:

4.1 Service Provision and Account Management

• Creating and managing your user account
• Delivering the products and services you have requested
• Processing transactions and sending related documentation
• Responding to your inquiries, requests, and support needs
• Verifying your identity and preventing fraudulent activity
• Providing customer support and technical assistance

4.2 Analytics and Service Improvement

• Analyzing how users interact with our website and services
• Identifying trends, preferences, and areas for improvement
• Conducting internal research and development
• Testing new features, functionality, and designs
• Monitoring the performance and security of our systems
• Generating aggregated, anonymized statistical reports

4.3 Marketing and Communications

• Sending you newsletters, promotional materials, and updates about our services (with your consent where required)
• Providing personalized content, recommendations, and offers
• Conducting surveys and soliciting feedback
• Notifying you of changes to our services, terms, or policies
• Running advertising campaigns and remarketing activities

You may withdraw your consent to marketing communications at any time by clicking the "unsubscribe" link in any email we send, or by contacting us directly at [email protected].

4.4 Legal Compliance and Safety

• Complying with applicable Canadian laws and regulations
• Responding to lawful requests from regulatory authorities or law enforcement
• Enforcing our Terms of Service and other agreements
• Protecting the rights, property, and safety of Scotia Connect, our users, and the public
• Detecting, investigating, and preventing fraud, abuse, or other harmful activities
• Maintaining records as required by law

4.5 Business Operations

• Managing and maintaining our business relationships
• Facilitating mergers, acquisitions, or other business transactions
• Conducting financial audits and accounting functions
• Training and quality assurance for our staff

5. Legal Basis for Processing Personal Information

In accordance with PIPEDA and consistent with GDPR principles, we process your personal information based on the following legal grounds:

6. Sharing Your Information with Third Parties

Scotia Connect does not sell, rent, or trade your personal information to third parties for their own marketing purposes. We may share your information in the following limited circumstances:

6.1 Service Providers and Business Partners

We engage trusted third-party companies and individuals to assist us in operating our business and delivering our services. These service providers may have access to your personal information only as necessary to perform their functions on our behalf, and they are contractually obligated to maintain the confidentiality and security of your data. Categories of service providers include:

• Cloud hosting and infrastructure providers
• Payment processing companies
• Email and marketing automation platforms
• Analytics and data analysis providers
• Customer support software providers
• Cybersecurity and fraud detection services
• Legal, accounting, and professional advisory firms

6.2 Legal Requirements and Law Enforcement

We may disclose your personal information if required to do so by law or in response to valid legal processes, such as:

• Court orders, subpoenas, or warrants
• Requests from government authorities or regulatory bodies
• Investigations by law enforcement agencies
• Compliance with applicable Canadian federal or provincial legislation

Where permissible by law, we will notify you of such requests before disclosing your information.

6.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred to a successor entity as part of that transaction. We will notify you via email or a prominent notice on our website before your personal information is transferred and becomes subject to a different privacy policy.

6.4 Protecting Rights and Safety

We may share information when we believe disclosure is necessary to protect the rights, property, or safety of Scotia Connect, our users, or others, including to prevent fraud or other illegal activities.

6.5 With Your Consent

We may share your information with other third parties when we have obtained your explicit consent to do so.

7. Data Security

Scotia Connect takes the security of your personal information very seriously. We implement appropriate technical, administrative, and physical safeguards designed to protect your information from unauthorized access, disclosure, alteration, or destruction. Our security measures include:

7.1 Technical Safeguards

• Encryption: All data transmitted between your browser and our servers is encrypted using industry-standard Transport Layer Security (TLS) technology. Sensitive data at rest is also encrypted.
• Secure Authentication: We employ strong password requirements, multi-factor authentication options, and session management controls.
• Firewalls and Intrusion Detection: Our systems are protected by advanced firewalls and intrusion detection and prevention systems.
• Vulnerability Management: We conduct regular security assessments, penetration testing, and vulnerability scans of our systems.
• Access Controls: Access to personal information is restricted to authorized personnel on a need-to-know basis.

7.2 Administrative Safeguards

• Privacy and security training for all employees who handle personal information
• Confidentiality agreements with employees and contractors
• Data minimization practices — we collect only the information we need
• Documented incident response procedures
• Regular review and update of security policies

7.3 Physical Safeguards

• Secure data center facilities with restricted physical access
• Controlled access to office environments where personal data may be processed

8. Your Privacy Rights

As a resident of Canada, you have important rights regarding your personal information under PIPEDA and applicable provincial privacy legislation. Scotia Connect is committed to upholding these rights and will respond to all verified requests within the timeframes required by law (generally within 30 days).

8.1 Right of Access

You have the right to request access to the personal information we hold about you, including details about the types of information collected, how it is used, and with whom it has been shared. We will provide you with a copy of your personal information in a structured, readable format.

8.2 Right to Correction

If you believe that any personal information we hold about you is inaccurate, incomplete, or outdated, you have the right to request that we correct or update it. Where we disagree with a requested correction, we will note your disagreement in your file.

8.3 Right to Deletion (Right to be Forgotten)

You may request the deletion of your personal information from our records, subject to certain exceptions. We may be required to retain certain information to comply with legal obligations, resolve disputes, or enforce our agreements. We will inform you of any information we are unable to delete and the reasons why.

8.4 Right to Data Portability

You have the right to receive a copy of your personal information in a structured, commonly used, and machine-readable format, and to request that we transfer this information to another organization where technically feasible.

8.5 Right to Withdraw Consent

Where we process your personal information based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to your withdrawal. Withdrawing consent may limit your ability to use certain features of our services.

8.6 Right to Object to Processing

You have the right to object to the processing of your personal information for direct marketing purposes or where we are relying on legitimate interests as our legal basis. Upon receiving a valid objection, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

8.7 How to Exercise Your Rights

To exercise any of the rights described above, please submit a written request to:

We may need to verify your identity before processing your request. We will respond within 30 calendar days of receiving your request. If your request is particularly complex, we may extend this period by up to an additional 30 days, and we will notify you of such an extension in writing.

9. Cookies and Tracking Technologies

Scotia Connect uses cookies and similar tracking technologies to enhance your experience on our website, analyze usage patterns, and support our marketing activities. This section provides a brief overview of our cookie practices.

9.1 What Are Cookies?

Cookies are small text files placed on your device by websites you visit. They are widely used to make websites function more efficiently and to provide information to the owners of the site. We also use web beacons, pixels, and similar technologies that serve comparable purposes.

9.2 Categories of Cookies We Use

• Strictly Necessary Cookies: Essential for the operation of our website. Without these cookies, certain services cannot be provided. These do not require your consent.
• Performance and Analytics Cookies: These help us understand how visitors interact with our website by collecting and reporting anonymous information.
• Functional Cookies: These allow our website to remember choices you make (such as your username or language preference) and provide enhanced, personalized features.
• Marketing and Targeting Cookies: These are used to deliver advertisements relevant to your interests and to measure the effectiveness of marketing campaigns.

9.3 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings at any time. You can also withdraw your consent to non-essential cookies through our cookie consent tool available on our website. Please note that disabling certain cookies may affect the functionality of our website and services.

For more detailed information about the specific cookies we use, their purposes, durations, and how to manage your preferences, please refer to our Cookie Policy available on our website at scotiaconnext.com.

10. Data Retention

Scotia Connect retains your personal information only for as long as is necessary to fulfill the purposes for which it was collected, to comply with our legal obligations, resolve disputes, and enforce our agreements. The specific retention periods depend on the nature of the information and the purpose for which it was collected:

Upon expiration of the applicable retention period, personal information is securely deleted or anonymized in accordance with our data disposal procedures.

11. Children's Privacy

Scotia Connect does not knowingly market to or solicit personal information from minors. If you are under 18 years of age, please do not use our website or submit any personal information to us. If you are the parent or legal guardian of a child under 18 who you believe has provided us with personal information, please contact us immediately at [email protected] so that we can take appropriate steps to remove that information from our records.

Upon learning that we have inadvertently collected personal information from a child under 18, we will promptly delete such information from our systems. We will also take reasonable steps to prevent the reoccurrence of such collection.

12. International Data Transfers

Scotia Connect is based in Canada and primarily processes personal information within Canada. However, some of our third-party service providers and technology partners may be located in other countries, including the United States and other jurisdictions. As a result, your personal information may be transferred to, stored, or processed in countries outside of Canada.

12.1 Safeguards for International Transfers

When we transfer personal information outside of Canada, we take appropriate steps to ensure that your information remains protected to the same standard as required by Canadian privacy law. These safeguards include:

• Contractual protections: We enter into data processing agreements with our international service providers that include standard contractual clauses and privacy obligations aligned with PIPEDA requirements.
• Adequacy assessments: We assess the privacy laws of the destination country to ensure an adequate level of protection for your personal information.
• Technical safeguards: Encryption and other security measures protect your data during transmission and storage.

12.2 United States

Many of our service providers are located in the United States. The privacy laws in the United States may differ from those in Canada. However, where we transfer data to US-based providers, we ensure such transfers are covered by appropriate contractual protections and that the providers adhere to recognized privacy frameworks.

By using our services, you acknowledge and consent to the transfer of your personal information to countries outside Canada as described in this policy.

13. Third-Party Links and Services

Our website may contain links to third-party websites, applications, or services that are not operated or controlled by Scotia Connect. We provide these links for your convenience and informational purposes only. This Privacy Policy does not apply to any third-party websites, and we are not responsible for the privacy practices or content of such websites.

We encourage you to review the privacy policies of any third-party websites you visit before providing them with your personal information. The inclusion of any link on our website does not imply our endorsement of the linked website or its operator.

14. Social Media and Online Interactions

Scotia Connect may operate pages, profiles, or accounts on social media platforms such as LinkedIn, Facebook, Instagram, X (formerly Twitter), and others. When you interact with us on these platforms, the social media operator will also process your personal information in accordance with their own privacy policies. We encourage you to review the privacy settings and policies of any social media platforms you use.

Our website may include social media sharing buttons or features. Using these features may result in the social media platform collecting information about your visit, even if you do not actively click the button. This is governed by the privacy policy of the respective social media platform, not by this Privacy Policy.

15. Automated Decision-Making and Profiling

Scotia Connect may use automated processes to analyze certain information about you for purposes such as fraud detection, risk assessment, and service personalization. Where such processes may produce legally significant or similarly significant effects on you, we will inform you and provide you with the opportunity to request human review of the automated decision.

If you wish to know whether your data is used for automated decision-making, or to exercise your rights in connection with such processing, please contact us at [email protected].

16. Filing a Privacy Complaint

If you have concerns about how Scotia Connect handles your personal information and you are not satisfied with our response to your inquiry, you have the right to file a complaint with the relevant data protection authority.

16.1 Contact Scotia Connect First

We encourage you to contact us first so that we have the opportunity to address your concern directly:

We will acknowledge your complaint within 10 business days and work to resolve it within 30 calendar days.

16.2 Office of the Privacy Commissioner of Canada (OPC)

If you are not satisfied with our response, or if you believe we are not complying with PIPEDA, you may file a complaint with the Office of the Privacy Commissioner of Canada:

16.3 Provincial Privacy Commissioners

Depending on your province of residence, you may also have the right to file a complaint with a provincial privacy commissioner. Provincial privacy legislation such as the Freedom of Information and Protection of Privacy Act (FIPPA) in British Columbia and Ontario, and the Act respecting the protection of personal information in the private sector in Quebec (Law 25), may also apply. We encourage you to contact your applicable provincial privacy office for further guidance.

17. Changes to This Privacy Policy

Scotia Connect reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, services, legal requirements, or for other operational reasons. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page
• Post a prominent notice on our website homepage or login page
• Where required by law or where we deem it appropriate, notify you directly by email

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal information. Your continued use of our website or services after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

If you disagree with any changes to this Privacy Policy, please discontinue your use of our services and contact us to discuss your options.

18. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please do not hesitate to contact our Privacy Officer. We are committed to addressing all privacy inquiries in a timely and professional manner.

When contacting us with a privacy request or complaint, please include your full name, contact information, and a clear description of your inquiry or the nature of your request. This will help us respond to you as efficiently as possible.