...

 

Privacy Policy — IBC Financial

Effective Date: April 17, 2026
Last Updated: April 17, 2026
Designated Privacy Officer: Mona Haddad, Compliance Officer


About This Privacy Policy

This Privacy Policy explains how IBC Financial, the dedicated educational and marketing division of Canadian Wealth Creation Centre Inc. (“CWCC,” federal corporation #9962085), collects, uses, discloses, retains, and protects personal information obtained through the website IBCFinancial.com (“the Website”), related digital platforms, and our educational and financial services marketing activities.

IBC Financial operates under the legal entity Canadian Wealth Creation Centre Inc. Throughout this policy, “IBC Financial,” “we,” “us,” and “our” refer to Canadian Wealth Creation Centre Inc. doing business as IBC Financial. “You” and “your” refer to any individual who visits the Website, submits information through our forms, or interacts with our services.

This policy has been developed in compliance with:

  • The Personal Information Protection and Electronic Documents Act (PIPEDA, S.C. 2000, c. 5), which governs the collection, use, and disclosure of personal information in commercial activities across Canada.
  • Quebec’s Act Respecting the Protection of Personal Information in the Private Sector (Law 25, CQLR c. P-39.1), which came into full force on September 22, 2024, and applies directly to CWCC as a Quebec-incorporated and Quebec-based enterprise.
  • Canada’s Anti-Spam Legislation (CASL, S.C. 2010, c. 23), which governs the sending of commercial electronic messages.

Where this policy references rights or procedures specific to Quebec residents under Law 25, those provisions apply in addition to, and where they provide greater protection than, the general PIPEDA provisions.


Who Is the Designated Privacy Officer?

Under Law 25, every Quebec enterprise that collects personal information must designate a person responsible for the protection of personal information. Under PIPEDA Principle 1 (Accountability), organizations must designate an individual accountable for compliance.

The designated Privacy Officer for Canadian Wealth Creation Centre Inc. (IBC Financial) is:

Mona Haddad
Compliance Officer
Canadian Wealth Creation Centre Inc. d/b/a IBC Financial
42 Rue de Braine, Blainville, QC J7B 1Z2
Phone: 514-875-9444
Email: privacy@ibcfinancial.com

All privacy inquiries, access requests, rectification requests, complaints, and breach reports should be directed to the Privacy Officer at the contact information above.


What Personal Information Do We Collect?

Personal information is any information about an identifiable individual, as defined under PIPEDA section 2(1) and Law 25 section 2. We collect the following categories of personal information:

Information You Provide Directly

When you complete forms on our Website, book a discovery meeting, subscribe to communications, or contact us by phone, email, or in person, we may collect:

  • Your name, email address, phone number, and mailing address.
  • Professional background information, including whether you are a licensed insurance professional (collected through our booking form screening questions).
  • Canadian citizenship or permanent resident status (collected through our booking form to confirm service eligibility).
  • General financial goals and areas of interest that you voluntarily share during consultations or through forms.
  • Any other information you choose to provide in correspondence with us.

Information Collected Automatically

When you visit our Website, the following technical and usage data may be collected through cookies and similar technologies:

  • Browser type and version, operating system, and device information.
  • Internet Protocol (IP) address.
  • Pages visited, time spent on pages, click-through patterns, and navigation paths.
  • Referring website or source that directed you to our Website.

This information is collected through Google Analytics (statistics cookies) and is used solely for website performance analysis and improvement.

Information From Third-Party Sources

We may receive limited personal information from third parties, including analytics providers and advertising platforms, to the extent permitted by applicable privacy legislation. We do not purchase personal information from data brokers.

What We Do Not Collect

IBC Financial, as the educational and marketing division of CWCC, does not directly collect detailed financial records, investment account numbers, Social Insurance Numbers, credit card numbers, or banking credentials through the Website. If you engage CWCC for advisory services, any additional information required for the financial advisory process will be collected separately under CWCC’s advisory engagement terms, subject to this same Privacy Policy and additional regulatory requirements specific to financial services.


How Do We Use Your Personal Information?

We use the personal information we collect for the following purposes, each of which is identified at or before the point of collection as required by PIPEDA Principle 2 (Identifying Purposes) and Law 25 section 8:

To respond to your enquiries and requests. When you submit a booking form or contact us, we use your contact information to respond to your enquiry, schedule meetings, and provide the information you requested about CWCC’s financial planning services.

To deliver and improve our services. We use technical and usage data to understand how visitors interact with our Website, to identify and fix technical issues, and to improve the user experience. This analysis is performed using aggregated and anonymised data wherever possible.

To send you communications you have consented to receive. If you have given express consent under CASL, we may send you electronic communications about CWCC’s financial planning services, educational content, events, and updates. You may withdraw this consent at any time (see “Your Right to Withdraw Consent” below).

To comply with legal and regulatory obligations. We may use and disclose personal information as required by law, including in response to lawful requests from regulatory authorities such as the Autorité des marchés financiers (AMF), the Financial Services Regulatory Authority of Ontario (FSRA), or other provincial regulators, law enforcement, or courts of competent jurisdiction.

To protect our legal rights. We may use personal information to enforce our terms, to protect against fraud or misuse of our Website, and to establish, exercise, or defend legal claims.


What Is the Legal Basis for Collecting Your Personal Information?

Under PIPEDA, the collection, use, and disclosure of personal information requires the knowledge and consent of the individual, except in limited circumstances specified by law. Under Law 25, consent must be manifest, free, informed, and given for specific purposes. Consent requested must not exceed what is necessary for the stated purpose.

We rely on the following lawful bases for processing your personal information:

Express consent. When you submit a form on our Website, you are providing express consent for us to collect and use the information you have provided for the stated purposes. For commercial electronic messages, we obtain separate, unbundled express consent as required by CASL section 6(1).

Implied consent. In limited circumstances permitted by PIPEDA, we may rely on implied consent — for example, when you voluntarily provide your business card at a professional event, or when there is an existing business relationship as defined under CASL section 10(9).

Legal obligation. We may collect, use, or disclose personal information without consent where required by law, such as in response to a court order, subpoena, or regulatory demand.


How Do We Protect Your Personal Information?

CWCC implements appropriate technical and organisational safeguards to protect your personal information against loss, theft, unauthorised access, disclosure, copying, use, or modification, as required by PIPEDA Principle 7 (Safeguards) and Law 25 section 10. These measures include:

  • Encryption of data in transit using TLS (Transport Layer Security) across the entire Website.
  • Restricted access to personal information on a need-to-know basis among authorised personnel.
  • Regular review of security practices and procedures.
  • Employee and contractor training on privacy obligations and data handling.
  • Secure disposal of personal information that is no longer needed for the purposes for which it was collected.

No method of electronic transmission or storage is completely secure. While we use commercially reasonable measures to protect your personal information, we cannot guarantee absolute security. If you have reason to believe that your interaction with us is no longer secure, please contact the Privacy Officer immediately.


How Long Do We Retain Your Personal Information?

Under PIPEDA Principle 5 (Limiting Use, Disclosure, and Retention) and Law 25 section 12, we retain personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law or regulatory obligations.

Our general retention periods are:

  • Enquiry and booking form submissions: Retained for 24 months after your last interaction with us, unless you engage CWCC for advisory services, in which case retention is governed by financial services record-keeping requirements.
  • Email communication consent records: Retained for 36 months after the last commercial electronic message was sent, to demonstrate CASL compliance.
  • Website analytics data: Aggregated analytics data is retained indefinitely. Individual-level data (IP addresses, device identifiers) is retained for up to 26 months through Google Analytics, after which it is automatically deleted by Google.
  • Regulatory and legal records: Retained for the period required by the applicable regulatory body (AMF, FSRA, or other provincial regulators) and applicable limitation periods under Quebec and federal law.

When personal information is no longer required, it is securely destroyed or anonymised in accordance with our data retention schedule.


When Do We Share or Disclose Your Personal Information?

IBC Financial does not sell, rent, or trade your personal information to third parties for their marketing or commercial purposes. We may share your personal information only in the following circumstances:

With Canadian Wealth Creation Centre Inc. IBC Financial is the educational and marketing division of CWCC. If you express interest in CWCC’s financial planning services, your contact information and enquiry details will be shared with CWCC’s advisory team so they can follow up with you. This is a transfer within the same legal entity, not a disclosure to a third party.

With service providers who assist our operations. We engage trusted third-party service providers to support Website hosting, analytics, email delivery, and customer relationship management. These providers are bound by contractual obligations to protect personal information and to use it solely for the purposes we have specified. Our current third-party service providers include:

  • Google Analytics (Alphabet Inc., United States) — website traffic analysis.
  • Google reCAPTCHA (Alphabet Inc., United States) — form security and spam prevention.
  • Google Maps (Alphabet Inc., United States) — location display and directions on our Website.
  • WP Consent (WordPress ecosystem) — cookie consent management.
  • Website hosting provider — server infrastructure for IBCFinancial.com.

When required by law. We may disclose personal information without your consent where required or permitted by law, including in response to a court order, subpoena, regulatory investigation, or request from a law enforcement agency. Under Law 25 section 18.1, we may also disclose personal information without consent where necessary to prevent an act of violence or a threat to a person’s life.

In connection with a business transaction. If CWCC undergoes a merger, acquisition, reorganisation, or sale of assets, your personal information may be transferred as part of that transaction. In such a case, the acquiring entity will be bound by the terms of this Privacy Policy until a new policy is communicated to you.


Cross-Border Data Transfers

CWCC is a Canadian corporation based in Quebec. Our Website is hosted in Canada. However, certain third-party service providers process data in the United States, including Google LLC (Google Analytics, Google reCAPTCHA, and Google Maps).

Under Law 25 section 17, before personal information is communicated outside Quebec, we must conduct a privacy impact assessment and be satisfied that the information will receive protection equivalent to that provided under Quebec law. We have assessed our third-party providers and determined that adequate contractual and technical safeguards are in place to protect your personal information during cross-border transfers.

Under PIPEDA Principle 3 (Consent), we are informing you that certain personal information — specifically, technical and usage data collected through Google Analytics, security verification data through Google reCAPTCHA, and location data through Google Maps — may be processed on servers located in the United States. By using our Website and accepting non-essential cookies through our cookie consent banner, you are consenting to this transfer. You may withdraw this consent at any time by adjusting your cookie preferences (see “Cookies and Tracking Technologies” below).


Cookies and Tracking Technologies

Our Website uses cookies and similar tracking technologies. Cookies are small text files stored on your device that help us understand how you interact with our Website.

We use three categories of cookies:

Essential cookies are necessary for the basic functioning of the Website, including the cookie consent mechanism itself. These cookies cannot be disabled without impairing core Website functionality. No consent is required for essential cookies.

Statistics cookies (Google Analytics) collect anonymised data about how visitors use the Website, including pages visited, time spent on pages, and traffic sources. These cookies are deployed only after you provide explicit consent through our cookie consent banner. We have configured Google Analytics to anonymise IP addresses.

Marketing cookies (Google Maps) enable the display of embedded maps and location-based functionality on our Website. These cookies are deployed only after you provide explicit consent through our cookie consent banner.

Under Law 25, non-essential cookies require explicit, informed, opt-in consent before they are deployed. Our cookie consent banner implements this requirement. You may manage your cookie preferences at any time by clicking “Update Cookie Preferences” in the Website footer or by adjusting your browser settings. If you disable non-essential cookies, certain features of the Website (analytics-driven improvements and embedded maps) may be affected, but core Website functionality will remain available.


Your Privacy Rights

You have the following rights regarding your personal information. These rights are protected under PIPEDA and, for Quebec residents, under Law 25.

Right of Access

You have the right to request access to the personal information we hold about you. Under PIPEDA Principle 9 (Individual Access) and Law 25 section 27, you may request confirmation of whether we hold personal information about you, and if so, to receive a copy of that information in a comprehensible format. We will respond to your access request within 30 days of receipt, as required by law.

Right to Rectification

Under PIPEDA Principle 6 (Accuracy) and Law 25 section 28, you have the right to request the correction of any personal information that is inaccurate, incomplete, or equivocal, or the deletion of information that is no longer necessary for the purposes for which it was collected. If we have disclosed the information to third parties, we will notify those third parties of the correction.

Right to Withdraw Consent

You may withdraw your consent to the collection, use, or disclosure of your personal information at any time, subject to legal or contractual restrictions and reasonable notice. Under CASL, you may unsubscribe from commercial electronic messages at any time by using the unsubscribe mechanism provided in every message, or by contacting the Privacy Officer. Withdrawal of consent will not affect the lawfulness of processing carried out prior to the withdrawal.

Right to Deletion (Law 25 — Quebec Residents)

If you are a Quebec resident, Law 25 section 28.1 provides you with the right to request that we cease disseminating your personal information and, where the information was collected in contravention of Law 25, to request its de-indexing. We will respond to such requests within 30 days.

Right to Data Portability (Law 25 — Quebec Residents)

Under Law 25 section 27, if you are a Quebec resident, you may request that we provide you with the personal information we have collected from you in a structured, commonly used technological format, or that we communicate it to another person or organisation designated by you, if technically feasible.

Right to Be Informed of Automated Decision-Making

CWCC does not currently use automated decision-making processes or profiling that produce legal effects or similarly significant effects concerning you. If this changes in the future, we will update this policy and inform affected individuals as required by Law 25 section 12.1.

How to Exercise Your Rights

To exercise any of the rights described above, contact the Privacy Officer:

Mona Haddad
Compliance Officer
Canadian Wealth Creation Centre Inc. d/b/a IBC Financial
42 Rue de Braine, Blainville, QC J7B 1Z2
Phone: 514-875-9444
Email: privacy@ibcfinancial.com

You may be asked to verify your identity before we process your request. We will respond within 30 days. If we are unable to comply with your request, we will provide written reasons.


Privacy Incident and Breach Notification

Under PIPEDA’s breach notification requirements (Part 1, Division 1.1) and Law 25 section 3.5, CWCC is obligated to notify affected individuals and the appropriate authorities in the event of a confidentiality incident involving personal information that presents a risk of serious injury.

In the event of such an incident, we will:

  • Notify the Commission d’accès à l’information du Québec (CAI) as required by Law 25.
  • Notify the Office of the Privacy Commissioner of Canada (OPC) as required by PIPEDA.
  • Notify affected individuals promptly, in writing, describing the nature of the incident, the personal information involved, the measures we have taken or intend to take, and how affected individuals can reduce or mitigate potential harm.
  • Maintain a register of confidentiality incidents as required by Law 25 section 3.8.

Canada’s Anti-Spam Legislation (CASL) Compliance

CWCC complies with Canada’s Anti-Spam Legislation (CASL, S.C. 2010, c. 23). We will only send you commercial electronic messages if you have provided express opt-in consent, or if we have implied consent through an existing business relationship as defined by CASL.

Every commercial electronic message we send will include:

  • The name and contact information of Canadian Wealth Creation Centre Inc. d/b/a IBC Financial.
  • Our mailing address: 42 Rue de Braine, Blainville, QC J7B 1Z2.
  • A clear and prominently placed unsubscribe mechanism that is functional for at least 60 days after the message is sent.

We will process unsubscribe requests within 10 business days, as required by CASL section 11(1).


Children’s Privacy

Our Website and services are designed for adults. We do not knowingly collect personal information from individuals under the age of majority in their province or territory of residence (18 in most provinces; 19 in British Columbia, New Brunswick, Newfoundland and Labrador, Northwest Territories, Nova Scotia, Nunavut, and Yukon). If we learn that we have collected personal information from a minor without appropriate parental or guardian consent, we will promptly delete that information. If you believe we may have collected information from a minor, please contact the Privacy Officer.


Third-Party Links

Our Website may contain links to third-party websites, including financial institutions, regulatory bodies, educational resources, and social media platforms. These third-party websites have their own privacy policies and practices, which are not governed by this Privacy Policy. We encourage you to review the privacy policy of any website you visit. CWCC is not responsible for the privacy practices or content of third-party websites.


Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or regulatory guidance. When we make changes, we will update the “Last Updated” date at the top of this page. For material changes that significantly affect how we handle your personal information, we will provide prominent notice on our Website.

We encourage you to review this Privacy Policy periodically. Your continued use of the Website after any changes to this policy constitutes your acceptance of the updated terms.


How to File a Privacy Complaint

If you have concerns about how we handle your personal information, we encourage you to contact our Privacy Officer first so we can address your concerns directly.

If you are not satisfied with our response, you have the right to file a complaint with the following authorities:

For Quebec residents:
Commission d’accès à l’information du Québec (CAI)
https://www.cai.gouv.qc.ca/
Phone: 1-888-528-7741

For all Canadian residents:
Office of the Privacy Commissioner of Canada (OPC)
https://www.priv.gc.ca/
Phone: 1-800-282-1376

For CASL complaints:
Canadian Radio-television and Telecommunications Commission (CRTC)
https://www.crtc.gc.ca/


Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the Province of Quebec and the federal laws of Canada applicable therein, including PIPEDA, Law 25, and CASL. Any dispute arising out of or related to this Privacy Policy shall be subject to the exclusive jurisdiction of the courts of the Province of Quebec.


Severability

If any provision of this Privacy Policy is found to be invalid or unenforceable by a court of competent jurisdiction, the remaining provisions shall continue in full force and effect.


Contact Us

For any questions, concerns, or requests regarding this Privacy Policy, our privacy practices, or to exercise your privacy rights:

Mona Haddad
Compliance Officer and Designated Privacy Officer
Canadian Wealth Creation Centre Inc. d/b/a IBC Financial
42 Rue de Braine, Blainville, QC J7B 1Z2
Phone: 514-875-9444
Email: privacy@ibcfinancial.com


© 2026 Canadian Wealth Creation Centre Inc. d/b/a IBC Financial. All rights reserved.

This Privacy Policy is a legal document. It does not constitute legal advice. If you have questions about your rights under Canadian privacy legislation, consult a qualified legal professional.

Content last verified: April 2026.