Privacy Policy

EPG ("Company," "we," "us," or "our") is committed to protecting the privacy of our customers and website visitors. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information in connection with our services.

We operate in compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation in Canada.

Personal Information: We collect personal information that you provide directly to us, including:

• Identification Information: Name, date of birth, government-issued ID numbers, photographs of identification documents
• Contact Information: Email address, phone number, mailing address
• Business Information: Company name, business registration number, industry, job title
• Financial Information: Bank account details, transaction history, source of funds information
• Technical Information: IP address, device information, browser type, cookies

Information from Third Parties: We may receive information about you from:

• Credit reporting agencies
• Sanctions and PEP screening databases
• Government registries and databases
• Referral partners and affiliates

We use your personal information for the following purposes:

• Service Delivery: To provide, maintain, and improve our money services, including processing transactions and managing your account
• Identity Verification: To verify your identity and comply with KYC/KYB requirements
• Regulatory Compliance: To comply with AML/ATF regulations, sanctions requirements, and reporting obligations to FINTRAC
• Risk Management: To assess transaction risk, detect fraud, and prevent financial crime
• Communication: To respond to your inquiries, provide customer support, and send service-related notifications
• Marketing: With your consent, to send promotional communications about our services
• Legal Obligations: To comply with legal requirements, respond to lawful requests, and protect our legal rights

We process your personal information based on:

• Consent: Where you have provided consent for specific purposes such as marketing communications
• Contract: Where processing is necessary to provide our services under our service agreement with you
• Legal Obligation: Where we are required by law to collect and process information (e.g., AML/ATF compliance)
• Legitimate Interest: Where we have a legitimate business interest that does not override your privacy rights

We may share your personal information with:

• Service Providers: Third parties that perform services on our behalf, such as payment processors, identity verification services, and cloud hosting providers
• Financial Institutions: Banks and financial institutions to facilitate transactions
• Regulatory Authorities: FINTRAC and other regulatory bodies as required by law
• Law Enforcement: When required by law or to protect against fraud or illegal activity
• Business Transfers: In connection with a merger, acquisition, or sale of assets

We do not sell your personal information to third parties for marketing purposes.

Your personal information may be transferred to and processed in countries other than Canada. When we transfer information internationally, we implement appropriate safeguards, including:

• Standard contractual clauses approved by regulatory authorities
• Data processing agreements with service providers
• Compliance with applicable data protection laws

We retain your personal information for as long as necessary:

• To provide our services to you
• To comply with regulatory requirements (e.g., FINTRAC requires retention of certain records for a minimum of 5 years)
• To resolve disputes and enforce our agreements
• As otherwise permitted or required by law

After the retention period, we securely destroy or anonymize your personal information in accordance with our data destruction policy.

Under applicable privacy laws, you have the right to:

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Withdrawal of Consent: Withdraw consent where processing is based on consent
• Complaint: File a complaint with the Office of the Privacy Commissioner of Canada

Limitations: Certain rights may be limited where information is collected for regulatory compliance purposes (e.g., AML/KYC requirements).

To exercise your rights, contact us at privacy@epmsb.com. We will respond to requests within 30 days.

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit and at rest
• Access controls and authentication mechanisms
• Regular security assessments and audits
• Employee training on data protection
• Incident response procedures

We use cookies and similar technologies to operate our website and improve user experience. For more information, please see our Cookie Policy.

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website with a new "Last updated" date. We encourage you to review this policy periodically.

For questions about this Privacy Policy or to exercise your rights, please contact:

EPG Privacy Officer

Email: privacy@epmsb.com