Privacy Policy

Eighth Equity Partners (“Eighth Equity,” “we,” “us,” or “our”) is an individually-operated investment initiative based in British Columbia, Canada. This Privacy Policy explains what personal information we collect through eighthequity.ca (the “Site”), how we use it, who we share it with, and the rights you have over it.

We comply with the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and the British Columbia Personal Information Protection Act (BC PIPA). Where applicable, we also extend the rights and disclosures required by the European Union General Data Protection Regulation (GDPR), the California Online Privacy Protection Act (CalOPPA), and the California Consumer Privacy Act / California Privacy Rights Act (CCPA/CPRA).

1. Information we collect

a. Information you provide

When you submit our contact form, we collect your name, email address, and the message you choose to send.

b. Information collected automatically

When you visit the Site, our hosting and email infrastructure automatically log limited technical information necessary to deliver and secure the Site, including:

• IP address and approximate (city/country-level) location;
• Browser type, operating system, device type, and language;
• Referring URL and pages viewed;
• Date and time of the visit;
• Page-load performance metrics (e.g., Core Web Vitals) collected anonymously by our analytics provider;
• Email metadata (sender, recipient, timestamp, delivery status) for messages sent through the contact form.

We do not use cookies of our own to track you across sessions or across other websites. Our analytics provider operates on a cookieless basis. A short-lived bot-protection cookie may be set by our third-party challenge provider when you submit the contact form; see Section 4.

2. How we use your information

We use personal information only to:

• respond to your inquiry and follow up where appropriate;
• operate, secure, and improve the Site;
• measure aggregate traffic and performance through privacy-respecting analytics; and
• comply with our legal and regulatory obligations and enforce our Terms of Service.

We do not sell, rent, or otherwise share your personal information for advertising or marketing purposes. We do not send newsletters and we do not place advertising on the Site.

3. Legal bases for processing (GDPR / UK GDPR)

For visitors in the European Economic Area, the United Kingdom, or Switzerland, we rely on the following legal bases under Article 6 of the GDPR:

• Consent — when you voluntarily submit the contact form;
• Legitimate interests — to keep the Site secure, to understand aggregate usage, and to respond to inbound business inquiries;
• Legal obligation — where processing is required by applicable law.

We do not actively solicit residents of the EU, UK, or Switzerland and we do not knowingly target our services at those regions.

4. Sub-processors and service providers

We rely on the following third-party service providers to operate the Site. Each receives only the minimum data needed to perform its function and is contractually bound to protect that data.

• Vercel Inc. — website hosting, web analytics (cookieless), and performance metrics. Data may be processed in the United States.
• Resend (Resend.com, Inc.) — transactional email delivery for messages submitted through the contact form. Data may be processed in the United States.
• Cloudflare, Inc. — bot-protection challenge on the contact form. Cloudflare may briefly process IP address, browser metadata, and a short-lived challenge cookie to verify you are human.
• Google LLC — Google Workspace receives email addressed to our partner@eighthequity.ca inbox.

5. International transfers

Some of the service providers above process personal information outside of Canada, including in the United States. Where we transfer personal information internationally, we rely on the recipient's contractual commitments, the European Commission's Standard Contractual Clauses (where applicable), and the safeguards required by PIPEDA and BC PIPA.

6. How long we keep your information

We retain contact-form submissions and related email correspondence until the inquiry is resolved and for twelve (12) months thereafter, after which we delete or anonymize the records, unless a longer period is required by law. Server logs and analytics data are retained for the period set by our service providers and are typically deleted or aggregated within thirteen (13) months.

7. How we protect your information

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information against loss, theft, and unauthorized access, disclosure, copying, use, or modification. These include encryption in transit (HTTPS), access controls, and the use of reputable infrastructure providers. No method of transmission over the Internet is fully secure, and we cannot guarantee absolute security.

8. Your privacy rights

Depending on where you live, you have some or all of the following rights with respect to your personal information:

• Access — request a copy of the personal information we hold about you;
• Correction — ask us to correct information that is inaccurate or incomplete;
• Deletion — ask us to delete personal information we hold about you, subject to limited exceptions;
• Withdraw consent — withdraw your consent to our processing at any time;
• Portability (GDPR / CPRA) — receive your data in a structured, commonly used, machine-readable format;
• Restrict / object (GDPR) — restrict or object to certain processing;
• Non-discrimination (CCPA/CPRA) — we will not discriminate against you for exercising any of these rights;
• Lodge a complaint — with the Office of the Privacy Commissioner of Canada, the Office of the Information and Privacy Commissioner for British Columbia, your local EU/UK supervisory authority, or the California Privacy Protection Agency, as applicable.

To exercise any of these rights, contact our Privacy Officer at partner@eighthequity.ca. We will respond within thirty (30) days. We may need to verify your identity before fulfilling your request.

9. “Do Not Track” signals (CalOPPA)

Some browsers transmit a “Do Not Track” (DNT) signal. Because there is no industry standard for how to interpret DNT, the Site does not respond to DNT signals. However, we do not engage in cross-site behavioural tracking, and we do not allow third parties to do so on the Site.

10. Children

The Site is intended for an adult professional audience. We do not knowingly collect personal information from individuals under the age of sixteen (16). If you believe a child has submitted personal information through the Site, please contact us and we will delete it.

11. Cookies and tracking technologies

We do not set first-party tracking cookies. Our analytics provider uses anonymous, cookieless measurement. The bot-protection challenge on our contact form may set a short-lived, strictly-necessary cookie (typically valid for a few minutes) solely to verify that the submitter is human. We do not use cookies for advertising, retargeting, or cross-site profiling.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by a revised “Effective date” and will take effect as soon as it is posted on the Site. Where the changes are material, we will take reasonable steps to notify you, such as by posting a prominent notice on the Site or by replying to you directly if you have a current open inquiry.

13. How to contact us

Questions, requests, or complaints about this Privacy Policy or our handling of personal information can be directed to:

Privacy Officer, Eighth Equity Partners
Email: partner@eighthequity.ca
Location: British Columbia, Canada