Canada Consulting Hub Inc., operating as CansultHub ("CansultHub," "we," "us," or "our"), respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you visit www.cansulthub.com (the "Site"), submit a form, book a consultation, or engage our services. This Policy is intended to comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia's Personal Information Protection Act (PIPA).

Canada Consulting Hub Inc., Suite 1300, 1500 West Georgia St, Vancouver, BC. consultary@cansulthub.com | +1 778-373-4931.

Privacy Officer: A designated member of our leadership team holds the Privacy Officer role and can be reached at the contact details above, marked "Attention: Privacy Officer." We are naming this by role rather than by individual, so this Policy doesn't need to be republished each time staffing changes; if you would prefer a named individual listed here, let us know, and we'll update this section.

• Contact information you provide through the Contact Us form or Compass evaluation form: name, email address, phone number, company name, and the content of your inquiry
• Business and engagement information relevant to the service package you select through the Compass evaluation flow (e.g., business stage, industry, target markets, immigration or recruitment goals, as applicable to the package)
• Payment information processed through our third-party payment processor, Stripe, for consultation fees, advisory packs, retainers, or program tuition. CansultHub does not directly store full payment card details
• Communications, including emails, call notes, and consultation records created in the course of an engagement

• To respond to your inquiry and route you to the appropriate service package
• To provide, administer, and invoice for the services you engage
• To communicate with you about your engagement, including scheduling and follow-up
• To comply with legal, regulatory, and reporting obligations applicable to specific services (for example, recordkeeping requirements tied to Job Finder's recruitment licensing or Learning Pod's private training registration)
• To improve the Site and our services, with your information used only in aggregated or de-identified form for this purpose unless you consent otherwise

Advisory Panel referrals. If you are referred to an independent professional through Advisory Panel (LexHub, ProfNetwork, or ImpactOrg), we will share only the information necessary to make that introduction, with your prior consent. Once introduced, your relationship with that professional and their handling of your information is governed by their own privacy practices, not this Policy.

Service providers. We share information with third-party service providers who support our operations, such as Stripe (payment processing) and our client-relationship-management and email communication platform(s). These providers are contractually restricted from using your information for any purpose other than providing services to us.

Affiliated entities. If a service you've engaged (such as an ImmiAgent-related inquiry) is better handled by our affiliated platform, we will share your information with them only with your consent.

Legal and regulatory disclosure. We may disclose personal information where required by law, court order, or to comply with a regulatory body's request, including in connection with JobFinder's recruitment licensing obligations or applicable sanctions and anti-money-laundering requirements.

We do not sell personal information.

Some of our third-party service providers, including Stripe, may process or store personal information outside Canada, including in the United States. Where this occurs, your information may become subject to the laws of that jurisdiction, including lawful access by government authorities. We take steps to ensure any such provider offers a comparable level of protection to what Canadian privacy law requires.

We retain personal information only as long as necessary to fulfill the purposes described in this Policy, plus any period required by law:

• General inquiries and Compass evaluation responses that do not lead to an engagement: retained for 12 months from your last contact with us, then securely deleted or anonymized
• Client engagement records, including contracts, invoices, and related correspondence: retained for 7 years from the end of the engagement, to meet Canadian tax and financial recordkeeping requirements
• Payment records: retained by our payment processor, Stripe, in accordance with its own retention practices and applicable financial regulations

Subject to certain exceptions under PIPEDA and PIPA, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Withdraw consent to our collection, use, or disclosure of your information, subject to legal or contractual restrictions and the effect withdrawal may have on our ability to provide services to you
• Ask questions about our privacy practices or file a complaint

We protect personal information using a combination of technical and administrative safeguards, including:

• Encryption of data in transit (TLS) across the Site and our client-facing systems
• Role-based access controls that limit staff access to personal information on a need-to-know basis
• Secure storage of physical and digital records with reputable, contractually bound service providers
• Periodic review of access permissions as staff roles change

The Site uses cookies and similar technologies in two categories: strictly necessary cookies required for the Site to function, and analytics cookies that help us understand how visitors use the Site so we can improve it. We do not use cookies for third-party advertising. You can control or disable cookies through your browser settings; disabling non-essential cookies will not affect your ability to use the Site, but disabling strictly necessary cookies may affect some functionality.

Our services are directed at businesses, founders, and working professionals. We do not knowingly collect personal information from individuals under the age of 18, except where a program (such as Startup Accelerator's YoungFounders Incubator, open to ages 15–19) is specifically designed for minors and is accompanied by verified parent or guardian consent as part of that program's enrolment process. If you believe a minor has provided us with personal information outside of that consented process, please contact us so we can delete it.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will post the updated Policy on the Site with a revised "Last updated" date.

If you have questions about this Policy or wish to make a complaint, contact us first at:

• consultary@cansulthub.com
• +1 778-373-4931
• Suite 1300, 1500 West Georgia St, Vancouver, BC

If you are not satisfied with our response, you may contact the Office of the Information and Privacy Commissioner for British Columbia (oipc.bc.ca) or the Office of the Privacy Commissioner of Canada (priv.gc.ca).