Privacy Policy
This policy explains what personal information Bright Portmantage collects through bright-portmantage.com, why we collect it, who receives it, how long we keep it and the rights you have over it. It is written to meet the requirements of Canada's federal private-sector privacy law, PIPEDA, and of the provinces that apply equivalent rules.
Definitions
In this policy, "we", "us" and "Bright Portmantage" mean the operator of this website; "you" means a visitor or registered client; "personal information" means information about an identifiable individual; "processing" means any operation performed on that information, such as collection, storage, use or disclosure. "Platform" means the account area, tools and services described on this site.
Personal data we collect
When you use the registration or contact forms we collect: your first and last name, email address, phone number, and the content of your message. When you become a client, verification adds your date of birth, residential address, government-issued identity document, and, where a check requires it, a selfie or liveness capture. Transaction records include deposit and withdrawal details, trading activity and account settings.
Usage data
As you browse the site, standard technical information is recorded: pages visited, approximate region derived from your IP address, browser and device type, referring page and timestamps. This data exists in server logs and aggregated statistics. It is used to keep the site working, to detect abuse, and to understand which pages help visitors, and it is not used to build advertising profiles of identified individuals.
Cookies
The site uses strictly necessary cookies for session handling, security and remembering your preferences, and functional cookies for features like the market ticker. Analytics and marketing cookies, if enabled, are loaded only with your consent through the banner presented on first visit, and your choice can be changed at any time from the same control. Declining optional cookies never blocks access to the site's content.
Operator and processors
Bright Portmantage, reachable at [email protected] and at Toronto, Ontario, Canada, is responsible for the personal information processed through this site. Third parties that process information on our behalf, identity-verification providers, hosting and IT services, email delivery and analytics tools, act as processors under written agreements that restrict them to our instructions and require equivalent protection standards.
Collection and use of information
We use your information to: respond to enquiries and support requests; create, verify and administer your account; provide the trading services described on the site, including strategy operation and reporting; process deposits and withdrawals; meet legal obligations, including KYC/AML duties, record-keeping and disclosures to authorities; protect the platform and its users against fraud and abuse; maintain service security and investigate incidents; and, with your consent, send marketing you can unsubscribe from.
Legal bases for processing
Under PIPEDA and equivalent provincial laws, we process personal information: for the performance of your client relationship, account opening, verification, service delivery and payments; for compliance with legal obligations, identity checks, monitoring and required reporting; for legitimate operational purposes, site security, fraud prevention and service improvement; and on the basis of consent, for optional cookies and marketing messages. Where consent is the basis, you may withdraw it at any time; withdrawal does not undo processing that already happened lawfully.
Data storage and retention
Personal information is stored on servers in Canada or in jurisdictions providing comparable protection, under the safeguards described in the Security section below. Retention follows purpose: enquiry messages are kept while the conversation is active and for a short period after; account and verification records are kept for the period Canadian law requires of a financial services operation; transaction records follow the statutory financial-record period; server logs cycle within months; and marketing consent records are kept until withdrawn plus the period needed to prove the withdrawal. When a retention period ends, information is securely deleted or anonymized.
Data transfer and disclosure
Your information is received by: the licensed counterparty that executes your trades, identified during onboarding; affiliated companies within our group involved in providing the service; IT, hosting, identity-verification, payment and communication providers acting as processors; regulators, courts and public authorities where disclosure is required by law; and professional advisers under confidentiality. We do not sell personal information, and we do not share it with advertisers as identifiable profiles.
Security
Transport is encrypted with TLS; stored personal data, including verification documents, is encrypted at rest on segregated systems; access follows role-based permissions with logging; and keys used for exchange connections are scoped to the minimum permissions required. Technical and organizational measures are reviewed as the platform changes. If a breach affects your personal information in a way the law requires us to notify, we will notify you and the relevant authorities without undue delay.
Your rights
You may request: access to the personal information we hold about you; correction of inaccurate or incomplete information; deletion where retention is not legally required; restriction of processing while a dispute over accuracy is resolved; withdrawal of consent for optional processing, cookies and marketing; and an accounting of disclosures where applicable. Requests go to [email protected]; we verify your identity and answer within thirty days, and if we cannot fully act on a request, we explain which legal obligation prevents it.
Service providers
The main categories are hosting and cloud infrastructure, identity-verification and fraud-screening services, email delivery, payment processing, in-product analytics and customer-support tooling. Each receives only the information needed for its function, is contractually bound to process it solely for that function, and is reviewed for safeguards appropriate to the data involved.
Analytics
We use privacy-respecting analytics to count visits, understand page flows and detect faults. Aggregated analytics statistics cannot reasonably identify you. Where an analytics provider sets cookies, it does so only under the consent described in the Cookies section, and the measurement configuration avoids collecting full IP addresses where the tool allows.
Advertising and retargeting
If we run advertising campaigns, measurement partners may set cookies to evaluate campaign performance and, with your consent, to limit how often you see the same ad. You can control optional advertising cookies from the consent banner, and most browsers and devices offer their own limit-tracking settings. We do not share your name, email or financial data with advertising partners.
Links to third-party sites
This site links to third-party pages, such as payment providers or educational resources. Those sites have their own privacy practices, which may differ from ours, and this policy does not cover them. We encourage you to read the privacy notice of any site where you enter personal information.
Children's privacy
The platform is intended for adults. Accounts are offered only to individuals who have reached the age of majority in their province of residence, and we do not knowingly collect personal information from minors. If you believe a minor has provided information through this site, contact us and we will delete it promptly.
Changes to this policy
We may update this policy as the service or the law changes. Updates take effect when the revised version is published on this page, with the more significant changes additionally announced on the site or by email to registered clients. The date of the current version always appears in the page footer of this document's section above. Continuing to use the site after publication means the updated policy applies to that use.
Contact us
Privacy questions, requests and complaints: [email protected], or by post at Toronto, Ontario, Canada, Monday to Friday, 9:00–17:30 ET (excluding public holidays). If you believe we have not resolved a privacy concern fairly, you may escalate it through our complaints procedure, and Canadian clients retain the right to raise privacy matters with the Office of the Privacy Commissioner of Canada.