Capital Toolkit is operated by YBAWS Inc., a Canadian corporation. When you use our marketing site or application platform, PIPEDA governs how we collect, use, and disclose your personal information. This page summarizes our practices. The full privacy policy is at /privacy; this page focuses on the PIPEDA-specific principles.
The ten PIPEDA principles, in plain language
1. Accountability
YBAWS Inc. is accountable for the personal information under its control. Our privacy officer is reachable at privacy@capitaltoolkit.com.
2. Identifying purposes
We collect personal information for specific, identified purposes: delivering the education videos, evaluating your CSBFP eligibility, preparing and submitting your application, communicating with you about your file, and producing fully anonymized aggregate research and reporting about the Canadian small-business financing landscape (you may opt out of inclusion in aggregate research at any time). We tell you the purpose at or before the point of collection.
3. Consent
Your use of Capital Toolkit is voluntary. We request your consent before collecting, using, or disclosing your personal information, except where PIPEDA permits otherwise (for example, to comply with a lawful subpoena).
4. Limiting collection
We collect only the information needed to deliver the service you asked for. We do not gather personal information for vague or open-ended marketing purposes.
5. Limiting use, disclosure, and retention
Your information is used only for the purposes identified. We share it with lenders, where appropriate, to process your loan application, not with unrelated third parties. We retain records only as long as needed to fulfill the stated purpose and to meet legal and regulatory obligations.
For the aggregate-research purpose identified above, we apply anonymization before any file enters the dataset (personally identifying information is stripped; what remains is shape data like loan use, dollar amount range, sector, and stage timing) and apply minimum sample-size thresholds before any category is published. No individual borrower’s data appears in published research. Borrowers may opt out of inclusion at any time.
6. Accuracy
We keep your information as accurate, complete, and up-to-date as is necessary for the purposes for which it is used. You can update your information at any time by contacting us.
7. Safeguards
We protect personal information with security safeguards appropriate to its sensitivity. This includes encryption in transit and at rest, least-privilege access, and periodic review of access logs. Supporting documents uploaded to the application platform are handled through secure storage with auditable access.
8. Openness
Our policies and practices relating to the management of personal information are publicly available on this site. If anything here is unclear, write to privacy@capitaltoolkit.com.
9. Individual access
You have the right to know what personal information we hold about you, how we use it, and to whom it has been disclosed. We will respond to access requests within 30 days, as required by PIPEDA.
10. Challenging compliance
If you have a concern about how your personal information has been handled, contact our privacy officer. If your concern is not resolved to your satisfaction, you have the right to contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.
Questions
Write to privacy@capitaltoolkit.com for any privacy-related question. For general contact, see the contact page.