TradeZero USA Inc.
Privacy Policy
For Residents of Canada

Effective: June 2024

Introduction

Your privacy is important to TradeZero USA Inc. (hereinafter “TradeZero”, “we”, or “us”). We want users (“you” or “yours”) to understand how we may collect, use, share, and keep personal information about you and the choices that are available to you. This Privacy Policy sets forth the principal types of personal information we and our affiliates may collect about you, the purposes for which we use the personal information, the circumstances in which we may share the personal information, and other important terms that apply when you utilize our “Services”, which are principally our websites (“Sites”) and trading applications (“Applications”).

By using our Services, you agree to this Privacy Policy, as it may be amended from time to time (see “Updates to this Privacy Policy” below).

Definition of “Personal Information”

In this Privacy Policy, the term “personal information” refers to any information (in any format) that relates to an individual and that directly or indirectly identifies the individual. Examples of personal information include your first and last name, address, phone number, email and date of birth. Personal information will not, however, include business contact information, such as your name, title and functions, as well as the address, email address and telephone number of your place of work.

Personal Information We Collect From You And How We Collect It

Below, we describe in more detail the categories of personal information we may collect from you.

• Personal Identifiers – Name, address, date of birth, gender, marital status, email address, telephone number, identifiers we assign to you including account numbers, usernames, account IDs, family information, professional and employment information, and publicly available photographs.
• Government Identifiers – Tax identification number, national identification number, social insurance number (SIN), other government issued identification number (i.e., driver’s license, passport, or alien registration), and photographs associated with any government issued identification document.
• LegallyProtectedClassificationCharacteristics – Age, citizenship, nationality, association with senior political officials and/or executives of government owned enterprises.
• Device and Online Identifiers and Related Information – Internet Protocol (“IP”) address, account username/log-in, device information, device type, browser type and version, time zone setting and location, operating system, and other technology on the devices you use to access our Services.
• Internet, Application, and Network Activity – Emails, activity on our Sites and Applications, including browsing history, search history, clickstream/online website tracking information and other data related to user activity.
• LocationData – IP geo-location from which you connect to the internet when using our Sites and Applications.
• FinancialInformation – Account number(s) and other information regarding accounts at other financial institutions, your authority over, beneficial interest in and other information about entities you are associated with; public company affiliations, bank and brokerage account balance information, source of wealth information, investment goals and experience, net worth and liquidity, income; tax classification, and other information regarding your financial circumstances.
• Entity Affiliations and Associations – Information regarding whether you or an immediate family member are affiliated or associated with certain financial institutions including but not limited to broker dealers, investment advisors, securities firms, securities exchanges, banks, insurance, or trust companies.
• AudioData – Recordings of telephone or similar calls.
• Activity Information – Information on how you utilize the Services.

We may obtain information about you during direct interactions with us. You may provide us with your personal information (including your SIN and other personal identifiers, financial information, government identifiers, and professional or employment data) by filling in forms such as our user application, by contacting us regarding our Services and Applications, or by responding to our marketing activities. We may also obtain information about you through our affiliates, vendors, and other third parties.

We may also obtain personal information about you from publicly available sources and from companies that we do business with, such as consumer and investigative reporting agencies we use to conduct background checks, verify your identity, creditworthiness, and Know Your Customer (“KYC”) requirements. Furthermore, your interactions with third parties linked to our Services, including, but not limited to, our affiliates, your interactions with our social media sites, advertising campaigns, and other information from publicly available sources, such as public websites, may also provide us with personal information. Please be aware that third-party websites and social media sites are governed by their own privacy policies separate from our own outside of our control. We invite you to familiarize yourself with these policies.

Why We Collect And How We Use Your Personal Information

We collect and use your personal information for several important reasons. We use your personal information to provide and optimize our Services for you, which includes, for example, communicating with you about your use of our Services, troubleshooting issues with our Services and resolving technical issues. We may also use this information to comply with certain anti-money laundering laws, regulations and KYC requirements. Furthermore, we use such information to help us safeguard your identity and to help us prevent financial crime.

Additionally, we may use your personal information, to the extent permitted by applicable law, to conduct marketing activities that help us obtain and assess data to improve and develop our Services and your use of the Services as well as with respect to the services of our affiliates.

Who We Share Your Personal Information With

Subject to the following provisions, we do not disclose any nonpublic personal information about you to anyone, except as permitted by law. Subject to the following provisions, TradeZero does not sell or lease any nonpublic personal information about you to anyone.

We Share Your Personal Information With The Following Third Parties:

• Your authorized agents and representatives or others to whom you instruct or authorize us to disclose your information and data;
• TradeZero’s lawyers, auditors, accountants, and others who provide advice to TradeZero;
• TradeZero’s U.S. and global affiliates who may help TradeZero provide Services to you;
• Non-affiliated companies that may assist us with providing services;
• Vendors who assist TradeZero and/or its affiliates with fulfilling its legal and regulatory obligations;
• Regulators and law enforcement authorities as required or permitted by law or regulation;
• Any person or entity to whom TradeZero and/or its affiliates is obliged by applicable law or regulation to disclose your data;
• Certain TradeZero employees on a need-to-know basis and as required by their job functions; and
• Any other party where we have first obtained your prior consent.

We May Provide Your Information To Third Parties, Including Marketing Companies, For The Purpose Of:

• Providing Services to you, subject to the terns of this Privacy Policy;
• Contacting you in relation of the Services, information or support requests for the Sites or Applications, among others;
• Sending you marketing communications that we believe may be of interest to you;
• Facilitating any promotional activity in coordination with such third party entity;
• Improving Site and Application performance and personalizing your experience with our Services, including presenting content, products, and services tailored to you;
• Performing analytics concerning your use of our Services including your responses to our emails and the pages and advertisements you view while using the Sites or Applications; and
• Any other purpose that we disclose at the time you provide, or when we collect, your information.

Other Situations In Which Sharing Personal Information May Occur, Include:

• We may transfer personal information to a third party in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of any or all of our or our affiliates’ business, assets, or equity, and during negotiations for the same.
• We may aggregate your personal information in a manner that no longer reveals your specific identity. We may use and disclose aggregated information for any purpose.
• We may also use and disclose, for any purpose, information that does not reveal your specific identity or directly relate to you as an identifiable individual, including the information described under “Information Collected Automatically,” below. If, however, we are required to treat such information as personal information under applicable law, then we may use and disclose it for the purposes for which we use and disclose personal information, as detailed in this Privacy Policy.

Access And Choice

We may offer features through the Services that enable you to correct, update, amend or delete your personal information. You may also email our Privacy Officer (see the “Contact Us” section below), and we will comply with such a request to the extent required by law. Quebec residents may read more about their rights in the appropriate section below. We strongly encourage you to check the personal information you have with us to make sure it is accurate so that we can better serve you. Please note that we may need to retain certain information for recordkeeping or other purposes. There may also be residual information that we may be required by applicable law or regulation to retain within our databases and other records, which will not be removed.

Subject to legal, regulatory and contractual requirements, you may withdraw your consent for the collection, use and disclosure of personal information. You are not entitled to withdraw your consent to our collection, use and disclosure of personal information required by law or regulation. If you wish to withdraw consent, you may do so by contacting us (see the “Contact Us” section below). We will explain your options and any consequences of withdrawing your consent. It is possible that we may be unable, or limited in our ability, to provide you with certain services or information due to legal, regulatory, or contractual obligations.

If you decide at any time that you no longer wish to receive marketing emails from us, please follow the “unsubscribe” instructions provided in such emails. To opt-out of other marketing communications please contact us using the contact information set out below. Please note that you cannot opt out of administrative emails, such as regulatory or service notifications.

Information Collected Automatically

When you utilize our Services, we record information such as browsing activity and data displayed or clicked on (such as user interface elements, ads, and links) by using such tools as Google Analytics, for example. Such tools also help us collect other information such as the type of device you use, browser type, operating system version, IP address and date and time of access. Similarly, we use tools and third parties, such as Segment and Customer.io to collect your email information to track when and how you engage with our Services.

We may use certain technologies, such as cookies, web beacons, pixels, webhooks, and similar technologies, to collect information automatically when you use our Services. We may use these technologies to, for example, record your preferences, track your use of our Services across multiple devices, measure exposure to our online advertisements, monitor traffic, analyze your use of our Services, for security purposes, to display information more effectively, to personalize your experience and to improve our Services.

You have choices to limit some tracking mechanisms. Many web browsers automatically accept cookies, but you may be able to modify your browser’s settings to decline cookies. If you choose to decline cookies, certain features may not function properly or may not remain accessible to you. In addition, you may also render some web beacons unusable by rejecting or removing their associated cookies.

We may also use information collected automatically from a particular browser, device, or application to recognize you on another browser, device, or application linked to you, for fraud prevention and other purposes.

• Log File Information - Certain information is collected by most browsers or automatically through your device, such as your computer type, screen resolution, operating system name and version, device manufacturer and model, language and Internet browser type and version. We use this information to ensure that our Services function properly.
• IP Address - Your IP address is automatically assigned to your computer by your Internet Service Provider. An IP address may be identified and logged automatically in our server log files whenever a user accesses our Sites and Services, along with the time of the visit and the pages visited. We use IP addresses for purposes such as calculating usage levels, diagnosing server problems, and administering our Services. We may also derive your approximate location from your IP address.
• Cookies - Cookies are small text files that may be placed on your device when you use our Sites and Services or when you view advertisements that we have placed on other websites. Cookies allow your browser to remember some specific information, which the web server can later retrieve and use. When you quit your browser, some cookies are stored in your computer’s memory, while some expire or disappear.
• Tags,Pixels,WebBeacons,ClearGIFs- A web beacon, also known as an internet tag, pixel tag, or clear GIF, is typically a one-pixel, transparent image located on a webpage or in an email. These may be used when you are served with advertisements, when you interact with advertisements outside of our online services, or when you interact with our communications. They are generally used to transmit information back to a web server, and they help us measure the success of our marketing campaigns and compile statistics about usage of the Sites.

Security

We seek to limit access to your personal information to authorized employees, agents, contractors, or vendors. We also maintain physical, electronic, contractual and procedural safeguards designed to protect the information against loss, misuse, damage, or modification, and unauthorized access or disclosure while in our possession. No data transmission or storage system can, however, be guaranteed to be fully secure. If you have reason to believe that your interaction with us is no longer secure, please immediately notify us by telephone in accordance with the “Contact Us” section below.

Other Important Information

• Consent to Use Your Information- Privacy laws in Canada are covered under The Personal Information Protection and Electronic Documents Act (“PIPEDA”), and essentially similar provincial legislation. The Services provided to you are controlled and operated by us from the United States and, therefore, are subject to the laws and jurisdiction of a country outside of Canada other than as noted below. You must be an individual of legal age of majority in your home Province to use our Services.
• Transfer of personal information outside of Canada - We may process, store, and transfer your personal information in and to another province or territory or country outside of Canada, such as the United States with privacy laws that may not be as comprehensive as Canadian law. As a result, your personal information may be subject to the laws of another jurisdiction, including any law that permits or requires the disclosure of the information to governments, courts, law enforcement or regulatory agencies upon request.
• Social Media and Links to Other Web Sites and Apps - This Privacy Policy applies only to our Services. However, the Sites and Applications may contain links to other websites and apps that are not operated or controlled by TradeZero and for which we are not responsible. You should review the privacy policies of third-party websites and apps before using them.

• UseofEmail- To keep our costs, and your costs down, we may use email, among other means, to communicate with you. For example, we may use email to notify you regarding your activity, or of new features, products or services that may affect the way you may be able to use our Services.

Messages sent to us through the Contact Us pages on our Sites are secured with the same technology we use to collect personal information. We cannot guarantee the security of messages you send directly to us addressed to our various email domains.

• ToWhomThisPrivacyPolicyApplies- This Privacy Policy applies to all Services provided by TradeZero. However, if you have never utilized our Services, the terms of this Privacy Policy may apply to you where applicable to your jurisdiction.

• AccesstoYourInformation- If you wish to review your personal information that we have on file, please contact us (see the “Contact Us” section below). We will review any information that you notify us is incorrect. If we agree, we will correct our records. However, if we do not agree, you may submit a statement of dispute, which we will include in future disclosures of the disputed information. See also “Updates to this Privacy Policy” below.

Rights of Quebec Residents

In addition to PIPEDA, Quebec residents are protected under the Act respecting the protection of personal information in the private sector, CQLR, c. P-39.1 (the “Act’). The Act grants enhanced rights to individuals regarding the collection, use and sharing of their personal information.

If you are a resident of Quebec, you have certain rights and choices in relation to your personal data, including:

• The right to be informed: This Privacy Policy includes detailed information about how we process your information;
• Access to your personal data: You have the right to access the information we may hold about you;
• The right to have your personal data be accurate, complete, and up to date: You can request that we correct any incomplete or inaccurate personal information we hold about you;
• De-indexation right or right to be forgotten: Subject to certain exceptions, you have the right to request that we delete personal information we collected from you and retained; and
• Right to data portability. You have the right to receive personal information that you have provided directly to us so you may transmit your information to another organization.

To exercise any of these rights, please contact us (see the “Contact Us” section below).

Updates To This Privacy Policy

We may update this Privacy Policy to reflect changes to our information practices or legal requirements. The effective date at the top of this Privacy Policy indicates when this Privacy Policy was last revised. Any changes will become effective when we post the revised Privacy Policy through our Services. Your use of our Services following these changes means that you accept the revised Privacy Policy. To stay informed of our privacy practices, we recommend you review the Privacy Policy on a regular basis.

Contact Us

If you have any questions or concerns about our Privacy Policy, please contact our Privacy Officer at legal@tradezero.com.