BBSAbout BBS
- Legal name
- BBS INVEST GROUP LTD
- Status
- Money Services Business (MSB) registered with FINTRAC in Canada
- MSB No.
- M23496431
- Corporation No.
- 1522333-4
- Head office
- 1370 Hasting Drive, London, Ontario, Canada N5X 2J3
- Group
- BBS MASTER GROUP
01Scope and responsibilities
This policy covers personal data processed through the website, communications with BBS and relevant services. BBS INVEST GROUP LTD coordinates enquiries about this website; the entity providing a service assumes responsibilities appropriate to its role and applicable law. Relationship-specific information supplements this policy.
02Categories of data
Depending on the relationship, data includes identity, contact details, professional roles, representation authority, beneficial ownership, transaction information and compliance documents. Technical data, such as IP addresses and access logs, may be processed for operation and security. Only information relevant to the intended purposes is collected.
03Sources of information
Information comes from the individual, their organization or an authorized representative. It may be supplemented by partners, official registries, public sources and authorized verification or screening tools. These sources are used only as needed for identification, compliance, security and service delivery.
04Processing purposes
Data is used to respond to enquiries, assess onboarding, perform agreements, process and reconcile transactions and provide support. It also supports fraud prevention, security, compliance checks, complaint handling and legal obligations. Uses remain proportionate to the stated purposes.
05Processing grounds and consent
Processing relies on grounds permitted by applicable law: consent where required, performance of the contractual relationship, legal obligations or other authorized grounds. Purposes are explained and consent may be withdrawn within applicable limits. Withdrawal does not prevent legally required processing and may affect a service that needs the relevant data.
06Recipients and limited sharing
Internal access is restricted to authorized teams. Data is shared as necessary with banks, payment providers, technology partners, advisers and competent authorities. Sharing is limited to information relevant to their functions. Provider relationships are governed by confidentiality, security and processing commitments suited to their roles.
07International processing and transfers
International operations may require data processing in several countries. BBS reviews recipients, purposes and appropriate contractual and organizational safeguards. Required protection is addressed under the rules applicable to the transfer. Foreign authorities may access data under their laws; contractual safeguards do not override those legal powers.
08Retention periods
Retention periods reflect the purpose, contractual relationship, compliance obligations, limitation periods and evidentiary needs. Some data is retained after the relationship ends where an obligation or dispute justifies it. Once applicable periods expire, it is securely deleted or anonymized under the relevant procedures.
09Accuracy and minimization
Information is kept sufficiently accurate for its use. Individuals are invited to report changes or errors so they can be corrected after verification. Collection, access and copying are limited to what is necessary; sensitive document exchanges use secure arrangements appropriate to the case.
10Security and incidents
Safeguards combine access permissions, authentication, appropriate encryption, traceability and incident handling according to data sensitivity and risks. Events that may affect personal data are reviewed, documented and addressed. Individuals and authorities are notified where the relevant legal conditions are met.
11Individual rights
Under applicable law, individuals may request access, correction, erasure or restriction, object to processing or withdraw consent. Other rights, including portability, apply where provided by law. These rights remain subject to retention duties, third-party rights and justified legal restrictions.
12Requests and complaints
Requests are sent to compliance@bbsmastergroup.com, specifying their purpose and the relevant relationship. Identity is verified proportionately before sensitive information is disclosed. BBS responds within applicable timeframes and explains any legal limits on the request. Individuals retain the right to contact the competent data protection authority.