Privacy Policy

1. Introduction

Rwa Investments Inc. (hereinafter referred to as Rwa Invest, we, us, or our) is committed to protecting the privacy and security of individuals who interact with our website, services, and platforms. This Privacy Policy explains in detail how we collect, use, disclose, process, and safeguard information when you visit our website at rwainvest.buzz, engage with our computer systems design services, or otherwise interact with us in the course of our business operations.

By accessing or using our website and services, you acknowledge that you have read, understood, and agreed to the practices described in this Privacy Policy. If you do not agree with any part of this policy, please refrain from using our website and services. This policy applies to all visitors, clients, partners, and any other individuals whose data we may process in connection with our business activities.

We have designed this policy to comply with applicable privacy laws and regulations in Canada, including the Personal Information Protection and Electronic Documents Act (PIPEDA), as well as international standards such as the General Data Protection Regulation (GDPR) where applicable. Our goal is to provide full transparency regarding our data handling practices.

2. About Rwa Investments Inc.

Rwa Investments Inc. is a professional technology services company specializing in computer systems design and related services, computer integrated systems design, and technical consulting. Our principal place of business is located in Toronto, Ontario, Canada. The developer and operator of this website is Rwa Invest, a trading name of Rwa Investments Inc.

3. Information We Collect

We collect various categories of information to provide and improve our services. The specific types of information we gather depend on how you interact with our website and services. Below is a detailed breakdown of each category of data we may collect.

3.1 Information You Provide Directly

When you voluntarily contact us, submit inquiry forms, request consultations, engage our services, or otherwise communicate with us, we may collect the following types of personal information:

• Contact and identification data: Your full name, email address, telephone number, company name, job title, and any other information you include in your communications.
• Business information: Details about your organization, project requirements, technical specifications, infrastructure details, and business objectives you share with us during consultations or service engagements.
• Communication records: Copies of correspondence including emails, messages submitted through contact forms, and notes from telephone conversations with our team members.
• Service-related information: Any data, documents, system configurations, access credentials, or technical information you provide for the purpose of our delivering computer systems design and consulting services.
• Payment and billing data: Invoicing details, payment records, and transaction history related to services rendered. We do not store full credit card numbers or sensitive financial credentials on our own systems.

3.2 Information Collected Automatically

When you visit our website, certain information is collected automatically through standard internet technologies. This data helps us understand how visitors interact with our site and enables us to improve the user experience:

• Device and browser information: Your IP address, browser type and version, operating system, device type, screen resolution, and language preferences.
• Usage data: Pages visited, time spent on each page, referring URLs, navigation patterns, click activity, scroll depth, and interaction with page elements.
• Network data: Internet service provider, connection speed, and approximate geographic location derived from your IP address.
• Cookies and tracking technologies: We use first-party cookies and similar technologies for essential website functionality, performance monitoring, and analytics purposes. Detailed information about our cookie usage is provided in Section 8 of this policy.

3.3 Information From Third Parties

In certain circumstances, we may receive information about you from third-party sources, including:

• Business partners and referral sources: Contact information shared by trusted partners who refer clients to us.
• Publicly available sources: Professional profile information from public directories, business registrations, and professional networking platforms used for legitimate business development purposes.
• Service providers: Data from third-party tools and platforms we use for analytics, communication, and business operations.

4. How We Use Your Information

We use the information we collect for a variety of legitimate business purposes. Each use is grounded in a specific legal basis as described below. We do not use your personal information for purposes unrelated to those disclosed at the time of collection without first obtaining your consent.

4.1 Service Delivery and Client Management

• To provide, operate, and maintain our computer systems design and consulting services according to agreed-upon scope and specifications.
• To communicate with you regarding service inquiries, project updates, technical support, and account-related notifications.
• To process payments, issue invoices, and manage billing relationships.
• To customize our services and recommendations based on your specific business needs and technical environment.

4.2 Business Operations and Improvement

• To analyze website traffic, usage patterns, and service performance in order to improve our offerings and user experience.
• To conduct internal research, technical diagnostics, and system optimization.
• To train our staff and improve the quality of our professional services.
• To develop new features, services, and solutions based on aggregate usage trends.

4.3 Legal Compliance and Security

• To comply with applicable laws, regulations, court orders, or other legal obligations.
• To detect, prevent, and investigate security incidents, fraud, unauthorized access, and other harmful or illegal activities.
• To enforce our Terms of Service and protect the rights, property, and safety of Rwa Investments Inc., our clients, and the public.
• To respond to lawful requests from public authorities and government agencies.

4.4 Marketing and Communications

• To send you relevant information about our services, industry insights, and company updates, where you have consented to receive such communications or where permitted by applicable law.
• To personalize our communications based on your interests and engagement history.
• You may opt out of marketing communications at any time by using the unsubscribe link in our emails or by contacting us directly.

5. Legal Bases for Processing

For individuals located in jurisdictions that require a lawful basis for data processing (including the European Economic Area and the United Kingdom), we process personal information on the following legal grounds:

• Contractual necessity: Processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
• Legitimate interests: Processing is necessary for our legitimate business interests or those of a third party, provided those interests are not overridden by your data protection rights.
• Consent: You have given clear consent for us to process your personal information for one or more specific purposes.
• Legal obligation: Processing is necessary to comply with a legal or regulatory obligation to which we are subject.

6. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. We may share your information only in the following limited circumstances:

6.1 Service Providers and Business Partners

We engage trusted third-party vendors and service providers to perform functions on our behalf, including website hosting, data storage, analytics, payment processing, email delivery, and customer support. These providers are contractually bound to process data only according to our instructions and to maintain appropriate security measures. They are prohibited from using your personal information for any other purpose.

6.2 Legal and Regulatory Disclosures

We may disclose your information if required to do so by law, regulation, legal process, or governmental request. This includes responding to court orders, subpoenas, or lawful requests from public authorities to meet national security or law enforcement requirements. We will attempt to notify you of such disclosures where legally permitted.

6.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your information may be transferred as part of the transaction. We will notify you via email or a prominent notice on our website of any change in ownership or the use of your personal information, as well as any choices you may have.

6.4 With Your Consent

We may share your information for any other purpose with your explicit consent or at your direction.

7. Data Retention

We retain personal information only for as long as is reasonably necessary to fulfill the purposes for which it was collected, or as required to comply with our legal obligations, resolve disputes, and enforce our agreements. The specific retention period varies depending on the nature of the data and the context of its collection:

• Client project data: Retained for the duration of the active business relationship plus seven years following project completion, in accordance with Canadian commercial record-keeping requirements.
• Communication records: Retained for three years from the date of last communication, unless a longer period is required for contractual or legal reasons.
• Website analytics data: Retained for a maximum of twenty-six months from the date of collection.
• Marketing consent records: Retained indefinitely to evidence consent history, unless you withdraw consent, after which records are retained only for compliance purposes.

When personal information is no longer needed, we securely delete or anonymize it in accordance with industry best practices.

8. Cookies and Tracking Technologies

8.1 What Are Cookies

Cookies are small text files placed on your device when you visit a website. They are widely used to enable website functionality, enhance user experience, and provide information to site operators. Cookies may be session cookies, which expire when you close your browser, or persistent cookies, which remain on your device until they expire or are deleted.

8.2 Types of Cookies We Use

• Essential cookies: Required for the basic operation of our website, including navigation, security features, and access to protected areas. The website cannot function properly without these cookies.
• Performance and analytics cookies: Help us understand how visitors interact with our website by collecting and reporting information anonymously. We use these cookies to measure traffic, identify popular pages, and improve site performance.
• Functionality cookies: Allow the website to remember choices you make, such as language preferences or region, in order to provide a more personalized experience.

8.3 Managing Cookies

Most web browsers allow you to control cookies through their settings preferences. You can configure your browser to block all cookies, delete existing cookies, or alert you when cookies are being set. Please note that disabling certain cookies may impact the functionality and performance of our website. For detailed guidance on managing cookies in specific browsers, please consult your browser's help documentation.

9. Data Security

We implement and maintain robust technical, administrative, and physical security measures designed to protect your personal information from unauthorized access, disclosure, alteration, and destruction. These measures include:

• Industry-standard encryption protocols for data in transit and at rest.
• Secure network architecture with firewalls, intrusion detection systems, and regular vulnerability assessments.
• Access controls and authentication mechanisms that limit data access to authorized personnel on a strict need-to-know basis.
• Regular security training for all employees and contractors who handle personal information.
• Incident response procedures and business continuity plans to address potential security events.
• Periodic third-party security audits and penetration testing to identify and remediate vulnerabilities.

While we strive to use commercially reasonable means to protect your personal information, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security, but we are committed to continuously improving our safeguards.

10. International Data Transfers

Rwa Investments Inc. is based in Canada, and our primary data processing activities occur within Canadian territory. However, some of our service providers may process data in other countries, including the United States and other jurisdictions where our cloud infrastructure partners maintain data centers. When we transfer personal information across borders, we ensure that appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable data protection laws. These safeguards may include:

• Standard contractual clauses approved by relevant regulatory authorities.
• Verification that the receiving country provides an adequate level of data protection as determined by Canadian authorities or other relevant regulators.
• Binding corporate rules for transfers within our group of companies and affiliated service providers.

11. Your Rights and Choices

Depending on your jurisdiction, you may have certain rights regarding your personal information. These rights may include:

• Right to access: You may request a copy of the personal information we hold about you and information about how it is processed.
• Right to rectification: You may request that inaccurate or incomplete personal information be corrected or completed.
• Right to erasure: In certain circumstances, you may request that we delete your personal information from our systems.
• Right to restrict processing: You may request that we limit the processing of your personal information under specific conditions.
• Right to data portability: You may request a copy of your personal information in a structured, commonly used, and machine-readable format.
• Right to object: You may object to the processing of your personal information based on our legitimate interests or for direct marketing purposes.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right to complain: You may lodge a complaint with a relevant data protection supervisory authority if you believe your data protection rights have been violated.

To exercise any of these rights, please contact us using the details provided in Section 12 below. We will respond to your request within the timeframes required by applicable law, typically within thirty days. We may need to verify your identity before processing your request.

12. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact us using the following details. We are committed to addressing any privacy concerns promptly and transparently.

13. Children's Privacy

Our website and services are not directed to individuals under the age of eighteen. We do not knowingly collect personal information from children. If we become aware that a child under eighteen has provided us with personal information, we will take steps to delete such information promptly. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. When we make material changes, we will post the revised policy on this page and update the Last Updated date at the top of the document. We may also provide additional notice through our website or via email for significant changes. We encourage you to review this Privacy Policy periodically to stay informed about our data practices. Your continued use of our website and services following the posting of any changes constitutes your acceptance of those changes.

15. Definitions

For clarity, the following terms used in this policy have the meanings specified below:

• Personal information means any information relating to an identified or identifiable natural person. This includes data that can directly or indirectly identify an individual, such as name, email address, identification numbers, location data, or factors specific to physical, physiological, genetic, mental, economic, cultural, or social identity.
• Processing means any operation performed on personal information, including collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, use, disclosure, dissemination, alignment, combination, restriction, erasure, or destruction.
• Data controller means the entity that determines the purposes and means of processing personal information. For the purposes of this policy, Rwa Investments Inc. is the data controller.
• Data processor means an entity that processes personal information on behalf of the data controller, following the controller's documented instructions.