Privacy & CASL Notice

This page describes how Canada Business Exits ("CBE", "we") collects, uses, stores, and shares the personal information of business owners ("SMEs"), Canadian middle-market M&A advisors ("bankers"), and other professionals who interact with our platform.

It also explains our compliance with Canada's Anti-Spam Legislation ("CASL"), including the basis on which we may send commercial electronic messages ("CEMs") and how to unsubscribe.

What we collect

• From SMEs: name, business email, company name, industry, province, revenue band, optional notes, and the assessment-form answers you choose to share. If a trusted advisor refers you to CBE, we capture the advisor's identity so we can credit them and so you know how we found you.
• From bankers: name, professional email, firm, title, sectors of focus, deal-size focus, region, and links you have published on your firm's website or other public professional directories.
• From all visitors: standard server logs (IP, user-agent, timestamps), and email-engagement events (delivered, opened, clicked, bounced, unsubscribed) for messages we send.

How we use it

• Matching: our algorithm scores SMEs and bankers on six factors (industry fit, revenue band, geography, transaction-type fit, owner readiness, structural fit). Matched profiles are surfaced one at a time, and only the recipient sees the other party's anonymized summary unless you explicitly authorize the introduction.
• Outreach to bankers: we send a small number of one-to-one professional emails per quarter to bankers whose firms have conspicuously published their professional contact information for the purpose of receiving deal-flow inquiries. We do not bulk-send.
• Welcomes and acknowledgments: if a trusted advisor refers an SME to us, we send the SME a welcome email naming the referrer and explaining how the platform works. We send the referring advisor a confirmation that the referral landed.
• Operational notices: account confirmations, readiness-check results, and other transactional messages.

What we do not do

• We do not sell or rent your personal information to anyone.
• We do not share an SME's company name or details with any banker, broker, or third party without that SME's explicit written consent.
• We do not share a banker's name or firm with an SME until the banker has indicated interest in the match and the SME has authorized the introduction.
• We do not send CEMs to addresses on our suppression list. Suppressions are honoured immediately and persist indefinitely.

Why you may receive a CEM from us (CASL consent basis)

Under CASL, every CEM we send relies on one of the following consent bases:

• Conspicuous publication (s. 10(9)(b)): for bankers whose professional contact information has been conspicuously published on their firm's website or another public professional directory, where the publication is not accompanied by a "no unsolicited" notice, and where the message is relevant to the banker's professional role. Each banker record we hold includes a documented source URL of the page where their contact was published, the date we documented it, and the sourcing service identifier — this is our CASL audit trail.
• Express consent: for SMEs who have completed an intake form, taken a readiness assessment, or otherwise actively asked to hear from us, and for bankers who have explicitly opted in to the matching network.
• Implied consent via existing business relationship: for ongoing operational communications with active platform users.
• Referral from a trusted advisor: when an accountant, lawyer, or financial advisor refers a client to CBE, we treat that referral as documented affirmative interest and send the client a single welcome message naming the referrer. The referring advisor confirms that the client expressed interest in exit advisory services before submitting the referral.

How to unsubscribe

Every email we send includes a one-click unsubscribe link in the footer. The link is single-use and tied to the specific message — you do not need to enter your email address or confirm anything beyond clicking the link.

You can also unsubscribe by replying to any email with the word "unsubscribe" in the body, or by emailing info@canadabusinessexits.app. We will remove you from all future sends within one business day; in practice, unsubscribes from the link are processed instantly.

Unsubscribing does not delete your record from our database. We retain a minimal record of your suppression so that we do not accidentally contact you again. If you would like your record fully deleted, email us and we will do so within thirty days.

Storage and security

Your information is stored on Railway-managed PostgreSQL servers in Europe-West (the underlying infrastructure provider is Google Cloud Platform). Connections are TLS-encrypted in transit. Access is restricted to the platform's operating staff. We do not run a "data warehouse" or sell aggregated data to third parties.

Children

CBE is a B2B platform for adult business owners and professional advisors. We do not knowingly collect information from anyone under 18.

Updates to this notice

We will revise this page from time to time. Material changes — those that meaningfully affect what we collect or how we use it — will be communicated to existing users by email at least thirty days before they take effect.

Contact

Questions, requests for deletion, or CASL-related concerns can be sent to:

Arthur Kostaras
Founder, Canada Business Exits
arthur@negotiateandwin.com · info@canadabusinessexits.app
Toronto, ON, Canada

← Return to canadabusinessexits.app