What we collect, why, and who sees it.

Owners trust us with their financial statements, their plans and sometimes their personal finances. This policy explains how Legatis Executive Partners Inc. handles that information.

Last updated 28 September 2026

The short version

We never sell your information, and we never share it for anyone else's marketing.
Your account, your saved work and your documents are stored on servers in Canada.
We share information with a lender or partner only when you have agreed to it, and only what you agreed to. Nobody outside Legatis can browse your account.
Your personal net worth statement is yours alone unless you choose to use it in a financing.
You can ask to see, correct or delete your information at any time: admin@lepstrategy.com.

1. Who we are and what this covers

This policy is issued by Legatis Executive Partners Inc. (“Legatis”, “we”, “us”), a British Columbia corporation based in Vancouver. It applies to personal information we collect through our website (www.lepstrategy.com), our portal (portal.lepstrategy.com), including the free Business Account and the Client Portal, and in our dealings with clients, prospective clients, lenders and partners.

We handle personal information in accordance with British Columbia’s Personal Information Protection Act (PIPA) and, where it applies, the federal Personal Information Protection and Electronic Documents Act (PIPEDA).

Information about a business itself (its revenue, for example) is not personal information, but we protect business information with the same care. Confidentiality of client business information is also covered by our engagement agreements.

2. Our Privacy Officer

Our Managing Partner is our Privacy Officer and is responsible for our compliance with this policy. You can reach the Privacy Officer at admin@lepstrategy.com, or by mail at Legatis Executive Partners Inc., Vancouver, British Columbia (a mailing address is available on request).

3. What we collect

We collect only what we need for the purpose at hand. Most of it you give us directly.

When you	We collect
Visit the website	Nothing that identifies you by name. Our network provider processes your IP address and browser details to deliver and protect the site. Forms and calculators save your progress in your own browser; it stays on your device unless you submit it.
Send an enquiry, ask for a call back, or request a calculator report, pitch outline or diagnostic	Your name, email, phone, company, role, topic of interest, approximate revenue range, your message, your calculator inputs and results or diagnostic answers, whether you would like occasional updates, and the IP address the request came from.
Open a free Business Account	Your name, email and password (stored only in scrambled, one-way form), your business profile (industry, location, size, goals, timeline and phone), and whatever you save in the tools: business plans, loan application packs, pitch outlines, calculator reports and diagnostic reports.
Complete a personal net worth statement	Date of birth, home address, income, personal assets and liabilities, guarantees you have given, and the same details for any co-applicant or spouse you include. Legatis staff cannot view it in your account.
Become a client	Contact details for you and the people you invite, details of the engagement, and the documents you upload, such as financial statements, tax returns and notices of assessment, credit reports, agreements and corporate records.
Work with us as a lender or partner	Your firm and contact details, the answers in your partner profile (such as mandate, criteria, regions and fee arrangements) and your logo if you ask to be featured.
Use the portal	A security record of sign-ins, views, uploads and downloads, with the date, IP address and browser used.

Information about other people. Financing and succession work often involves information about spouses, co-applicants, guarantors, shareholders and key employees. If you give us information about someone else, you confirm that you have their permission to do so, or other lawful authority, for the purposes described here.

What we do not ask for. We do not need your Social Insurance Number. Please blank it out on tax documents before uploading them.

4. How we use it

To respond to your enquiry and send you the report, outline or sign-in link you asked for.
To run the free tools and keep what you save.
If you have agreed, to review your Business Account profile and saved work and suggest how Legatis could help your business.
To deliver the services in an engagement: analysing your business, preparing financing and transaction materials, identifying suitable lenders and partners, and reporting to you.
To assess lenders and partners and make suitable introductions.
To keep the website and portal secure, prevent misuse and investigate problems.
To keep business and tax records and meet our legal obligations.
If you have opted in, to send occasional guides and updates.
To produce de-identified, aggregated statistics (for example, how many diagnostics were completed) that help us improve our tools. These never identify you or your business.

We will not use your information for a new purpose without telling you and, where the law requires it, asking for your consent.

We ask for your consent when we collect your information, usually by a tick box that shows exactly what you are agreeing to, and we keep a record of it. Some consent is implied by what you do; for example, if you send an enquiry we will use your details to reply.

You may withdraw consent at any time by writing to us, subject to legal or contractual restrictions. If you withdraw consent we need to provide a service, we may no longer be able to provide it, and we will tell you what that means.

We never sell personal information, and we never share it for anyone else’s marketing. We share it only in these circumstances:

With lenders and partners, with your consent. In an engagement we may introduce you to lenders or to partners such as mortgage brokers, lawyers, accountants, registered dealers or other specialists. Before we share anything, you agree to what will be shared, with whom, and why. We then share only that. Lenders and partners never have general access to your account; they see only the specific documents we provide them. Once a lender or partner has your information, it holds it under its own privacy obligations and regulators. For example, a bank keeps a loan application under its own privacy policy.
With people you invite. If you invite your own team, lawyer or accountant into the Client Portal, they can see what you give them access to.
With our service providers, who handle information on our behalf under contract and may use it only to provide their service to us:
- DigitalOcean hosts the portal, its database, documents and backups in its Toronto, Canada data centre.
- Cloudflare provides network security and delivers the website. Traffic between you and our sites passes through Cloudflare’s network in encrypted form and may be processed at its locations outside Canada.
- Google Workspace provides our email. Emails we send and receive, including enquiry notifications and the PDF reports we email you at your request, are handled and stored by Google and may be stored outside Canada.
- Google Fonts supplies the typefaces on the website, so your browser shares your IP address with Google when a page loads.
When the law requires or allows it, for example in response to a court order, to protect against fraud, or to establish or defend a legal claim.
If Legatis’s business is sold or reorganized, to the buyer, as permitted by law, and only for them to continue serving you on the terms of this policy.

7. Where your information is stored

Your account, the tools you save, your documents and our backups are stored in Canada: in DigitalOcean’s Toronto data centre and in encrypted backup copies held by Legatis in British Columbia. We do not store client data with cloud storage services outside Canada.

Some of our service providers, described above, may process information in other countries, including the United States, while delivering email and network services. Information processed outside Canada is subject to the laws of that country and may be accessed by its courts and authorities. You may ask our Privacy Officer about these arrangements.

8. Cookies and tracking

Portal sign-in. The portal uses a sign-in cookie and a security cookie. They are strictly necessary, and the sign-in cookie ends after eight hours or when you close your browser.
Your own browser. Some forms and calculators save your progress in your browser’s storage so you do not lose your work. It stays on your device, and you can clear it at any time in your browser settings.
Visit statistics. We may use Cloudflare Web Analytics, which counts page visits without cookies and without identifying you.
No advertising. We do not use advertising cookies, tracking pixels or third-party advertising trackers, and we do not follow you across other websites.

9. Emails from us

We send guides and updates only to people who have opted in. Every one identifies us and tells you how to unsubscribe. You can unsubscribe by replying “unsubscribe” or writing to admin@lepstrategy.com, and we will act on it within ten business days. Messages you need in order to use a service, such as sign-in links, reports you requested and updates on your engagement, are not marketing and are sent regardless.

10. How we protect it

We protect information with safeguards suited to its sensitivity, including:

encryption of all traffic to our sites;
passwords stored only in one-way scrambled form;
documents served only to signed-in users with permission to see them, and never from public links;
a record of every sign-in, view, upload and download;
staff access protected by a second sign-in step;
encrypted backups;
servers that accept administrative connections only from authorized locations.

Access within Legatis is limited to those who need it for your matter.

No system is perfectly secure. If a breach of your information creates a real risk of significant harm to you, we will notify you and the appropriate privacy regulator as the law requires, and tell you what we are doing about it.

11. How long we keep it

We keep personal information only as long as we need it for the purpose it was collected, or as the law requires. Then we securely delete it or make it anonymous.

Enquiries, call-back requests and emailed reports: up to two years after our last contact with you, unless you become a client.
Business Accounts: until you ask us to close the account. If an account has not been used for three years, we will email you before deleting it.
Client files: seven years after the engagement ends, for tax, legal and professional records. Documents you ask us to return or destroy earlier will be, except for what we must keep by law.
Lender and partner records: while the relationship continues and for two years after it ends.
Security records: for as long as the related account or file.

If we use your information to make a decision that directly affects you, we keep it for at least one year after the decision so you can ask to see it. Deleted information can remain in our encrypted backups until those backups expire in the normal cycle.

12. Your rights

You may ask us:

to see the personal information we hold about you and how it has been used and shared;
to correct it;
to withdraw a consent;
to close your account and delete your information.

Write to admin@lepstrategy.com. We will respond within 30 business days and may ask you to confirm your identity. There is no charge for a request about your own information, except that we may charge a minimal fee for copies, and we will tell you in advance. In limited cases the law allows or requires us to refuse a request; if so, we will tell you why.

If you are not satisfied with our response, you may complain to the Office of the Information and Privacy Commissioner for British Columbia (oipc.bc.ca) or, where federal law applies, the Office of the Privacy Commissioner of Canada (priv.gc.ca).

13. Business users only

Our website and services are for business owners and professionals. They are not directed at anyone under 19, the age of majority in British Columbia, and we do not knowingly collect information from minors.

14. Changes to this policy

We will post any change here with a new date. If a change significantly affects how we use information we already hold, we will tell account holders by email before it takes effect and ask for consent where the law requires it.

15. Contact

Privacy Officer, Legatis Executive Partners Inc., Vancouver, British Columbia · admin@lepstrategy.com

See also our Terms of Use and Legal & Compliance page.