Bridge Advisory Incorporated Privacy Policy

Effective date: October 2026

1. About this policy

Bridge Advisory Incorporated ("Bridge", "we", "us") is a Calgary-based consulting firm that provides business development and marketing support to private investment firms across Canada. We also create and publish The Canadian Private Investment Podcast and Newsletter (the "Program"), presented jointly with Axcess Capital Advisors Inc. ("Axcess").

This policy explains how Bridge collects, uses, shares and protects personal information in that work. It applies to our clients and business contacts, Program subscribers and listeners, podcast guests, and visitors to our websites, including canadianprivateinvestment.ca and bridgeadvisory.ca.

Bridge is not a securities dealer or adviser. We do not sell securities, give investment advice, open investment accounts or collect financial information such as income, net worth or investment holdings. If you speak with a dealing representative of Axcess, Axcess handles your information under its own privacy policy, available at axcesscapital.com/privacy-policy-2.

2. Information we collect

We collect only what we need for each relationship, mostly directly from you.

We do not knowingly collect personal information from anyone under 18.

3. How we use it

• To provide our services: delivering consulting work, managing contracts and invoicing, and communicating with clients and partners.
• To run the Program: sending the newsletter, guides and emails you asked for; producing, publishing and promoting episodes; and crediting guests.
• To improve what we do: understanding which topics, emails and channels readers find useful.
• To meet legal obligations: including keeping records of email consent under Canada's anti-spam law (CASL) and tax and accounting records.

We do not sell or rent personal information, and we do not use it for any purpose a reasonable person would not expect without asking you first.

4. Consent

We collect, use and share personal information with your consent, except where the law allows otherwise. Depending on the situation, consent may be express (for example, ticking a box to receive the newsletter) or implied (for example, requesting our guide, which lets us send related emails for up to six months as CASL permits).

Podcast guests consent to the recording and publication of their appearance through a signed guest release.

You can withdraw consent at any time, subject to legal or contractual limits. Every email we send includes an unsubscribe link; for anything else, contact us using the details in section 8. Withdrawing consent may mean we can no longer provide a particular service.

5. When we share information

• With Axcess, our Program partner. Bridge does not routinely share subscriber information with Axcess. If you book a conversation, you give your details to Axcess directly, and Axcess may assign your inquiry to one of its dealing representatives based on province and interests. Axcess may let Bridge know when you have booked a conversation or become a client, so we can keep our records up to date; you will keep receiving the newsletter until you unsubscribe.
• With service providers who process information on our behalf, including Kit (email and subscriber list), GoDaddy (website hosting), Netlify (bridgeadvisory.ca hosting and contact form submissions), YouTube and our podcast host (episode publishing), and Google Workspace (email, calendar and file storage) and QuickBooks Online (accounting, which holds business information about our corporate clients only). They may use it only to provide their services to us.
• Never with our Private Issuer clients. Bridge works with private investment firms, but we do not share any personal information with our Private Issuer clients.
• Where required or permitted by law, for example in response to a court order or a regulator's request, or to protect our legal rights.
• In a business transaction, such as a sale or reorganization of Bridge, under confidentiality terms and only as needed.

6. Storage outside Canada

Some of our service providers, including Kit and Netlify, store information on servers in the United States. While it is held there, it may be subject to the laws of that country, including lawful requests from authorities. We choose providers with reasonable security practices and contractual commitments to protect the information.

7. Retention and security

We keep personal information only as long as we need it for the purposes above or as the law requires:

• Subscribers: while you remain subscribed; after you unsubscribe, a record of your consent and unsubscribe request for three years.
• Clients and business contacts: for the length of the relationship and seven years afterwards for tax and accounting purposes.
• Podcast guests: published episodes remain available indefinitely; other guest information for seven years after their appearance.

When information is no longer needed, we securely delete or anonymize it. We protect it with reasonable safeguards, including password-protected accounts with two-factor authentication where available, and access limited to the people who need it.

8. Your rights, contacting us and changes

You may ask to see the personal information we hold about you, ask how it has been used and shared, ask us to correct it, or withdraw your consent. Send your request in writing to our Privacy Officer. We will respond within 30 days, as the law requires, and may ask you to confirm your identity first.

If you are not satisfied with our response, you may contact the Office of the Information and Privacy Commissioner of Alberta (oipc.ab.ca) or the Office of the Privacy Commissioner of Canada (priv.gc.ca).

We may update this policy from time to time. The effective date at the top shows when it last changed, and we will post the current version on our websites.