Privacy Policy

We comply with all applicable Canadian privacy laws, including:

• Québec Law 25 (Act respecting the protection of personal information in the private sector, CQLR c P-39.1)
• Personal Information Protection and Electronic Documents Act (PIPEDA)
• Canada’s Anti-Spam Legislation (CASL)
• Charter of the French Language (CQLR c C-11, Bill 96)
• Other applicable federal or provincial privacy laws

Solid Capital is committed to full compliance with Québec Law 25, including enhanced requirements for consent, data minimization, privacy impact assessments, and individual rights.

3.1 Information You Provide

When you visit our Website:

• Name and business name
• Email address
• Mailing address
• Type of business
• Time in business
• Province of operation
• Annual revenue
• Requested financing amount
• General description of financing needs
• Messages or communications you send us

3.2 Information Collected Automatically

When you visit our Website:

• IP address (city/region level)
• Browser type and operating system
• Pages visited and time spent
• Referring website or search terms
• Device type
• Date and time of visit

Collected using cookies, web beacons, pixel tags, and similar technologies.

3.3 Information from Third Parties

We may receive information from:

• Advertising platforms (Google, Meta)
• Analytics providers
• Public business directories

3.4 Information We Do NOT Collect

We do not collect:

• Social Insurance Numbers (SIN)
• Government-issued ID numbers
• Credit card numbers
• Banking credentials
• Bank statements
• Credit bureau reports
• Health information
• Information from individuals under 18

Because we are an advertising company and not a lender, we do not require, and you should NOT submit, sensitive financial documents, SIN numbers, or banking credentials through our website. Those will be collected directly by any Partner Lender you choose to work with, under their own separate privacy policy.

4.1 Lead Generation & Referral

• To receive your financing inquiry and match you with one or more Partner Lenders who may be able to assist you;
• To transmit your contact and business information to Partner Lenders upon your express consent;
• To communicate with you about the status of your inquiry.

4.2 Analytics & Service Improvement

• To analyze how visitors use our Website and identify areas for improvement;
• To measure the performance and effectiveness of our advertising campaigns;
• To generate aggregated, anonymized statistics about our Website traffic and service usage.

4.3 Marketing (With Consent)

• To send you commercial electronic messages about our services or related financing options, where you have provided express consent under CASL;
• To re-market to you through digital advertising platforms, where you have not opted out.

4.4 Legal Compliance

• To comply with applicable law, regulations, and court orders;
• To enforce our Terms of Use and Service Agreement;
• To detect, prevent, and address fraud, security threats, and abuse;
• To respond to regulatory inquiries or government requests.

4.5 Business Operations

• To maintain records of your inquiries for customer service purposes;
• To respond to your questions and support requests;
• In connection with a merger, acquisition, or sale of Solid Capital’s business or assets (subject to notice, as described in Section 7).

Under Québec Law 25 and PIPEDA, Solid Capital relies on the following legal bases to collect, use, and disclose your personal information:

• Express consent: For marketing communications and for sharing your information with Partner Lenders. Your consent is obtained when you submit an inquiry form on our Website.
• Implied consent: For internal analytics and service improvement activities where a reasonable person would expect such use.
• Legal obligation: Where we are required by law to collect, retain, or disclose information.
• Legitimate interest: For fraud prevention, website security, and aggregated analytics, where such interest does not override your privacy rights.

You have the right to withdraw your consent at any time (see Section 10). Withdrawal of consent will not affect any processing that occurred before withdrawal, and will not affect our ability to send you non-marketing transactional communications related to your inquiry.

6.1 Partner Lenders

By submitting an inquiry on our Website, you expressly authorize Solid Capital to share your contact and business information with one or more Partner Lenders for the purpose of evaluating your financing inquiry. You may be contacted by one or more Partner Lenders as a result. Partner Lenders are independent third parties and operate under their own privacy policies. Solid Capital is not responsible for how Partner Lenders handle your information once it has been transmitted.

6.2 Service Providers

We may share your information with trusted third-party service providers who assist us in operating our Website and delivering our services, including:

• Web hosting and cloud infrastructure providers
• Email delivery and marketing automation platforms
• Analytics and website tracking providers (e.g., Google Analytics)
• Advertising platforms (e.g., Google Ads, Meta Ads) for campaign measurement and retargeting
• Customer relationship management (CRM) software providers
• Cybersecurity and fraud prevention providers.

All service providers are contractually required to use your information only as necessary to provide services to Solid Capital, to maintain appropriate security standards, and to comply with applicable privacy law. Service providers located outside Canada must provide a level of protection comparable to Canadian privacy law.

6.3 Advertising and Analytics Partners

We may share limited, privacy-protected information (such as hashed email addresses or anonymized identifiers) with digital advertising platforms including Google and Meta to measure the reach and effectiveness of our advertising campaigns. These partners use this information solely for measurement and attribution purposes under our direction and are not permitted to use it for their own independent purposes.

6.4 Legal Disclosure

We may disclose your personal information without your consent only in the following circumstances:

• As required by applicable law, regulation, court order, or government authority
• To prevent or detect fraud, criminal activity, or threats to safety
• To enforce our Terms of Use or protect the rights and property of Solid Capital or
• In connection with legal proceedings in which Solid Capital is a party.

6.5 Business Transactions

If Solid Capital is involved in a merger, acquisition, financing, reorganization, or sale of all or part of its assets, your personal information may be disclosed to the parties involved in that transaction, subject to appropriate confidentiality obligations. You will be notified via email or prominent notice on our Website of any material change in how your information is used as a result of such a transaction.

6.6 What We Do NOT Do

Solid Capital does NOT sell, rent, or trade your personal information to third parties for their own marketing purposes. We do not share your information with advertisers in exchange for payment or benefit, other than as described above for campaign measurement purposes.

Solid Capital retains your personal information only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our standard retention practices are as follows:

• Inquiry and contact information: retained for up to 3 years from the date of your last interaction, to allow follow-up and for record-keeping purposes;
• Analytics and log data: retained for up to 26 months, consistent with Google Analytics data retention standards;
• Marketing consent records: retained for the duration of the marketing relationship plus 3 years, to demonstrate CASL compliance;
• Legal hold information: retained for as long as required by law or pending litigation.

When personal information is no longer required, Solid Capital will securely destroy or anonymize it in accordance with our data destruction procedures. You may request earlier deletion of your information as set out in Section 10.

8.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They allow websites to recognize your browser, remember your preferences, and collect information about how you interact with our site. We also use related technologies including web beacons, pixel tags, and session tokens.

8.2 Types of Cookies We Use

We may use the following types of cookies:

• Strictly necessary cookies: Required for the Website to function properly (e.g., session management). Cannot be disabled without breaking the site.
• Functional cookies: Remember your preferences and settings to improve your experience.
• Analytics cookies: Collect anonymized information about how visitors use our site (e.g., pages visited, time spent). We use Google Analytics for this purpose.
• Marketing and advertising cookies: Used to deliver relevant advertising and measure campaign performance (e.g., Google Ads conversion tracking, Meta Pixel).

8.3 Third-Party Cookies

Third-party providers such as Google and Meta may set their own cookies on our Website to provide analytics and advertising services. These third parties’ use of cookies is governed by their own privacy policies

Google Privacy Policy: policies.google.com/privacy Meta Privacy Policy: www.facebook.com/privacy/policy

8.4 Managing Cookies

You can control cookies through your browser settings. Instructions for managing cookies in common browsers:

• Google Chrome: Settings → Privacy and security → Cookies and other site data
• Mozilla Firefox: Options → Privacy & Security → Cookies and Site Data
• Safari: Preferences → Privacy → Manage Website Data
• Microsoft Edge: Settings → Cookies and site permissions

You may also opt out of Google Analytics tracking at tools.google.com/dlpage/gaoptout. You may opt out of interest-based advertising through the Digital Advertising Alliance of Canada at youradchoices.ca.

8.5 Do Not Track

Our Website does not currently respond to browser “Do Not Track” (DNT) signals, as there is no uniform standard for interpreting such signals. If a recognized standard is established, we will review and update our practices accordingly.

Solid Capital implements reasonable and appropriate physical, technical, and administrative safeguards to protect your personal information from unauthorized access, use, disclosure, alteration, or destruction. Our security measures include:

• Encryption of data in transit using TLS/SSL protocols;
• Restricted access to personal information on a need-to-know basis;
• Employee privacy and security training and awareness;
• Contractual security obligations imposed on service providers;
• Regular review of our privacy and security practices.

While we take reasonable precautions, no method of data transmission over the internet or method of electronic storage is 100% secure. In the event of a privacy breach affecting your personal information, Solid Capital will comply with its notification obligations under Québec Law 25 and PIPEDA, including notifying you and the Commission d’accès à l’information du Québec (CAI) where required.

10.1 Right of Access

You have the right to request access to the personal information we hold about you, including information about how it has been used and with whom it has been shared. We will respond to access requests within 30 days.

10.2 Right to Correction

If any personal information we hold about you is inaccurate, incomplete, or outdated, you have the right to request that we correct it. We will update your information promptly upon receiving a valid correction request.

10.3 Right to Deletion

You may request that we delete your personal information. We will honor such requests where we are not required by law to retain the information and where deletion does not conflict with our legitimate business interests. Please note that deletion of your information may prevent us from continuing to provide Services to you.

10.4 Right to Withdraw Consent

You may withdraw your consent to our use of your personal information at any time. This includes consent to receive marketing communications and consent to share your information with Partner Lenders. To withdraw consent, contact us at credit@solidcapital.ca. Withdrawal will take effect within 10 business days.

10.5 Right to Opt Out of Marketing

You may opt out of receiving commercial electronic messages from Solid Capital at any time by: Clicking the “unsubscribe” link in any marketing email we send you; Replying “STOP” to any SMS marketing message; or Contacting us directly at credit@solidcapital.ca with “Unsubscribe” in the subject line. We will process your unsubscribe request within 10 business days, as required under CASL. Opting out of marketing messages will not affect transactional or service-related communications.

10.6 Right to Data Portability (Québec Law 25)

Under Québec Law 25, you have the right to receive your personal information in a structured, commonly used, and technological format, and to request that we communicate it to another organization, where technically feasible. Contact us at credit@solidcapital.ca to make a portability request.

10.7 Right to File a Complaint

If you are unsatisfied with how Solid Capital has handled your personal information, you have the right to file a complaint with: Commission d’accès à l’information du Québec (CAI) — www.cai.gouv.qc.ca Office of the Privacy Commissioner of Canada (OPC) — www.priv.gc.ca

Our services are intended for business use by adults aged 18 and over. We do not knowingly collect personal information from individuals under 18. If such information is discovered, it will be deleted promptly.

Some service providers used by Solid Capital may process information outside Canada, including in the United States. When this occurs, information may be subject to the laws of the country where it is processed. We ensure contractual safeguards are in place to protect personal information.

In compliance with the Charter of the French Language, this Privacy Policy is available in both French and English. In the event of any conflict between versions, the French version governs for Québec residents.

Solid Capital conducts Privacy Impact Assessments before implementing projects that involve personal information in ways that may create privacy risks, ensuring appropriate safeguards are implemented.

Solid Capital may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or business operations. When we make material changes, we will:

• Post the updated Privacy Policy on our Website with a revised effective date;
• Notify you by email (if we hold your email address) for changes that materially affect how we use your personal information; and/or
• Display a prominent notice on our Website.

Your continued use of our Website or Services after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms, subject to any additional consent requirements under applicable law.