Nalwa Capital Corporation is committed to the highest standards of data stewardship and privacy, ensuring that the personal and financial information of our institutional and private partners is managed with the same discipline we apply to our real estate assets. This policy outlines how we collect, use, and safeguard your information across our national operations, providing a transparent framework for data handling that aligns with Canadian federal and provincial privacy laws. We recognize that trust is the foundation of any investment partnership, and protecting your digital identity is a critical component of our risk mitigation strategy. By engaging with our platforms or providing information through our investor portals, you consent to the practices described in this document, which are designed to ensure your data remains secure while facilitating the seamless execution of our vertically integrated redevelopment projects.

We collect only the essential information required to fulfill our operational duties and provide you with institutional-grade service. This includes personal identifiers such as names and contact details, as well as financial information necessary for accredited investor verification, capital deployment, and tax reporting purposes. Additionally, our digital platforms may collect technical data, such as IP addresses and browsing behavior, to optimize user experience and enhance the security of our investor gateway. All data collection is performed through secure, encrypted channels, and we do not engage in the sale of your personal information to third parties. Our internal construction and management subsidiaries may access relevant data to ensure project alignment, but such access is strictly governed by internal confidentiality agreements that mirror our firm-wide commitment to privacy.

The security of your information is fortified through a multi-layered defense strategy that includes advanced encryption, secure firewalls, and rigorous access controls. We treat your data as a high-value asset, housing it in secure environments that are monitored for unauthorized activity around the clock. Access to sensitive investor information is restricted to authorized personnel who require the data to perform specific professional functions, such as financial auditing or legal compliance. Despite these institutional-grade measures, no system is entirely immune to risk; therefore, we continuously update our security protocols to address emerging cyber threats. In the event of a data breach that impacts your personal information, Nalwa Capital Corporation will provide timely notification in accordance with regulatory requirements, ensuring you are fully informed of the situation and the steps we are taking to resolve it.

Data retention at Nalwa Capital Corporation is dictated by the duration of our partnership and the specific legal requirements governing the Canadian financial and real estate sectors. We retain your information for as long as it is necessary to provide our services, manage our national portfolio, and comply with statutory obligations related to tax and anti-money laundering regulations. Once the retention period has expired, or upon a legitimate request for deletion, we employ secure disposal methods to ensure your data is permanently erased from our systems. This lifecycle management approach ensures that we do not maintain unnecessary data “bloat,” thereby reducing the potential surface area for data exposure and aligning with our broader principles of operational efficiency and disciplined capital stewardship.

Your rights regarding your personal information are paramount, and we provide clear avenues for you to access, correct, or request the deletion of your data within our systems. As a partner, you have the right to review the information we hold about you and to be informed of how it is being utilized to support our redevelopment strategies. Should you have any questions regarding this Privacy Policy or our data handling practices, our dedicated compliance team is available to provide clarity and address your concerns. We reserve the right to modify this policy as our national footprint expands or as new privacy regulations emerge, ensuring our legal framework remains as robust as our physical developments. Continued use of our services following any updates signifies your ongoing agreement to our privacy standards and your trust in our commitment to data integrity.