08 July 2025

08 July 2025

08 July 2025

Privacy Policy

1. Who we are

Endeavour Investments Inc. (“Endeavour”, “we”, “our”, “us”) is a security-and-privacy startup incorporated in British Columbia, Canada and headquartered in Vancouver, BC.

2. Scope of this policy

This policy describes how we collect, use, disclose and protect personal information on:

  • endeavour-investments.com (the “Site”); and

  • any publicly-available pre-launch marketing pages for our forthcoming mobile application (the “App”).

3. What we collect

We do not intentionally collect sensitive categories (race, religion, precise location, biometrics, or financial account numbers) on the Site.

4. Why we use your information

*If you are located in the EU/UK we rely on the enumerated GDPR bases; elsewhere we rely on analogous provisions in BC PIPA and PIPEDA. bclaws.gov.bc.ca

5. Sharing & disclosure

We never sell personal information. We share it only with:

  1. Service providers instructed under confidentiality (e.g., ISO 27001-certified hosting, email delivery, privacy-first analytics).

  2. Authorities or advisors where required to comply with law, enforce agreements, or protect rights.

All service providers are contractually bound to use data only for Endeavour’s purposes and to apply appropriate security measures.

6. International transfers

Our primary servers are in Canada. Some providers operate in other jurisdictions; where that results in cross-border transfers we use mechanisms such as Standard Contractual Clauses or equivalent safeguards.

7. Security

Security is at the core of our business. We employ:

  • TLS 1.3 encryption in transit;

  • encrypted-at-rest storage;

  • least-privilege, role-based access;

  • continuous vulnerability management and third-party penetration testing.

No internet transmission or storage system is 100 % secure, but we strive to exceed industry best practice.

8. Data retention

We retain personal information only as long as necessary for the purposes in section 4, after which we securely delete or irreversibly anonymise it. Server logs are kept for ≤90 days unless required for security investigations.

9. Your rights

  • British Columbia / Canada – You may request access to, or correction of, personal information we hold about you under BC PIPA and PIPEDA.

  • EU / UK – GDPR rights to access, rectify, erase, restrict, object, and data portability.

  • California – If our traffic includes California residents, CCPA rights to know, delete and opt-out of “sale” (we do not sell data).

You can exercise rights at any time via the contact methods in section 12. We will respond within 30 days (or any shorter period required by applicable law).

10. Children’s privacy

The Site is not directed to children under 13. We do not knowingly collect their personal information. If you believe we have done so, please contact us and we will delete it promptly.

11. Links to other sites

The Site may link to third-party pages (e.g., social media, press articles). We are not responsible for those sites’ privacy practices. Review their policies before providing information.

12. Contact us

Questions or requests can be sent to:

Privacy Officer
Endeavour Investments Inc.
105-1496 Cartwright St, PO Box 14325 RPO Granville Island
Vancouver, BC V6H 4J6, Canada

You may also write to the Office of the Information & Privacy Commissioner for British Columbia if you feel your concerns have not been addressed.

13. Changes to this policy

We may update this policy to reflect changes in technology, law or our practices. Material changes will be announced on the Site at least 15 days before taking effect, with the “effective date” updated accordingly.