Privacy Policy

Saskatoon Banking Ltd., located at 199 Clemow Avenue, Ottawa, Ontario K1S 1Z3, is the data controller.

Our Chief Compliance Officer, Simone Delacroix, oversees all privacy matters.

Contact: [email protected] or (415) 457-1089.

We collect the following categories of personal information:

• Full name, email address, phone number
• Business name and business address
• Financial statements and tax documents (when applying for credit)
• Banking transaction data
• Device information (IP address, browser type) when you use our website
• Cookies for site analytics

We collect only what's necessary to serve your banking needs and comply with regulatory requirements.

Four reasons.

First, to provide banking services — account management, lending, treasury, cash flow analysis reports, and deposit activity summaries.

Second, to comply with legal obligations — AML/ATF regulations, OSFI requirements, CRA reporting, and FINTRAC filings.

Third, to improve our services — website analytics, product development, and Business Health Index refinements.

Fourth, to communicate with you — account updates, service notifications, and — only with your explicit consent — marketing materials.

Only when necessary. We share data with:

• Regulatory bodies (OSFI, FINTRAC, CRA) as required by law
• Credit bureaus (Equifax, TransUnion) for credit assessments and commercial appraisal review
• Technology service providers who process data on our behalf — under strict contractual protections and subject to annual security audits
• Your authorized professional advisors (accountants, lawyers) at your request

We never sell your personal information. Not partially. Not anonymized. Never.

Security is engineered into every layer of our infrastructure.

• End-to-end 256-bit encryption for all digital transactions
• Two-factor authentication on all accounts — mandatory, not optional
• Biometric login options (fingerprint, face ID) on mobile
• Data stored exclusively on Canadian-hosted servers
• Annual third-party security audits (most recent: August 2026, zero critical findings)
• Mandatory annual privacy and security training for all 6 team members plus contract staff

Our systems meet or exceed OSFI Guideline B-13 requirements for technology and cyber risk management.

Active client data: Retained for the duration of the banking relationship plus 7 years, as required by federal financial regulations.

Website analytics data: Retained for 26 months.

Marketing consent records: Kept until you withdraw consent, plus 2 years for audit purposes.

After these periods, data is securely deleted following NIST 800-88 guidelines for media sanitization.

Under PIPEDA (Canada's Personal Information Protection and Electronic Documents Act), you have the right to:

• Access your personal information we hold on file
• Request corrections to inaccurate or incomplete records
• Withdraw consent for non-essential processing (marketing, analytics)
• File a complaint with the Office of the Privacy Commissioner of Canada if you believe your rights have been violated

To exercise any right, email [email protected] with "Privacy Inquiry" in the subject line.

We acknowledge all requests within 2 business days and fulfill them within 30 calendar days — typically much sooner.

Yes. We use three categories:

• Essential cookies — Required for site functionality (login sessions, form security tokens). Cannot be disabled.
• Analytics cookies — Help us understand how visitors use our site. We use privacy-focused analytics. No personally identifiable information is captured.
• Preference cookies — Remember your settings (language, accessibility preferences).

You can manage cookie preferences at any time through the banner on our site or through your browser settings.

We do not use advertising cookies, retargeting cookies, or third-party tracking pixels. Period.

We'll update the "Last updated" date at the top of this page whenever changes are made.

For material changes that affect how we handle your data, we'll notify existing clients by email at least 30 days before the change takes effect.

A summary of changes will be published alongside the updated policy so you can see exactly what's different.

Three options — pick whichever suits you best.

• Email: [email protected] — include "Privacy Inquiry" in the subject line
• Phone: (415) 457-1089 — ask for Simone Delacroix's office
• Mail: Privacy Officer, Saskatoon Banking Ltd., 199 Clemow Avenue, Ottawa, Ontario K1S 1Z3

We aim to acknowledge every privacy inquiry within 2 business days.