Privacy Policy

Rocky Ridge Funding (“Rocky Ridge Funding,” “we,” “us,” or “our”) operates the websites located at www.rockyridgefunding.ca and www.rockyridgefund.com (collectively, the “Site”), and provides alternative business financing and related lending and advisory services from our offices in Calgary, Alberta, Canada. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you visit the Site, apply for financing, or otherwise interact with us.

This Policy is drafted to comply with the Personal Information Protection and Electronic Documents Act (PIPEDA), the federal private-sector privacy law of Canada, and with Alberta’s Personal Information Protection Act (PIPA), which governs the collection, use, and disclosure of personal information by private-sector organizations operating in Alberta. Where Rocky Ridge Funding deals with clients outside Alberta, the applicable provincial or federal privacy law of that jurisdiction may also apply.

1. Scope of This Policy

This Policy applies to personal information collected through the Site, through loan and financing applications (online, by phone, or in person), through email or telephone correspondence, and through any other channel by which you provide information to Rocky Ridge Funding. It applies to prospective, current, and former clients, as well as website visitors, guarantors, and business owners or principals associated with a financing application.

This Policy does not apply to the practices of third-party companies we do not own or control, or to individuals we do not employ or manage, including third-party websites you may access through links on the Site.

2. Personal Information We Collect

Depending on how you interact with us, we may collect the following categories of personal information:

Identity and contact information — such as your name, business name, title, mailing address, email address, and telephone number.
Financial information — such as banking details, business revenue, transaction history, bank statements, tax returns, credit history, and credit bureau reports, submitted to assess eligibility for financing.
Business information — such as business registration details, ownership structure, years in operation, and industry sector.
Identification information — such as government-issued identification used to verify your identity, where required by law or by our underwriting process.
Application and transaction information — details you provide in a financing application, and records of funding provided, repayment, and account activity.
Technical and usage information — such as IP address, browser type, device information, pages viewed, referring URLs, and interaction data collected automatically through cookies and similar technologies.
Communications — records of correspondence between you and Rocky Ridge Funding, including emails, call notes, and messages submitted through Site contact or quote-request forms.

We collect only the personal information that is reasonable and necessary for the purposes identified in this Policy, in accordance with PIPEDA’s and PIPA’s data-minimization principles.

3. How We Collect Personal Information

Directly from you, when you complete a contact form, request a quote, submit a financing application, correspond with us by phone or email, or otherwise provide information voluntarily.
Automatically, through cookies, web beacons, and similar tracking technologies when you browse the Site (see Section 7, Cookies and Tracking Technologies).
From third parties, such as credit bureaus, financial institutions, business registries, and referral partners, where you have consented to such collection or where collection is permitted or required by law.

4. Purposes for Collecting, Using, and Disclosing Personal Information

We collect, use, and disclose personal information only for purposes that a reasonable person would consider appropriate in the circumstances, and only with your knowledge and consent except where consent is not required by law. Purposes include:

Assessing and processing applications for business financing, including verifying identity and evaluating creditworthiness.
Communicating with you about your application, funding terms, account status, or inquiries.
Underwriting, funding, servicing, and administering financing arrangements, including collections where applicable.
Complying with legal, regulatory, and anti-money-laundering obligations, and responding to lawful requests from regulators or law enforcement.
Operating, maintaining, and improving the Site and our services, including analyzing website usage.
Marketing our services to you, where you have consented, and in a manner consistent with Canada’s Anti-Spam Legislation (CASL).
Detecting, investigating, and preventing fraud, credit risk, and other unlawful activity.
Any other purpose disclosed to you at the time of collection, or otherwise permitted or required by law.

5. Consent

By submitting personal information to Rocky Ridge Funding through the Site or a financing application, you consent to its collection, use, and disclosure as described in this Policy. Consent may be express (for example, checking a box on an application) or implied by your voluntary provision of information for an obvious purpose (for example, providing contact details in a quote-request form).

You may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice, by contacting our Privacy Officer using the details in Section 13. Withdrawing consent may limit our ability to process an existing application, service an existing financing arrangement, or respond to your inquiry.

6. Disclosure of Personal Information to Third Parties

We do not sell personal information. We may disclose personal information to the following categories of third parties, only as necessary to fulfill the purposes described in Section 4:

Funding partners, lenders, and capital providers involved in evaluating or funding an application.
Credit reporting agencies and financial institutions, for the purpose of verifying creditworthiness.
Service providers who support our operations, such as loan-origination and CRM platform providers, IT and hosting providers, payment processors, and marketing-automation providers, under contractual obligations to protect personal information and to use it only for the purposes we specify.
Professional advisors, including legal, accounting, and compliance advisors.
Regulators, law enforcement, or other parties, where disclosure is required or authorized by law, including in connection with a subpoena, court order, or investigation.
A successor entity, in the event of a merger, acquisition, financing, or sale of all or part of our business, subject to equivalent privacy protections.

7. Cross-Border Storage and Processing

Some of our third-party service providers (for example, cloud-hosting, CRM, or marketing-automation platforms) may store or process personal information outside Canada, including in the United States. Where this occurs, personal information may become subject to the laws of that jurisdiction, including lawful access requests by foreign authorities. We take reasonable contractual and organizational steps to require that service providers protect personal information to a standard comparable to Canadian privacy law, regardless of where it is processed.

8. Cookies and Tracking Technologies

The Site uses cookies, pixels, and similar technologies to operate the Site, remember preferences, understand how visitors use the Site, and support advertising and analytics tools. These may include:

Essential cookies necessary for the Site to function correctly.
Analytics cookies (for example, from web-analytics providers) used to understand aggregate visitor behaviour.
Marketing and advertising cookies, used to measure the effectiveness of our marketing and, where applicable, to deliver relevant advertising.

Most browsers allow you to refuse or delete cookies through their settings. Disabling cookies may affect the functionality of the Site. Where required by law, we will obtain your consent before placing non-essential cookies and will provide a mechanism to manage your preferences.

9. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes described in this Policy, including to satisfy legal, accounting, regulatory, or reporting requirements. Financing-application and account records are generally retained for the duration of the client relationship and for a further period afterward as required by applicable law, limitation periods, and prudent business and lending-industry recordkeeping standards. When personal information is no longer required, we securely destroy, erase, or anonymize it.

10. Security Safeguards

We maintain administrative, technical, and physical safeguards appropriate to the sensitivity of the personal information we hold, including access controls, encryption in transit for the Site, secure storage of application and financial records, and confidentiality obligations for personnel who handle personal information. No method of transmission or storage is completely secure; while we work to protect personal information, we cannot guarantee absolute security.

If we become aware of a breach of security safeguards involving personal information that creates a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada, and the Alberta Office of the Information and Privacy Commissioner where applicable, as required by law.

11. Your Privacy Rights

Subject to limited exceptions permitted by law, you have the right to:

Access the personal information we hold about you and be informed of how it has been used and to whom it has been disclosed.
Request correction of inaccurate or incomplete personal information.
Withdraw consent to our collection, use, or disclosure of your personal information, as described in Section 5.
Ask questions about, or make a complaint regarding, our privacy practices.

To exercise these rights, contact our Privacy Officer using the details in Section 13. We may need to verify your identity before responding, and may charge a minimal fee for access requests where permitted by law after providing you with an estimate. We will respond within the timelines required under PIPEDA and PIPA.

12. Children's Privacy

The Site and our financing services are directed at business owners and operators and are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal information from a child, we will take reasonable steps to delete it.

13. Contact Us / Privacy Officer

Questions, concerns, access requests, or complaints regarding this Policy or our handling of personal information may be directed to our designated Privacy Officer:

200, 1055 20 Ave. NW, Calgary, AB T3M 1E7

Email: daveh@rockyridgefunding.com

Phone: (403) 607-3571

We will acknowledge and investigate all privacy complaints and respond within a reasonable time.

14. Right to Complain to a Regulator

If you are not satisfied with our response to a privacy concern, you have the right to file a complaint with the applicable privacy regulator:

Office of the Information and Privacy Commissioner of Alberta (OIPC) — for matters governed by Alberta’s PIPA.
Office of the Privacy Commissioner of Canada (OPC) — for matters governed by PIPEDA, including where Rocky Ridge Funding’s activities extend beyond Alberta or involve interprovincial or international data flows.

15. Changes to This Policy

We may update this Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. The “Last Updated” date at the top of this Policy indicates when it was last revised. Material changes will be posted on the Site, and, where required by law, we will provide additional notice or seek renewed consent.

16. Governing Law

This Policy, and any dispute arising from it, is governed by the laws of the Province of Alberta and the applicable federal laws of Canada, without regard to conflict-of-law principles.