Privacy Policy

1 · About this policy

Hootan Sal Financial Planning (“HSFP”, “we”, “our”) is the operating name of Hootan Salajegheh, a licensed insurance and investment advisor in Ontario. Insurance and segregated fund products are offered through Crius Financial Inc. This policy explains what personal information we collect through hootansal.ca, why we collect it, how long we keep it, who we share it with, and the rights you have under Canadian privacy law.

The short version: we collect very little, only for purposes you'd expect, we don't sell or share your information, and you can ask us to remove your data at any time by emailing hootan@hootansal.ca.

2 · Who is responsible for your information

The data controller for personal information collected through this site is:

Hootan Salajegheh
Hootan Sal Financial Planning
175 Commerce Valley Dr W
Thornhill, ON L3T 7P6, Canada
Email: hootan@hootansal.ca
Phone: (647) 574-7808

3 · What we collect

We only collect information you give us, or that is automatically generated by your visit.

When you subscribe to the email list

Your email address (required).
Your name (optional).
The date and time you subscribed.
The page you subscribed from (e.g. /blog or /events).

When you register for an event

Your name and email address (required).
Your phone number and profession (both optional).
The date and time you registered.

When you use a financial illustration tool (e.g. the PAR vs. Real Estate calculator)

The numbers you enter into the calculator are stored only in your browser's local storage. They are not transmitted to us and not stored on our servers.

When you visit any page

Standard server log data: a truncated IP address, browser type, referring URL, pages visited, timestamps.
Aggregated analytics via Google Analytics 4 (gtag.js): page views, session duration, device type, country/region-level geolocation. Google sets cookies (_ga and similar) for this purpose.
Performance telemetry via Vercel Speed Insights: page load times, interaction latency, layout stability metrics. The data is anonymised and sampled.

When you book a meeting

You are sent to Calendly. Any information you provide there is governed by Calendly's own privacy policy.

4 · Why we collect it

Information	Purpose	Lawful basis
Subscriber email + name	Send you the essays you signed up for	Express consent at sign-up
Event registration details	Confirm your seat; send reminders	Express consent at registration
Analytics + performance telemetry	Understand how the site is used and improve it	Legitimate business interest; data is aggregated
Server logs	Operate and secure the site	Legitimate business interest

We do not sell your information. We do not use it for advertising. We do not share it with marketers.

5 · How long we keep it

Category	Retention
Active subscribers	Until you unsubscribe
Unsubscribed contacts	We keep the unsubscribe record (date + email) so we don't accidentally re-add you. The row is otherwise inactive.
Event registrants	24 months after the event date, then deleted (unless you have also subscribed to the email list)
Google Analytics	14 months (the default retention)
Server logs	Up to 90 days
Calendly bookings	Per Calendly's policy

If you want any of this deleted sooner, email hootan@hootansal.ca and we will action it within 30 days.

6 · Who we share it with

We use the following sub-processors to operate hootansal.ca:

Sub-processor	What they handle	Location
Vercel	Website hosting, edge delivery, server logs, performance telemetry	United States (regional edge in Canada)
Supabase	Database (subscribers, registrations, blog posts, events, testimonials)	Canada (ca-central-1)
Postmark	Transactional email delivery	United States
Google (Analytics)	Aggregated site analytics	United States
Calendly	Meeting scheduling, when you click “Book a meeting”	United States

We do not transfer your information to any other party for any purpose other than operating hootansal.ca.

7 · International data transfers

Some of these sub-processors process data outside Canada (primarily the United States). When personal information is transferred outside Canada, it may be accessed by foreign governments under their own laws. We rely on contractual protections (data-processing agreements) with each sub-processor.

If you prefer that your information not be transferred outside Canada, do not submit it through this site — contact Hootan directly by phone or in person instead.

8 · Cookies and similar technologies

We use a small number of cookies, all for analytics:

Cookie	Set by	Purpose	Expiry
`_ga`	Google Analytics	Distinguishes unique users	2 years
`_ga_<id>`	Google Analytics	Maintains session state	2 years

You can disable cookies in your browser. Disabling them will not break any function of this site; we simply lose visibility into aggregated usage.

9 · Your rights under PIPEDA

Under Canada's Personal Information Protection and Electronic Documents Act, you have the right to:

Know what we hold about you.Email us and we'll provide a copy within 30 days.
Correct inaccurate information. Email us with the correction.
Have your information deleted.We'll delete what we can within 30 days; some records (e.g. email-delivery logs at our processors) may age out over a longer cycle.
Withdraw consent. Use the unsubscribe link in any email, or email us directly.
File a complaint. With us first (hootan@hootansal.ca) and, if unresolved, with the Office of the Privacy Commissioner of Canada.

10 · CASL — the emails we send

When we email you, it is because:

You subscribed to receive essays from this site, or
You registered for an event we are hosting.

We comply with Canada's Anti-Spam Legislation. Specifically:

We only email people who have expressly opted in.
Every email identifies us (Hootan Sal Financial Planning) and includes our mailing address.
Every email contains a one-click unsubscribe link that remains valid for at least 60 days after sending.
We do not buy email lists, and we do not send unsolicited commercial messages.

11 · Security

We protect your information by:

Encrypting all data in transit (HTTPS).
Storing data in regulated cloud services with their own security controls (Supabase, Vercel, Postmark).
Restricting access to subscriber and registration data to the site owner.
Reviewing and patching software dependencies on a regular cycle.

No system is perfectly secure. If we discover a breach that materially affects you, we will notify you and the Office of the Privacy Commissioner of Canada within the timelines required by PIPEDA.

12 · Children

This site is not directed at, and we do not knowingly collect information from, anyone under 16 years of age. If you believe we have collected information from a minor, contact us and we will delete it.

13 · Changes to this policy

We may update this policy from time to time. When we do, we will update the “Last updated” date at the top. Material changes (new categories of data, new sub-processors, changes in retention) will be announced to subscribers by email.

14 · How to contact us

For any privacy question, request, or complaint:

Hootan Salajegheh, Privacy Contact
Hootan Sal Financial Planning
175 Commerce Valley Dr W
Thornhill, ON L3T 7P6, Canada
hootan@hootansal.ca
(647) 574-7808

We respond to routine requests within five business days and to formal access / correction / deletion requests within 30 days.

This policy is provided in good faith but is not legal advice. See our terms of use for the broader terms governing your use of this site.