Effective Date: August 28, 2025
Legal Entity: XGC CORP. (an Ontario corporation)
Registered Address: 372 Bay Street, Suite 1800, Toronto, ON M5H 2W9, Canada
Privacy Contact: Chief Counsel, Barnet Goldberg
This Privacy Policy explains how XGC CORP. ("XGC", "we", "our") collects, uses, discloses, and protects personal information when you visit our websites, use our software and services, attend our events, or otherwise interact with us. It applies worldwide to all individuals whose data we process, with region‑specific rights explained in Section 12.
XGC adheres to Canada’s PIPEDA fair information principles and comparable global frameworks including the EU/UK GDPR, California CCPA/CPRA, Brazil LGPD, South Africa POPIA, and Singapore PDPA. Where local law affords you stronger rights, we honor those rights.
We collect the following categories of personal information (depending on your relationship with us and applicable law):
Sources include information you provide directly, automated collection via our services, and third parties (e.g., partners, public databases, fraud‑prevention services) as permitted by law.
We process personal data to:
Legal bases (EU/UK GDPR): performance of a contract; compliance with legal obligations; our legitimate interests (e.g., service safety, improvement, B2B relationship management) balanced against your rights; and consent for specific activities (e.g., certain cookies/precise geolocation/optional marketing).
Canada (PIPEDA): we follow the principles of accountability, identifying purposes, consent, limiting collection/use/retention, accuracy, safeguards, openness, individual access, and challenging compliance. Consent may be implied for obvious purposes or required expressly depending on context; you can withdraw consent subject to legal/contractual limits.
We use first‑party and third‑party cookies, pixels, and SDKs for:
You can manage cookies via our cookie banner (where offered) and your browser settings. Some features may not function without certain cookies. See our Cookie Notice for details on vendors and retention.
We disclose personal data to:
Because we operate globally, data may be processed in countries with different laws. Where required, we use appropriate transfer safeguards (e.g., Standard Contractual Clauses, UK IDTA/Addendum, and comparable mechanisms) and implement technical/organizational measures to protect data.
We retain personal data only for as long as necessary to fulfill the purposes described above, comply with legal, regulatory, taxation, accounting, or reporting requirements, resolve disputes, and enforce agreements. Where feasible, we anonymize or aggregate data.
We use administrative, technical, and physical safeguards proportionate to the sensitivity of the data, including access controls, encryption in transit and at rest (where applicable), secure software development practices, logging/monitoring, vulnerability management, and vendor due diligence. No system is 100% secure; please use strong, unique passwords and enable multi‑factor authentication where available.
Our services are not directed to children. We do not knowingly collect personal information from children under the age of 13 (or a higher age threshold where required, e.g., 16 in parts of the EU for certain online services). If you believe a child provided personal information, contact us so we can take appropriate steps.
We do not engage in solely automated decisions with legal or similarly significant effects without appropriate human review. Where we use profiling or risk scoring (e.g., security/fraud detection), we do so in accordance with applicable law and provide meaningful information upon request.
You have the right to access and request correction of your personal information and to challenge our compliance. We follow the ten fair information principles and will explain purposes, obtain appropriate consent, and limit collection, use, and retention.
You have the right to: access; rectification; erasure; restriction; portability; and to object to processing (including direct marketing). You may also have rights against decisions based solely on automated processing. Our legal bases are outlined in Section 4.
California residents have the right to: know/access; delete; correct; non‑discrimination; and to opt‑out of the “sale” or “sharing” of personal information. You may also limit the use and disclosure of sensitive personal information and opt out of cross‑context behavioral advertising. If we “sell” or “share” data (as defined by California law), we will provide a “Do Not Sell or Share My Personal Information” mechanism and honor Global Privacy Control (GPC) signals where required.
Brazilian residents have rights to: confirmation of processing; access; correction; anonymization/blocking/deletion of unnecessary or excessive data; portability; deletion of data processed with consent; information about data sharing; withdrawal of consent; and complaint.
You have rights to be notified of collection or data breaches, to access your information, to request correction or deletion, to object to processing (including direct marketing), to not be subject to certain automated decisions, and to lodge a complaint with the Information Regulator.
You have rights to be informed of purposes, to access and correct personal data, and to withdraw consent. You may also register numbers on the Do Not Call (DNC) Registry to opt out of unsolicited marketing calls, messages, and faxes.
Note: If your jurisdiction is not listed, we will still handle requests consistent with local laws and our commitment to global privacy standards.
Submit a request using our contact methods below. To protect privacy, we may verify your identity (and, where allowed, authorized agents) before fulfilling a request. We will respond within the timeframes required by applicable law. Some rights may be subject to limitations or exemptions (e.g., legal holds, security, the rights of others).
Our sites and services may link to third‑party websites, plug‑ins, or services. We are not responsible for their privacy practices. We encourage you to read their privacy notices.
We may update this Policy from time to time. When we do, we will revise the “Effective Date” and, where required, provide a prominent notice or obtain your consent.
XGC CORP. — Privacy Office
Attn: Chief Counsel, Barnet Goldberg
372 Bay Street, Suite 1800
Toronto, ON M5H 2W9, Canada
Email: privacy@xgccorp.com (or use our website’s contact form)
If we cannot resolve your concern, you may have the right to contact a supervisory authority/regulator in your region (e.g., Office of the Privacy Commissioner of Canada, your EU/UK data protection authority, the California Privacy Protection Agency, Brazil’s ANPD, South Africa’s Information Regulator, or Singapore’s PDPC).
This Policy is intended to be clear and comprehensive but not a contract that creates legal rights beyond those provided by applicable law.