Privacy Policy

---

Data Protection and Privacy Policy

At IAG Investments and Consulting, we are committed to upholding the highest standards of data protection and privacy for our clients across the United States, its territories, and internationally. This policy outlines our practices and principles for collecting, using, and safeguarding personal information, ensuring compliance with applicable U.S. federal and state laws, as well as international regulations relevant to our clients in Europe and Canada.

United States Compliance

In the United States, we adhere to the principles set forth by the General Data Protection Regulation (GDPR) for European clients, the California Consumer Privacy Act (CCPA) for California residents, and other relevant state laws that regulate data privacy and protection. Our practices include:

• Data Minimization: Collecting only the information necessary for the specific purposes outlined at the time of collection.
• Consent: Obtaining clear, informed consent for the collection and processing of personal data, with provisions for clients to withdraw consent at any time.
• Data Security: Implementing robust security measures to protect personal information from unauthorized access, alteration, disclosure, or destruction.
• Transparency: Ensuring transparency about data collection, use, and sharing practices, and providing clients with access to their personal information upon request.

European and Canadian Compliance

To serve our clients in Europe and Canada, we comply with the GDPR and the Personal Information Protection and Electronic Documents Act (PIPEDA), respectively. Key aspects of our compliance include:

• Lawful Basis for Processing: Processing personal data only where a lawful basis exists, such as consent, contractual necessity, or legitimate interest.
• Data Subject Rights: Respecting the rights of data subjects, including the right to access, correct, delete, or port their personal data, and the right to object to or restrict processing.
• Cross-Border Data Transfers: Ensuring that any transfer of personal data outside of Europe and Canada is carried out in compliance with GDPR and PIPEDA requirements, utilizing approved transfer mechanisms to safeguard data.

International Data Transfers

For international data transfers, including those from Europe and Canada to the United States, we adhere to established transfer mechanisms that provide adequate data protection as per GDPR and PIPEDA guidelines. This includes the use of Standard Contractual Clauses (SCCs) and adherence to Privacy Shield principles where applicable.

Website Compliance

Our website and digital platforms are designed to be compliant with international data protection laws, including GDPR and PIPEDA. This includes:

Cookie Consent: Providing clear information about the use of cookies and obtaining consent prior to their use.

Privacy Notices: Displaying clear privacy notices that outline the purpose and methods of data collection, use, and sharing.

Age Restrictions: Ensuring compliance with laws regarding the collection of data from minors, including obtaining consent from a parent or guardian where required.

Continuous Review and Update

We regularly review and update our data protection and privacy practices to remain compliant with evolving legal requirements and best practices in every jurisdiction in which we operate. Our commitment to data protection and privacy is integral to our mission of providing trusted, professional consulting services globally.

Clients and users are encouraged to review this policy periodically for updates. For any questions or concerns regarding our data protection and privacy practices, please contact us directly.