Privacy Policy

Who we are

Shipra is an investment management firm based in Ontario, Canada. This policy explains how we handle personal information collected through this website, in line with the Personal Information Protection and Electronic Documents Act (PIPEDA) and its ten fair information principles.

Our Privacy Officer is accountable for this policy and can be reached at hello@shipra.ca.

Information we collect

• Information you provide: your name, email address, phone number (optional), investor type and message when you use our contact form.
• Technical and usage information: your IP address is processed briefly for security and rate limiting and is stored only as a one-way hash. We also collect website usage statistics through Plausible, which is cookieless and does not identify you, and through Google Analytics, which uses cookies (see “Cookies and analytics” below).

How we use it

• To respond to your inquiry and send you a one-time confirmation that we received it.
• To assess, if you ask, whether an offering may be suitable for you and whether you qualify under applicable prospectus exemptions.
• To protect this website from spam and abuse, and to meet legal and regulatory obligations.

Consent

By submitting the contact form you consent to the uses described above. You may withdraw consent at any time by writing to us; this may limit our ability to respond to you.

By continuing to use this website, you consent to our use of Google Analytics as described under “Cookies and analytics”. You can withdraw this consent at any time by opting out as described there.

Disclosure to service providers

We use service providers who process information on our behalf under contract: Amazon Web Services (email delivery via Amazon SES, processed in Canada in the ca-central-1 region), Upstash (rate limiting, storing only hashed IP and email values briefly), Vercel (website hosting), Sanity (content management), Plausible (cookieless analytics) and Google (Google Analytics website statistics). We may disclose information to regulators or authorities where required by law. We do not sell personal information.

Transfers outside Canada

Some service providers, including Google, may process data in the United States. Information processed outside Canada may be subject to the laws of that jurisdiction.

Retention

We keep inquiry information only as long as needed for the purposes above and our legal obligations, then securely delete it. Security hashes used for rate limiting expire automatically within 24 hours.

Safeguards

Information is encrypted in transit, access is limited to people who need it, and our service providers apply industry-standard security controls.

Your rights

You may request access to, or correction of, the personal information we hold about you by contacting our Privacy Officer. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.

Cookies and analytics

This website sets no advertising cookies. We use Google Analytics, a web analytics service provided by Google LLC, to understand how visitors use the website, such as which pages are viewed and how visitors find us. We do not use it for advertising or to identify you.

Google Analytics sets first-party cookies (named “_ga” and “_ga_” followed by an identifier) that store a randomly generated ID so that repeat visits can be counted. They expire after up to two years. Google receives information such as the pages you view, the website that referred you, your browser and device type, and your approximate location derived from your IP address; Google Analytics does not store IP addresses. Google describes how it uses this information in its privacy policy.

You can opt out at any time by blocking or deleting cookies in your browser settings, or by installing Google’s opt-out browser add-on.

We also use Plausible, which is cookieless and does not identify individuals. The only other cookie is a strictly necessary security cookie, used only if your browser has JavaScript disabled, to protect the contact form from spam. It contains no personal information and expires within two hours.

Children

This website is not directed at children and we do not knowingly collect their information.

Changes

We may update this policy. The “last updated” date above shows when it last changed.