Privacy Policy

Last updated: July 19, 2026

Crossbridge Business Brokers Inc., brokerage ("Crossbridge", "we", "us", or "our") respects your privacy and is committed to protecting the personal information you entrust to us. This Privacy Policy explains what personal information we collect, why we collect it, how we use and disclose it, and the choices and rights you have. We handle personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and other applicable Canadian privacy laws. As a registered brokerage, we also handle information in keeping with our obligations under the Trust in Real Estate Services Act, 2002 (TRESA) and the requirements of the Real Estate Council of Ontario (RECO).

This policy applies to personal information we collect through our website at crossbridgebb.com, through our booking and intake tools, and in the course of providing our brokerage and advisory services.

1. Accountability

Crossbridge is responsible for the personal information under its control. We have designated a Privacy Officer who is accountable for our compliance with this policy and with applicable privacy law. When we transfer personal information to a service provider for processing, we use contractual and other means to provide a comparable level of protection. You can reach our Privacy Officer using the details in the How to contact us section below.

2. Information we collect

We collect personal information that you provide to us, information we collect automatically when you use our website, and, in some cases, information from third parties.

Information you provide to us

• Contact and inquiry information such as your name, email address, telephone number, and the contents of any message when you call, email, or otherwise contact us.
• Consultation booking information when you schedule a call through our online booking tool, including your name, email, phone number, and any details you choose to share about your business or your inquiry.
• Buyer and seller intake information when you complete a buyer disclosure or similar form, including information about your acquisition criteria, background, and financial capacity.
• Engagement information that you provide during a brokerage or advisory engagement, which may include financial statements, business records, ownership details, and other information about you and your business needed to provide our services.

Information we collect automatically

• Technical and usage information such as your IP address, browser type, device information, pages viewed, and the date and time of your visit. This information is generated in the ordinary operation of our website and hosting infrastructure and is used to keep the site secure and functioning.

Information from third parties

• We may receive personal information from third parties such as referral sources, your professional advisors (for example, your accountant or lawyer, where you have authorized them to share it), and, in a transaction, the other party's representatives.

We do not knowingly collect sensitive information such as government identifiers unless it is necessary for a specific, disclosed purpose, and we do not require you to provide more information than is needed for the purpose at hand.

3. Why we collect it

We collect, use, and disclose personal information for purposes that a reasonable person would consider appropriate in the circumstances, including to:

• respond to your inquiries and schedule and conduct consultations;
• provide our brokerage and advisory services, including preparing valuations, marketing a business confidentially, qualifying and screening buyers, and facilitating a transaction;
• match qualified buyers with opportunities that fit their stated criteria;
• communicate with you about your engagement and, where you have consented, send you relevant updates;
• operate, maintain, and secure our website;
• meet our legal, regulatory, insurance, and professional obligations, including record-keeping required under TRESA and by RECO; and
• establish, exercise, or defend legal claims.

4. Consent

We collect, use, and disclose your personal information with your consent, except where the law permits or requires us to do so without it. Your consent may be express (for example, when you complete a form or agree to an engagement) or implied (for example, when you email us with an inquiry, which implies consent to use your information to respond).

Where we send commercial electronic messages, we do so in accordance with Canada's Anti-Spam Legislation (CASL). Every marketing email includes a way to unsubscribe. You may withdraw your consent to non-essential communications or to certain uses of your information at any time, subject to legal or contractual restrictions and reasonable notice, by contacting our Privacy Officer. Withdrawing consent may limit our ability to provide certain services to you.

5. How we use and disclose it

We use personal information only for the purposes described in this policy or as otherwise permitted by law. We may disclose personal information to:

• Service providers who perform functions on our behalf, such as scheduling, form intake, website hosting, email, and document management (see the next section);
• Parties to a transaction and their advisors, but only as needed to advance a transaction you are involved in, and, where confidentiality applies, only after a confidentiality agreement is in place;
• Professional advisors such as lawyers, accountants, and insurers, where appropriate;
• Regulators and authorities, including RECO, and other parties where we are required or permitted to do so by law, regulation, legal process, or to protect our rights; and
• A successor entity in connection with a reorganization, financing, or sale of all or part of our business, subject to appropriate confidentiality protections.

We do not sell your personal information.

6. Service providers and data location

We use trusted third-party services to operate our website and to communicate with you. These currently include a website hosting provider, an online scheduling tool used to book consultations, and an online forms tool used for intake. These providers process only the information needed to perform their function and are bound to protect it.

Some of our service providers, or their sub-processors, may store or process personal information outside Canada, including in the United States. While information is in another jurisdiction, it may be subject to the laws of that jurisdiction, including lawful access by courts, law enforcement, and government authorities there. We take reasonable steps to ensure our providers offer a comparable level of protection to that required in Canada. If you would like more information about our service providers and where your information may be processed, please contact our Privacy Officer.

7. Cookies and website data

Our website is designed to be light and privacy-respecting. We do not use advertising trackers or third-party marketing pixels. Our hosting provider and any embedded tools (such as the scheduling and forms tools, when you use them) may use cookies or similar technologies that are necessary for those functions to work and to keep the site secure. Most browsers let you refuse or delete cookies; doing so may affect how some features work. If we introduce analytics or additional cookies in the future, we will update this policy accordingly.

8. How we protect your information

We maintain physical, organizational, and technological safeguards appropriate to the sensitivity of the information, to protect personal information against loss or theft and against unauthorized access, disclosure, copying, use, or modification. These measures include limiting access to those who need it to do their work, using reputable service providers, and applying confidentiality practices throughout our engagements. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information and to respond appropriately in the unlikely event of a breach.

9. How long we keep it

We keep personal information only as long as necessary to fulfill the purposes for which it was collected and to meet our legal, regulatory, and professional obligations. For transactions and records governed by TRESA, we retain records for the period required by RECO, which is generally at least six years. When personal information is no longer required, we securely destroy, erase, or anonymize it.

10. Accuracy

We take reasonable steps to keep personal information accurate, complete, and up to date for the purposes for which it is used. Please help us by letting us know if your information changes.

11. Access and correction

You have the right to ask whether we hold personal information about you, to request access to that information, and to ask us to correct it if it is inaccurate or incomplete. To make a request, contact our Privacy Officer using the details below. We will respond within the timeframe required by law. We may need to verify your identity before responding, and in limited circumstances the law allows or requires us to decline access, in which case we will explain why.

12. Links to other websites

Our website may link to third-party websites and tools that we do not control, including our scheduling tool, forms tool, and social media pages. This policy does not apply to those sites. We encourage you to review the privacy policies of any third-party site you visit.

13. Children's privacy

Our services are directed to business owners and professional parties, not to children. We do not knowingly collect personal information from children.

14. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in the law. When we do, we will revise the "Last updated" date above. Material changes will be posted on this page. Your continued use of our website after an update means you accept the revised policy.

15. How to contact us

If you have a question, a request to access or correct your information, or a concern about how we handle your personal information, please contact our Privacy Officer:

We will acknowledge and address your concern. If you are not satisfied with our response, you have the right to contact the Office of the Privacy Commissioner of Canada at www.priv.gc.ca.