Nordvik Capital Inc. has established a personal information governance policy, approved by our designated Privacy Officer. This policy defines our team's roles and responsibilities across the entire data lifecycle, from collection to destruction. It governs secure retention and disposal, sets out a process for handling privacy complaints, and outlines the protocol for confidentiality incidents—including maintaining an incident registry and notifying the Commission d’accès à l’information and affected individuals when an incident presents a risk of serious injury. We conduct privacy impact assessments before acquiring, developing, or overhauling any information system or electronic service delivery project involving personal information, and our team is thoroughly trained on these requirements. For more information, please contact our Privacy Officer.