Privacy, Data & Legal Security Statements

Privacy, Data & Legal Security Statements

1. Email - User Log-in Authentication
2. Privacy Policy Statement
3. Accountability, Transparency and Disclosure
4. IT Providers to OSBSO.org (OSBSO) or Bungay International Inc. (BII)
5. Data Security Statement
6. Physical Security
7. Network Security
8. People Processes
9. Safeguard Data
10. Redundancy and Business Continuity
11. 3rd Party Security Statements
12. Additional Information

Email - User Log-in Authentication

Anti-Spoof, Anti-Phishing protocols, Authorized Server:

Email authentication is a way to ensure that an email provider will be able to recognize the sender of an incoming message and fight spam and abuse. You can use authentication data to verify the source of any message that you receive. For example, if you receive a message from a big sender (like a financial institution, or a major email provider, like Google, Yahoo or Hotmail) that isn’t authenticated, this message is most likely forged and you should be careful about replying to it or opening any attachments. (Source)

OSBSO or BII authentication methods:

SPF specifies which hosts are allowed to send messages from a given domain by creating an SPF record. We create an SPF record that identifies the OSBSO or BII mail servers as the authorized mail servers for our domain so that recipients may determine it is a valid message.

DKIM allows the sender to electronically sign legitimate emails in a way that can be verified by recipients using a public-key. A 1024-bit domain key is issued.

DMARC Authentication of ALL outbound email to process mail that fraudulently claims to originate from a OSBSO or BII address (phishing, spooring, spam, malicious email). DMARC is a published policy that tells email providers how to handle messages that are sent from OSBSO or BII but aren’t authenticated. OSBSO or BII is able to measure and enforce the authenticity of its emails. By defining a policy, we help combat phishing and related malicious mail, to protect our users.

Goal: "less spam": As an article in Techrepublic stated: "SPF, DKIM, and DMARC don't solve all spam problems: spammers can still send email that people didn't ask for and don't want. But these tools do make it difficult for spammers to send fake messages that appear to have been sent by your organization [OSBSO or BII]." As users of email for primary communication, OSBSO or BII's management believes it owes you the benefit of using SPF, DKIM, and DMARC.

Employees are required to log-in with 2-step verification.

Privacy Policy Statement

OSBSO or BII Stakeholders; Customers and External Providers

1. OSBSO.org or Bungay International Inc. is serious about maintaining your privacy.

2. OSBSO.org or Bungay International Inc. will use its best efforts to secure your information in accordance with generally acceptable business process standards.

3. OSBSO.org or Bungay International Inc. maintains its client data in secured data warehousing facilities as per our data security process. See bottom of this statement for the data security statement.

4. OSBSO.org or Bungay International Inc. has developed policies and procedures to: protect personal information; receive and respond to issues related to privacy and data security; train staff regarding related policies and procedures; communicate the policies and procedures to you, our clients.

5. OSBSO.org or Bungay International Inc. collects client personal information for:

• To provide financing services.
• To facilitate the offering of third party products or services;
• To refer client files to third party institutional and lenders;
• To meet regulatory requirements;
• To manage and transfer the assets and liabilities of OSBSO.org or Bungay International Inc. and those assets under its administration; and
• Applicable business purposes, not elsewhere classified.

OSBSO.org or Bungay International Inc. will not use personal information for any additional purpose unless OSBSO.org or Bungay International Inc. seeks client consent to do so.

6.OSBSO.org or Bungay International Inc. will obtain client consent to collect, use or disclose any personal information except where detailed in this policy. OSBSO.org or Bungay International Inc. will make reasonable efforts to ensure that clients understand how their personal information will be used and disclosed.

7. A client's consent can be express, implied, or given through an authorized representative such as a lawyer, agent or broker. Consent may be given orally, in writing, or electronically. For example, depending on the sensitivity of the information, consent can be expressed over the telephone when information is being collected; electronically when submitting an agreement, application, or other information; in writing when signing an agreement or application form. Implied consent exists when OSBSO.org or Bungay International Inc. can reasonably infer consent based upon the action or inaction of the client.

8. OSBSO.org or Bungay International Inc., however, may collect, use or disclose personal information without the client's knowledge or consent as follows:

• When such collection, use or disclosure is permitted or required by law
• When certain information is publicly available.

9. Subject to borrower disclosure agreement. OSBSO.org or Bungay International Inc. may decline to deal with a client or person who will not consent to the use of information for financing purposes; or who cannot provide verification of identity.

10. OSBSO.org or Bungay International Inc. may periodically use client personal information to conduct client surveys in order to enhance our provision of services or products. If an outside body is employed to conduct research on behalf of OSBSO.org or Bungay International Inc., or provide other services that require access to client information, OSBSO.org or Bungay International Inc. will ensure that appropriate security undertakings, such as confidentiality clauses in contractual arrangements, are employed to protect the transfer and use of personal information.

11. OSBSO.org or Bungay International Inc. will retain client personal information only as long as necessary or expected to be necessary for the identified purposes, or as required by legislation.

12. OSBSO.org or Bungay International Inc. may disclose personal information related to third parties as required to effect a financing transaction.

13. OSBSO.org or Bungay International Inc. will make reasonable efforts to ensure that client personal information is as accurate. In some cases, OSBSO.org or Bungay International Inc. relies on its clients to ensure that certain information, such as the client's address or telephone number, is current, complete, and accurate.

14. OSBSO.org or Bungay International Inc. will update information necessary to fulfill the purposes to maintain an active account. An account is deemed active for 7 years from the date of application; or based upon the time the regulators deem it to remain in file for audit puposes.

15. OSBSO.org or Bungay International Inc. is committed to the safekeeping of client personal information in order to prevent its loss, theft, unauthorized access, disclosure, duplication, use, or modification, and will employ appropriate security measures to protect the information. The measures may include, for example, the physical security of offices and data, and electronic security measures such as passwords and encryption where appropriate.

16. Clients are to direct any complaints, concerns or questions regarding this privacy policy in writing to the Privacy Officer. At any point in this process the client may also write to the Privacy Commissioner.

17. To improve the usability of our website at www.OSBSO or BII we capture information about how users interact with our site and what pages they visit. No personal information is collected as part of this process. The data we collect is used internally to better understand and support our users.

18: Right of access. Subject to law, every person has a right of access to a record or a part of a record in the custody or under the control of an institution unless:

• the record or the part of the record falls within one of the exemptions under the law;
• the head is of the opinion on reasonable grounds that the request for access is frivolous or vexatious, pursuant to the law;
• because of their repetitious or systematic nature, the requests would unreasonably interfere with the operations of the organization or amount to an abuse of the right to make those requests.
• granting access would reveal confidential commercial information;
• the information was collected in accordance with our mortgage fraud watch program;
• the information was generated in the course of a formal dispute resolution process;
• the information would likely reveal personal information about another individual or 3rd party;
• to protect our firm's rights and property.

19. Right of Notification: Pursuant to applicable law, namely Alberta: Notification of loss or unauthorized access or disclosure 34.1(1) An organization having personal information under its control must, without unreasonable delay, provide notice to the Commissioner of any incident involving the loss of or unauthorized access to or disclosure of the personal information (breach) where a reasonable person would consider that there exists a real risk of significant harm to an individual as a result of the loss or unauthorized access or disclosure. (2) A notice to the Commissioner under subsection (1) must include the information prescribed by the regulations.

1(1) Where an organization suffers a loss of or unauthorized access to or disclosure of personal information that the organization is required to provide notice of under section 34.1, the Commissioner may require the organization to notify individuals to whom there is a real risk of significant harm as a result of the loss or unauthorized access or disclosure (a) in a form and manner prescribed by the regulations, and (b) within a time period determined by the Commissioner.

20. Severability of record. Subject to law, if an institution receives a request for access to a record that contains information that falls within one of the exemptions under the law; and the head of the institution is not of the opinion that the request is frivolous or vexatious, the head shall disclose as much of the record as can reasonably be severed without disclosing the information that falls under one of the exemptions.

Referral Privacy Policy: Clients referred to OSBSO or BII by referral sources are subject to this privacy policy.

Accountability, Transparency and Disclosure

OSBSO or Bungay International Inc. is responsible for the Personal Information under its control and has appointed a Chief Privacy Officer to comply in all material respects with applicable privacy legislation and the terms of this Privacy Policy.

The Chief Privacy Officer and those designated by the Chief Privacy Officer address and investigate questions or concerns regarding a Client's Personal Information.

Chief Privacy Officer

548 Rundleridge Drive NE

Calgary, AB T1Y 2K7

IT Providers to OSBSO.org or Bungay International Inc.

As a Best-in-Industry Sector & Best-in-Industry Class company, OSBSO.org or Bungay International Inc. relies on Best-in-Industry Sector & Best-in-Industry Class IT Vendors including the following:

Amazon Web Services, Inc

Google Inc.

Data Security Statement

The following certifications are earned by ourselves or our third-party IT infrastructure and delivery partners:

ISO 9001

ISO 27001

SSAE 16 / ISAE 3402

FISMA

Data is secured by a comprehensive, integrated network of our own internal servers and those of our reliable and proven third party suppliers.

With many users using our OSBSO.org or Bungay International Inc. services, security and data protection are paramount for us. We take security very seriously and have developed a comprehensive set of practices, technologies and policies to help ensure your data is secure.

If you are currently maintaining your data on personal computers or your own servers, the odds are that we offer a better level of security than what you currently have in place.

This document outlines some of the mechanisms and processes we have implemented to help ensure that your data is protected. Our security practices are grouped in four different areas: Physical Security; Network Security; People Processes and Redundancy and Business Continuity.

At a high level, we’ve taken the following approach to secure the OSBSO.org or Bungay International Inc. infrastructure:

• Certifications and Accreditations. Some of OSBSO.org or Bungay International Inc.’s third party suppliers have successfully completed a SAS70 Type II Audit, and will continue to obtain the appropriate security certifications and accreditations to demonstrate the security of our infrastructure and services.
• Physical Security. OSBSO.org or Bungay International Inc. has many years of experience in working with vendors who are in the business of designing, constructing, and operating large-scale data centers. OSBSO.org or Bungay International Inc. infrastructure is housed in supplier-controlled data centers throughout the world. Only those within OSBSO.org or Bungay International Inc. who have a legitimate business need to have such information know the actual location of these data centers, and the data centers themselves are secured with a variety of physical barriers to prevent unauthorized access.
• Secure Services. Each of the services within the OSBSO.org or Bungay International Inc. data system is architected to be secure and contains a number of capabilities that restrict unauthorized access or usage without sacrificing the flexibility that customers demand. This maintains data privacy.

Physical Security

Our third party datacenters are hosted in some of the most secure facilities available today in locations that are protected from physical and logical attacks as well as from natural disasters such as earthquakes, fires, floods, etc.

• 7x24x365 Security. The data centers that host your data are access controlled and guarded seven days a week, 24 hours a day, each and every day of the year by private security guards.
• Video Monitoring. Each data center is monitored 7x24x365 with night vision cameras.
• Controlled Entrance. Access to the OSBSO.org or Bungay International Inc. data centers is tightly restricted to a small group of pre-authorized personnel.
• Biometric, two-Factor Authentication. Two forms of authentication, including a biometric one, must be used together at the same time to enter a OSBSO.org or Bungay International Inc. data center.
• Undisclosed locations. OSBSO.org or Bungay International Inc. servers are located inside generic-looking, undisclosed locations that make them less likely to be a target of an attack.
• Bullet-resistant walls. OSBSO.org or Bungay International Inc. servers are guarded safely inside bullet-resistant walls and perimeter fencing.

Our own office facilities have the following:

• 24 Hour Monitoring. Each office facility is monitored by two-way security systems.
• Controlled Entrance. Access to the OSBSO.org or Bungay International Inc. data centers is tightly restricted to a small group of pre-authorized personnel.
• Physical Barriers. OSBSO.org or Bungay International Inc. offices have bars, locks, secure filing systems with lock access only; and additional preventive measures.

Network Security

Our supplier’s network security team and infrastructure helps protect your data against the most sophisticated electronic attacks. The following is a subset of our network security practices. These are intentionally stated in a very general way, since even knowing what tactics we use is something hackers crave. If your organization requires further detail on our network security, please contact us.

• 128/256-bit SSL. The communication between your computer and our servers is encrypted using strong 128-bit keys (256-bit keys in many cases). What this means is that even if the information traveling between your computer and our servers were to be intercepted, it would be nearly impossible for anyone to make any sense out of it. Please check our product pages for details on which applications or plans support SSL.
• IDS/IPS. Our network is gated and screened by highly powerful and certified Intrusion Detection / Intrusion Prevention Systems.
• Control and Audit. All accesses are controlled and also audited.
• Secured / Sliced Down OS. OSBSO.org or Bungay International Inc. applications run inside a secured, sliced-down operating system engineered for security that minimizes vulnerabilities.
• Virus Scanning. Traffic coming into OSBSO.org or Bungay International Inc. Servers is automatically scanned for harmful viruses using state of the art virus scanning protocols which are updated regularly.

People Processes

Designing and running data center infrastructure requires not just technology, but a disciplined approach to processes. This includes policies about escalation, management, knowledge sharing, risk, as well as the day to day operations. OSBSO.org or Bungay International Inc.'s supplier’s security team has years of experience in designing and operating data centers and continually improves their processes over time. They have developed world class practices for managing security and data protection risk.

• Select Employees. Only employees with the highest clearance have access to our data center data. Employee access is logged and passwords are strictly regulated. We limit access to customer data to only a select few of these employees who need such access to provide support and troubleshooting on our customers' behalf.
• Audits. Audits are regularly performed and the whole process is reviewed by management
• As-Needed Basis. Accessing data center information as well as customer data is done on an as-needed only basis, and only when approved by the customer (i.e. as part of a support incident), or by senior security management to provide support and maintenance.

Safeguard Data

Source: Google.com: Rather than storing each user's data on a single machine or set of machines, we distribute all data—including our own—across many computers in different locations. We then chunk and replicate the data over multiple systems to avoid a single point of failure. We randomly name these data chunks as an extra measure of security, making them unreadable to the human eye.

While you work, our servers automatically back up your critical data. So when accidents happen—if your computer crashes or gets stolen—you can be up and running again in seconds.

Lastly, we rigorously track the location and status of each hard drive in our data centers. We destroy hard drives that have reached the end of their lives in a thorough, multi-step process to prevent access to the data.

Redundancy and Business Continuity

One of the fundamental philosophies of business computing is the acknowledgment and assumption that computer resources will at some point fail. We have designed our systems and infrastructure with that in mind.

• Distributed Grid Architecture. OSBSO.org or Bungay International Inc. services run on a distributed grid architecture. That means a server can fail without a noticeable impact on the system or our services. In fact, on any given week, multiple servers fail without our customers ever noticing it. The system has been designed knowing that server will eventually fail - we have implemented our infrastructure to account for that.
• Power Redundancy. OSBSO.org or Bungay International Inc. configures its servers for power redundancy – from power supply to power delivery.
• Internet Redundancy. OSBSO.org or Bungay International Inc. is connected to the world –and you- through multiple Tier-1 ISPs. So if any one fails or experiences a delay, you can still reliably get to your applications and information.
• Redundant Network Devices. OSBSO.org or Bungay International Inc. runs on redundant network devices (switches, routers, security gateways) to avoid any single point of failure at any level on the internal network.
• Redundant Cooling and Temperature. Intense computing resources generate a lot of heat, and thus need to be cooled to guarantee a smooth operation. OSBSO.org or Bungay International Inc. servers are backed by N+2 redundant HVAC systems and temperature control systems.
• Geo Mirroring. Customer data is mirrored in a separate geographic location for Disaster Recovery and Business Continuity purposes. Please note geo mirroring is available on select products and plans.
• Fire Prevention. The OSBSO.org or Bungay International Inc. data centers are guarded by industry-standard fire prevention and control systems.
• Data Protection & Back-up. User data is backed-up periodically across multiple servers, helping protect the data in the event of hardware failure or disaster.

3rd Party Security Statements

Amazon: http://aws.amazon.com/security/

Google: https://support.google.com/a/answer/60762?hl=en

Zoho: https://www.zoho.com/security.html

Additional Information

While we cannot list all the details of our infrastructure for security reasons, rest assured that OSBSO.org or Bungay International Inc.'s security practices, policies and infrastructure are proven and reliable.

Also visit: Legal - Scroll Down for Legal Section

Feel free to contact us at info@OSBSO.org

OSBSO or BII AND it's 3rd Party IT Vendor's, undergo several independent third party audits to test for data safety, privacy, and security.

Legal Disclaimer - Website

Your use of this Web site is at your own discretion.

The term user and website visitor is deemed to be interchangeable for the purpose of this document.

OSBSO.org or Bungay International Inc. is exempted from all liability or potential liability relating to your use of the information or content of this Web site, including but not limited to any damages, losses or expenses of any kind arising from or in connection with this Web site or its use or any person's inability to use the site, or in connection with any failure of performance, error, omission, interruption, defect, delay in operation or transmission, computer virus or line or system failure, loss of data or otherwise, even if OSBSO.org or Bungay International Inc. is advised of the possibility of such damages, losses or expenses.

Website visitors should conduct their own investigations, analysis, due diligence, draw their own conclusions, and make their own decisions. The user further acknowledges and agrees that OSBSO.org or Bungay International Inc. does not assume and hereby disclaims any liability to any party for any loss or damage caused by the use of the information or documents contained herein or errors or omissions in the information contained in this document to make any investment or borrowing decision, whether such errors or omissions result from negligence, accident or any other cause.

All products and services in the pages of the Site are subject to the terms and conditions of the applicable agreements governing their use, which may change from time to time.

The Disclaimer is to be read by you together with any terms, conditions or disclaimers provided in the pages of the Site and in the Product Specific Legal disclaimers. In the event of any conflict, the terms provided in the pages of the Site and in the Product Specific Legal disclaimers will govern. The Product Specific Legal disclaimers relate specifically to a particular product or service and are displayed on each part of the Site that contains product information. The Product Specific Legal disclaimers contain important information and warnings regarding risks associated with the product or service.

The Product Specific Legal disclaimers should be accessed by you before reading the information for each product displayed on the Site and it is important that you read all of the information.

OSBSO.org or Bungay International Inc. uses reasonable efforts to provide up-to-date, current and accurate information on this Web site but does not warrant its accuracy, adequacy, timeliness or completeness. This Web site is for informational or illustrative purposes only.

OSBSO or BII may monitor and gather information regarding visitors to the Site for the purposes of marketing, security, statistical analysis and systems development.

You should always seek personalized advice from qualified, licensed, registered and insured professionals before making any banking, finance, investment, insurance or financial planning decisions based upon any information provided on or though the Web site.

Rates, fees and other information is subject to change at any time without notice to users and the posted rates and fees on the site may not immediately reflect such changes.

The website www.OSBSO.org and websites related to OSBSO or BII or tradenames of OSBSO.org or Bungay International Inc., and all material herein/therein are the property of OSBSO.org or Bungay International Inc.

No endorsement of any third party products, services or information is made or implied by any information, material or content referenced or included on, or linked from or to this Web site.

Copies or portions thereof may not be reproduced in any form or used in any medium without prior written consent of OSBSO.org or Bungay International Inc.

NOTE TO NON-RESIDENT INVESTORS AND RISK WARNING

OSBSO or BII is incorporated in Canada. Advertising for products and services on this website that can be marketed within applicable jurisdictions that OSBSO or BII is registered to trade in Canada, has been approved to the extent required by law. Potential investors must note that in some or all respects the regulatory regime applying will be different from that of their home jurisdiction.

Mortgage investing is comparatively safe when compared to investing in corporations via stock certificates, corporate debentures or any investment requiring a prospectus or offering memorandum disclosure instrument. While the value of stock market and related public investments can go up and go down (volatility) and investors may not get back the amount originally invested; in mortgage lending you have "double security", in the form of the cashflow earning of the mortgagor and the underlying asset value of the real estate that is secured by your primary mortgage instrument.

The information published on the Site is general information only and is not intended to be specific investment or taxation advice. The information on the Site should not be used as the basis for investment decisions and readers of the Site must consult with appropriately qualified professional advisors, including a Certified Private Equity Mortgage Professional CPEMPTM, before making investment or other financial decisions. You should carefully read the applicable regulatory and non-regulatory disclosures contained on this website and in any literature forwarded to you.

LOCAL LAWS

It is important to note that the products, services and Information may not be available to residents of certain jurisdictions. Accordingly, the financial services detailed in the Site do not constitute an offer to transact business in any jurisdiction where such an offer would be considered unlawful. The Information does not constitute an offer or solicitation to buy or sell any currency, investment fund or other product, service or information to anyone in any jurisdiction in which an offer or solicitation is not authorized or cannot legally be made or to any person to whom it is unlawful to make an offer or solicitation. For information specific to your jurisdiction, please contact your financial advisor or Certified Private Equity Mortgage Professional CPEMPTM.

The terms and conditions applicable to any product, service or information will be those determined at the time of provision of the product, service or information. Please be aware of the laws of your country or that otherwise apply to you in relation to any of the matters described in these pages. If you choose to access the Site, you do so on your own initiative and are responsible for compliance with applicable local, national or international laws.

TRADEMARKS AND COPYRIGHTS

Certain names, words, titles, phrases, logos, icons, graphics or designs or other content in the pages of the Site are trade names or trademarks owned by OSBSO.org or Bungay International Inc. or its subsidiaries, or trade names or trademarks licensed to them. The trademarks are distinguished from one another and accompanied, at first-time use, with the appropriate trade-mark symbol: ®/TM. These symbols are keyed to their respective legend which describes the owner or licensee of the trade-mark: ® Registered trade-mark of OSBSO or BII used, under license by OSBSO.org or Bungay International Inc./ TM Trademark of OSBSO.org or Bungay International Inc., used under license by OSBSO.org or Bungay International Inc. OSBSO or BII is the parent company of (also known as) OSBSO.org or Bungay International Inc.. The display of trademarks and trade names on pages of the Site does not imply that a license of any kind has been granted to anyone else. The Information is for your personal use only. Any unauthorized downloading, re-transmission, or other copying or modification of trade-marks and/or the contents of the Site may be a violation of any federal or other law that may apply to trade-marks and/or copyrights and could subject the copier to legal action. The Information is protected under the copyright laws of Canada and other countries. Unless otherwise specified, no one has permission to copy, redistribute, reproduce, republish, store in any medium, re-transmit, modify or make public or commercial use of, in any form, the Information.

INTERNET E-MAIL

Any unprotected e-mail communication over the Internet is, as with communication via any other medium (e.g. cellular phones, post office mail), not confidential, subject to possible interception or loss, and is also subject to possible alteration. OSBSO or BII is not responsible for and will not be liable to you or any one else for any damages in connection with an e-mail sent by you to OSBSO or BII or an e-mail sent by OSBSO or BII to you at your request or on an ad-hoc basis.

NO ENDORSEMENTS

No endorsement or approval of any third parties or their advice, opinions, information, products or services is expressed or implied by any Information.

NO LIABILITY

OSBSO or BII is not responsible for and will not be liable to you or anyone else for any damages whatsoever (including direct, indirect, incidental, special, consequential, exemplary or punitive damages) arising out of or in connection with your use of or inability to use the Site or the Information, or any action or decision made by you in reliance on the Site or the Information, or any unauthorized use or reproduction of the Site or the Information, even if OSBSO or BII has been advised of the possibility of these damages.

LINKS/SOFTWARE

Links from or to Websites outside the Site are meant for convenience only. OSBSO or BII does not review, endorse, approve or control, and is not responsible for any sites linked from or to the Site, the content of those sites, the third parties named therein, or their products and services. Linking to any other site is at your sole risk and OSBSO or BII will not be responsible or liable for any damages in connection with linking. Links to downloadable material situate on or through other sites are for convenience only and OSBSO or BII is not responsible or liable for any difficulties or consequences associated with downloading such material Use of any downloaded material is governed by the terms of the license agreement, if any, which accompanies or is provided with the software.

JURISDICTION

The Site is administered on behalf of the OSBSO.org or Bungay International Inc. entities that comprise OSBSO or BII Private Lender Network by PrivateLender.org: Canada's Private Lender Network, based in Calgary, Canada. The Site will be governed by and construed in accordance with the laws of Alberta, Canada, without giving effect to any principles of conflicts of laws. All disputes, controversies or claims arising out of or in connection with the Site shall be submitted to and be subject to the exclusive jurisdiction of the Courts of Alberta, Canada. Through accessing the site you agree to submit and attorn to the exclusive jurisdiction of the Courts of Alberta, Canada to finally adjudicate or determine any suit, action or proceeding arising out of or in connection with the Site.

Feel free to contact any member of our team at info@osbso.org, should you have any questions. You may also email us at info@osbso.org.