Privacy Policy

Effective Date: April 24, 2026

Windstone Holdings Inc., together with its affiliates, subsidiaries, related entities, nominee corporations, property ownership entities, and controlled entities, where applicable, is referred to in this Privacy Policy as “Windstone,” “we,” “us,” or “our.”

Windstone is committed to protecting the privacy, confidentiality, and security of personal information in its custody or control. This Privacy Policy explains how Windstone collects, uses, discloses, retains, and protects personal information in connection with its website, business operations, investment activities, property ownership, asset management, and communications with investors, lenders, brokers, vendors, tenants, service providers, professional advisors, and other business counterparties.

This Privacy Policy applies to personal information collected through our website, contact forms, email correspondence, telephone communications, business development activities, acquisition and financing processes, property management operations, asset management activities, and any other interaction where Windstone collects personal information in the course of its business.

Windstone may collect personal information that you provide directly to us, including your name, title, company name, mailing address, email address, phone number, and any information submitted through our website or other communication channels. We may also collect information contained in inquiries, proposals, agreements, diligence materials, transaction documents, investment discussions, vendor documentation, leasing records, financing materials, or other business records provided to Windstone.

In the course of operating our website, Windstone may collect certain technical information, including IP addresses, browser type, device information, pages visited, referral sources, access times, and general website usage data. This information may be collected through cookies, analytics tools, server logs, pixels, tags, or similar technologies used to operate, secure, improve, and understand activity on our website.

Windstone collects personal information only where reasonably necessary for legitimate business, legal, operational, commercial, investment, property management, or compliance purposes. We do not collect personal information indiscriminately, and we seek to limit the information collected to what is relevant for the purpose for which it is obtained.

Windstone may use personal information to respond to inquiries, communicate with business contacts, evaluate acquisition opportunities, assess investment or financing opportunities, conduct due diligence, manage vendor and contractor relationships, administer property operations, oversee asset management activities, process agreements and invoices, maintain business records, coordinate with professional advisors, and protect Windstone’s legal, financial, operational, and commercial interests.

Windstone may also use personal information to operate, maintain, improve, and secure its website; to monitor website performance; to understand visitor engagement; to prevent fraud, unauthorized activity, misuse, or security incidents; and to comply with applicable legal, regulatory, tax, accounting, audit, insurance, contractual, and recordkeeping obligations.

By providing personal information to Windstone, submitting information through our website, communicating with us, or entering into a business relationship with Windstone, you consent to the collection, use, and disclosure of your personal information in accordance with this Privacy Policy. Consent may be express or implied depending on the nature of the interaction, the sensitivity of the information, and the surrounding circumstances.

You may withdraw your consent at any time, subject to legal, contractual, regulatory, operational, and business restrictions. Withdrawal of consent may limit Windstone’s ability to respond to inquiries, maintain a business relationship, complete a transaction, provide information, administer property matters, or comply with applicable obligations.

Windstone does not sell personal information. Windstone may disclose personal information where reasonably necessary to its affiliates, subsidiaries, related entities, nominee corporations, property ownership entities, property managers, leasing agents, brokers, lenders, mortgage professionals, appraisers, environmental consultants, engineers, contractors, insurers, legal counsel, accountants, auditors, tax advisors, consultants, technology service providers, website hosting providers, cloud storage providers, CRM providers, and other third-party service providers.

Windstone may also disclose personal information to banks, lenders, investors, financing sources, prospective purchasers, vendors, counterparties, advisors, insurers, government bodies, courts, regulators, law enforcement agencies, taxing authorities, or other parties where required or permitted by law, or where reasonably necessary in connection with a proposed or completed transaction, financing, refinancing, acquisition, disposition, restructuring, amalgamation, reorganization, sale, transfer, or other business transaction.

Where Windstone transfers personal information to third-party service providers, Windstone takes reasonable steps to require that such providers protect the information and use it only for authorized purposes. Windstone remains responsible for personal information under its control, including personal information transferred to service providers for processing.

Windstone may use cookies and similar technologies on its website to support website functionality, improve user experience, analyze traffic patterns, maintain website security, and measure engagement with website content. You may adjust your browser settings to disable cookies; however, certain website features may not function properly if cookies are disabled. Where required by applicable law, Windstone will provide appropriate notice and obtain consent for the use of cookies or similar technologies.

Windstone uses reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, collection, use, disclosure, copying, modification, loss, theft, or disposal. These safeguards may include restricted access, password protection, secure electronic storage, physical document controls, confidentiality procedures, vendor oversight, and secure deletion or destruction practices.

While Windstone takes reasonable steps to protect personal information, no method of transmission over the internet or method of electronic storage is completely secure. Windstone cannot guarantee absolute security of information transmitted electronically, but we use safeguards appropriate to the sensitivity of the information and the nature of our business.

Windstone retains personal information only for as long as reasonably necessary to fulfill the purposes for which it was collected, or as required or permitted by legal, regulatory, tax, accounting, audit, insurance, contractual, operational, or legitimate business requirements. Retention periods may vary depending on the nature of the information and the purpose for which it was collected.

When personal information is no longer required, Windstone will take reasonable steps to securely destroy, delete, or anonymize it, subject to applicable legal, contractual, regulatory, operational, and business recordkeeping requirements.

Windstone takes reasonable steps to ensure that personal information used for business, legal, operational, or decision-making purposes is accurate, complete, and up to date as necessary for the purposes for which it is used. You may contact Windstone to request correction of inaccurate or incomplete personal information.

Subject to applicable legal exceptions, you may request access to the personal information Windstone holds about you. Windstone may require reasonable verification of your identity before responding to an access or correction request. Windstone may decline or limit access where permitted or required by law, including where disclosure would reveal confidential commercial information, privileged information, personal information about another individual, information relating to an investigation or dispute, or information that cannot be disclosed for legal, security, or commercial reasons.

Windstone may use service providers located in Canada, the United States, or other jurisdictions. As a result, personal information may be stored, processed, or accessed outside your province or country of residence. Where personal information is processed outside Canada, it may be subject to the laws of the jurisdiction in which it is located, including lawful access by courts, law enforcement, regulators, or government authorities.

In connection with any proposed or completed acquisition, disposition, financing, refinancing, investment, merger, amalgamation, restructuring, reorganization, sale, transfer, due diligence process, or other business transaction, Windstone may disclose personal information to counterparties, lenders, investors, purchasers, vendors, advisors, insurers, and other transaction participants. Such disclosure will be limited to what is reasonably necessary for the transaction and, where appropriate, subject to confidentiality protections.

Windstone may collect, use, retain, or disclose personal information without consent where permitted or required by law, including to comply with court orders, subpoenas, legal processes, regulatory requests, tax requirements, statutory obligations, or insurance requirements. Windstone may also use or disclose personal information where necessary to protect its rights, property, business interests, security, legal position, contractual rights, or to investigate or prevent fraud, misuse, security incidents, unlawful activity, or contractual breaches.

Windstone maintains procedures to assess and respond to suspected privacy incidents involving personal information. Where required by applicable law, Windstone will notify affected individuals, regulators, and other required parties of a breach of security safeguards if the breach creates a real risk of significant harm.

Our website may contain links to third-party websites, platforms, or resources. Windstone is not responsible for the privacy practices, content, security, or policies of third-party websites. Accessing third-party websites is at your own discretion, and you should review the privacy policies of those third parties before providing personal information.

Nothing submitted through the Windstone website creates an investor relationship, advisory relationship, fiduciary relationship, partnership, agency relationship, or other special relationship with Windstone. Nothing on the website constitutes an offer to sell, a solicitation to buy, or a recommendation regarding securities, investments, financing, real estate, or any other transaction.

Windstone’s website and services are intended for business and commercial audiences. Windstone does not knowingly collect personal information from individuals under the age of majority. If Windstone becomes aware that it has collected personal information from a minor without appropriate consent, it will take reasonable steps to delete the information, subject to applicable legal, contractual, operational, or business requirements.

Windstone may amend this Privacy Policy from time to time. Any revised version will be posted on this page with an updated effective date. Your continued use of the website or continued interaction with Windstone after changes are posted constitutes acceptance of the revised Privacy Policy, subject to applicable law.

Questions, access requests, correction requests, consent withdrawal requests, or privacy complaints may be directed to Windstone Holdings Inc., Attention: Privacy Officer, at info@windstone.ca. Windstone will review and respond to privacy inquiries in accordance with applicable law.