Privacy Policy

Effective date: July 25, 2026
Version: PP-2026.07.25
Applies to: permoasisretreat.com and the Founding Five review funnel

PermOasis Retreat asks prospective founding households to share enough information to decide whether a serious, long-term relationship is worth exploring. That information can touch finances, work, housing, family life, accessibility, health, values, and personal plans. It deserves to be handled with care.

This Privacy Policy explains what PermOasis Retreat Ltd. collects, why it is needed, how it may be used or shared, how long it is kept, and what choices you have.

1. Scope of this Policy

This Policy applies when you visit permoasisretreat.com, view the embedded Founding Five Information Package, contact PermOasis Retreat, complete a Tally form, participate in a Founder Conversation or follow-up review, pay the $250 CAD Founding Review Deposit through Stripe, or provide information during the pre-closing due-diligence process.

This Policy does not govern final land, share, shareholder, trust, closing, employment, accommodation, wellness, or commercial arrangements. Those arrangements are subject to their own agreements and any additional privacy notices that apply.

2. Who Is Responsible

PermOasis Retreat Ltd. is accountable for personal information under its control, including information processed on its behalf by service providers.

Privacy Officer: Tyler Clark
Organization: PermOasis Retreat Ltd., Canada
Email: tyler@permoasisretreat.com

3. Personal Information We Collect

Website and technical information

• IP address, general location derived from an IP address, device and browser type, operating system, language, referring page, pages viewed, dates and times, and basic server or security logs.

• Cookie choices and information generated by necessary site functions, hosting analytics, Google Analytics, fraud prevention, and embedded third-party content.

• Google Analytics information such as page views, events, session activity, referral or campaign source, browser and device characteristics, approximate geographic information, and cookie or similar identifiers.

• Information about how the website and public Information Package perform, including errors, load times, navigation paths, and aggregate usage patterns.

Inquiries and communications

• Your name, email address, telephone number, current location, preferred method of contact, and the contents of your message.

• Records of emails, calls, meeting notes, questions, document requests, corrections, complaints, and follow-up communications.

• Information you choose to provide through social media or another public communication channel when you contact PermOasis Retreat there.

Founding Homestead application and formal review

• Applicant and household names, contact information, current location, household composition, and expected participants.

• Motivations, preferred timing, housing and construction plans, work or business needs, financial readiness, skills, experience, resources, interests, and potential contributions.

• Lifestyle expectations, privacy and community boundaries, animals, children, transportation, education, accessibility, health or household needs, and other land-design considerations that you choose to disclose.

• Concerns, unresolved questions, responses to uncertainty or disagreement, and information shared during Founder Conversations or follow-up review.

• Application status, package-version acknowledgment, review decisions, internal assessment notes, and correspondence about next steps.

Do not submit unnecessary high-risk information

Do not place a Social Insurance Number, password, banking credential, full payment-card number, government identity document, detailed medical record, or confidential legal advice in the application or ordinary email unless PermOasis Retreat specifically requests it through an appropriate secure process.

Information about other household members

An applicant may provide information about a spouse, partner, child, dependent, or other expected household member. The applicant must have that person’s knowledge and authority to share the information. Information about children should be limited to what is reasonably necessary for household planning and should be supplied by a parent or legal guardian.

Payment information

Stripe processes the $250 CAD Founding Review Deposit. Stripe may collect your name, email address, billing address, payment method, device information, transaction details, and fraud-prevention information. PermOasis Retreat normally receives the payment status, amount, date, transaction identifier, limited billing information, and information needed for receipts, accounting, refunds, disputes, and fraud prevention. PermOasis Retreat does not receive or store your complete card number.

Later due diligence

If a household reaches conditional selection, PermOasis Retreat may need additional identity, financial, legal, property, financing, insurance, or professional-adviser information. At that stage, PermOasis Retreat explains the request, purpose, recipient, and secure method. The public application is not intended to collect proof of funds, identity documents, or lawyer trust information.

4. How We Collect Information

PermOasis Retreat collects information:

• Directly from you through the website, Tally form, Stripe checkout, email, telephone, video or in-person conversations, and documents you choose to provide.

• Automatically through hosting, security, server logs, cookies, and embedded content when you use the website.

• From another adult in your household when that person is authorized to communicate for the household.

• From lawyers, accountants, advisers, references, public records, regulators, or other sources only when relevant, lawful, and reasonably expected in the review or due-diligence process.

5. Why We Use Personal Information

PermOasis Retreat uses personal information to:

• Operate, secure, maintain, troubleshoot, and improve the website and application funnel.

• Provide the public Information Package and record which package version an applicant acknowledged.

• Respond to inquiries and deliver requested information.

• Review a household’s application, ask follow-up questions, conduct Founder Conversations, assess readiness and potential alignment, and make a human decision about whether to continue.

• Coordinate due diligence, professional review, legal documentation, property-specific evaluation, and possible closing steps.

• Process the review deposit, issue receipts, maintain accounting records, apply an eligible credit toward the $95,000 Founding Homestead Commitment, and manage refunds or payment disputes.

• Protect applicants, PermOasis Retreat, service providers, and the public from error, fraud, misuse, security threats, and unlawful activity.

• Comply with legal, tax, accounting, securities, corporate, consumer-protection, privacy, litigation, insurance, and regulatory obligations.

• Create aggregate or de-identified analysis that helps improve the review process without identifying an individual household.

6. Consent and Your Choices

PermOasis Retreat seeks meaningful consent by explaining the important purposes, the sensitive information involved, and the service providers that may process it.

You may decline to provide information that is not reasonably necessary. Some information is needed to answer an inquiry, assess a Founding Homestead application, process a payment, or meet a legal obligation. If you withdraw consent to necessary processing, PermOasis Retreat may be unable to continue the review. Withdrawal does not invalidate processing already completed and does not require deletion of records that must be retained by law or for a legitimate dispute, security, accounting, or regulatory purpose.

Consent to application review is separate from consent to receive promotional email. PermOasis Retreat sends messages needed to answer your request, administer the application, process the review deposit, provide requested documents, or communicate about an active relationship. Promotional messages are sent only with consent or another lawful basis, and each message includes a practical unsubscribe method.

7. AI-Assisted Work and Human Decisions

PermOasis Retreat may use artificial intelligence tools to support research, organization, drafting, comparison, consistency checking, or preparation for human review. AI does not approve or decline an applicant, make a binding commitment, or replace legal, financial, medical, construction, engineering, or other regulated professional judgment.

• Identifiable application information is minimized, redacted, anonymized, or withheld wherever practical.

• AI output is treated as working material, not as a verified fact or independent decision.

• Passwords, banking credentials, full payment-card data, government identity documents, confidential legal advice, and similarly sensitive records are not knowingly placed into general-purpose AI tools.

• PermOasis Retreat does not intentionally submit identifiable application responses for public model training.

• Any materially different use of AI involving identifiable personal information is assessed for necessity, provider safeguards, transparency, and consent before it begins.

Read the AI Use & Verification Standards.

8. When We Share Personal Information

PermOasis Retreat does not sell, rent, or trade personal information or application responses. Information may be disclosed only as reasonably necessary for the purposes in this Policy, including to:

• Hostinger, for website hosting, security, email, storage, and ordinary site functions.

• Google Analytics, for measuring visits, navigation, traffic sources, device and browser patterns, and website performance. PermOasis Retreat does not intentionally configure Google Analytics to receive names, email addresses, application answers, payment details, or other information that directly identifies an applicant.

• Tally, for application collection, form security, storage, and form administration. Tally states that form data is encrypted in transit and at rest and stored in Europe.

• Stripe, banks, card networks, and related payment partners, for payment processing, fraud prevention, receipts, refunds, disputes, and compliance.

• Microsoft OneDrive and Word, for the public embedded Information Package. Microsoft may process device, usage, and cookie information when the viewer loads.

• Technology, security, backup, email, document, and AI service providers used under appropriate access and confidentiality controls.

• Lawyers, accountants, tax advisers, insurers, lenders, surveyors, engineers, architects, planners, regulators, and other qualified professionals when their work requires relevant information.

• Government bodies, regulators, courts, law enforcement, or other persons where required or permitted by law, or where reasonably necessary to protect rights, safety, security, or the integrity of the review process.

• A successor or proposed successor in a genuine corporate reorganization, financing, asset transaction, or similar event, subject to appropriate confidentiality and legal safeguards.

• Any other person when you direct or expressly consent to the disclosure.

The principal provider notices are:

• Hostinger Privacy Policy

• Tally Privacy Policy

• Stripe Privacy Policy

• Microsoft Privacy Statement

• Google Privacy Policy

9. Processing Outside Canada

Some service providers and their subcontractors process or store information outside New Brunswick or outside Canada. Tally states that form data is stored in Europe. Stripe, Hostinger, Microsoft, Google, and other providers may process information in Canada, the United States, Europe, or other jurisdictions where they or their service providers operate. Information in another country may be accessible to courts, law enforcement, or regulators under that country’s laws.

PermOasis Retreat remains accountable for personal information transferred to a service provider for processing and uses contractual, technical, and organizational measures appropriate to the information and service.

10. Cookies, Embedded Content, and Analytics

The website and its providers may use necessary cookies, local storage, server logs, or similar technologies for security, fraud prevention, load balancing, language, display, and basic operation. The OneDrive document viewer, Tally form, Stripe checkout, and other third-party pages may set their own cookies and collect standard device and usage data under their privacy notices.

PermOasis Retreat uses Google Analytics to understand how visitors find and use the website, which pages are useful, and where the site or funnel may need improvement. Google Analytics may use cookies or similar identifiers and receive page and event information, browser and device characteristics, referral or campaign information, and approximate geographic information. In Google Analytics 4, Google states that IP addresses are used for processing but are not logged or stored.

Analytics cookies are optional. Where consent is required, Google Analytics loads only after the visitor accepts analytics cookies through the site’s consent control. A visitor can refuse or withdraw that choice, block or delete cookies through a browser, or use the Google Analytics opt-out browser add-on. Refusing analytics does not prevent access to the website, although embedded readers, forms, checkout functions, and preferences may not work properly if necessary cookies or third-party content are blocked.

Google provides additional information through its Privacy Policy and Google Analytics opt-out browser add-on.

11. How Long We Keep Information

PermOasis Retreat keeps personal information only as long as reasonably necessary for the purpose collected, legal and accounting obligations, dispute periods, security, and the stage of the relationship. The retention schedule is:

• Routine inquiries with no formal application: up to 24 months after the last substantive contact.

• Withdrawn, incomplete, or declined applications: generally up to 24 months after the last substantive review activity, unless the applicant asks for earlier deletion and no legal, security, accounting, or dispute reason requires retention.

• Applications retained for later consideration: only with the applicant’s consent, reviewed at least every 24 months.

• Successful or continuing applicant and due-diligence records: for the active relationship and generally seven years after the last transaction or the end of the relationship, unless a longer or shorter period is required.

• Payment, receipt, refund, tax, and accounting records: generally six years from the end of the last tax year to which they relate, or longer where law, audit, objection, appeal, or litigation requires.

• Google Analytics user and event data: according to the retention setting configured in the Google Analytics property. The setting is reviewed periodically and kept to the shortest period reasonably suited to measurement and security needs.

• Security logs, cookies, and provider backups: according to documented operational and provider retention periods, followed by deletion, overwriting, or de-identification.

Deleted information may remain in restricted backups until the normal backup cycle replaces it. De-identified information that can no longer reasonably identify a person may be kept for planning, statistics, and process improvement.

12. Safeguards

PermOasis Retreat uses safeguards appropriate to the sensitivity, amount, format, and purpose of the information. These may include limited access, account permissions, multi-factor authentication where available, encrypted connections, provider encryption, secure payment processing, confidentiality expectations, backups, update practices, and breach-response procedures.

No online system can be guaranteed completely secure. Applicants should use secure devices, avoid sending unnecessary sensitive records by ordinary email, and contact PermOasis Retreat before transmitting information that may require a more secure method.

13. Access, Correction, Deletion, and Complaints

You may ask what personal information PermOasis Retreat holds about you, how it has been used or disclosed, and request access or correction. You may also request deletion, restriction, or withdrawal of consent where applicable.

Send a written request to tyler@permoasisretreat.com with enough detail to identify the record. PermOasis Retreat may verify identity before releasing or changing information. PermOasis Retreat normally responds within 30 days, subject to any extension or exception permitted by law. If access cannot be provided, PermOasis Retreat explains the reason and the available complaint process, subject to legal limits.

If a concern is not resolved directly, you may contact the Office of the Privacy Commissioner of Canada.

14. Children and Legal Capacity

The Founding Homestead application and review-deposit process are intended for adults who have legal capacity to apply. PermOasis Retreat does not knowingly invite children to submit applications or payments. A parent or legal guardian may provide limited information about a child when reasonably necessary for household and land planning.

If you believe a child submitted personal information directly without appropriate consent, contact the Privacy Officer so the record can be reviewed and, where appropriate, deleted.

15. Privacy Breaches

PermOasis Retreat investigates suspected loss, unauthorized access, misuse, or disclosure of personal information. Where applicable law requires it, PermOasis Retreat keeps breach records, notifies affected individuals, and reports a breach that creates a real risk of significant harm to the appropriate privacy authority.

16. Third-Party Sites

The website links to and embeds services controlled by other organizations. Their privacy practices apply when you use their pages, viewers, forms, payment tools, social platforms, or other services. PermOasis Retreat selects providers deliberately but does not control every independent use those organizations make under their own legal obligations and published policies.

17. Changes to this Policy

This Policy may change as the project, website, providers, laws, application questions, and legal structure develop. The current version and effective date appear at the top. A material change affecting an active applicant is communicated directly or presented for renewed acknowledgment where appropriate. Earlier consent is not treated as permission for a materially different use that requires new consent.

18. Contact

Privacy questions, access requests, corrections, withdrawals, or complaints: tyler@permoasisretreat.com

Tyler Clark, Privacy Officer
PermOasis Retreat Ltd.
Canada