LAST RESORT CANADA INTERNATIONAL PTY., LTD., operating as LastResorty (“LastResorty”, “we”, “us”), helps people who have lost money to fraud. To do that, we need to handle personal information that is often sensitive. This policy explains what we collect, why, who we share it with, and the choices and rights you have. It applies to our website, our case review form, and our services.
We comply with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and, for residents of Quebec, the Act respecting the protection of personal information in the private sector as amended by Law 25.
Our Privacy Officer
Our Privacy Officer is responsible for how we handle personal information. You can contact them at:
- Email: support@lastresorty.com
What we collect
- Information you give us: your name, email address, phone number, preferred language, and the details of what happened to you (the type of scam, approximate amount, when it happened, whether you have reported it, and anything you choose to tell us in your own words).
- Case documents: when you become a client, the evidence you choose to share, such as screenshots, chat histories, exchange statements, transaction IDs and police report numbers.
- Technical information: basic information about your visit, such as pages viewed, browser type and approximate location derived from your IP address. Analytics and advertising cookies are only used with your consent (see our Cookie policy).
- Communications: records of calls, emails and messages with our team.
We never ask for, and never want, your recovery (seed) phrase, private keys or passwords. Our forms are designed to block them. If you send them to us by mistake, we delete them and tell you to move your funds to a new wallet.
Why we use it
- To review your case and tell you whether we can help.
- To provide our services: investigation, blockchain tracing, complaints and escalations, and coordination with partner lawyers, police and the Canadian Anti-Fraud Centre.
- To contact you about your case by the channels you have agreed to.
- To meet our legal, accounting and regulatory obligations.
- To improve our website and services, using aggregated and, where possible, anonymized information.
- With your separate consent only: to send you occasional updates or guides. You can unsubscribe at any time.
Who we share it with
We share personal information only as needed to help you, and never sell it.
- Independent partner lawyers, when your case needs legal action and you have agreed to it.
- Banks, card issuers, exchanges, stablecoin issuers and ombudsman services, when we submit complaints, freeze requests or escalations on your behalf.
- Police and the Canadian Anti-Fraud Centre, to support your report.
- Service providers that help us operate: our case management system, email delivery, SMS and phone services, and secure hosting. They may only use your information to provide services to us.
- Authorities, where the law requires it.
Some of our service providers process information outside Canada (for example, in the United States). When that happens, your information is protected by contract and may be subject to the laws of that country. These providers are: Postmark (email delivery, United States), Twilio (text messages, phone and WhatsApp, United States) and Google and Meta (only if you accept marketing cookies, United States). Our case management system and website are hosted in Canada.
How long we keep it
- Case review requests that do not become cases: 24 months, then deleted.
- Client files: 7 years after the case is closed, for legal and accounting reasons.
- Consent records (for example, your agreement to be contacted): as long as needed to prove consent.
How we protect it
Our website and systems are hosted on servers in Canada. Information is encrypted in transit and at rest, access is limited to staff who need it, and backups are encrypted. No system is perfectly secure; if a breach creates a real risk of significant harm, we will notify you and the relevant privacy authorities as the law requires.
Your rights
You can ask to:
- access the personal information we hold about you;
- correct information that is inaccurate or incomplete;
- withdraw your consent (this may limit what we can do for you);
- have your information deleted where we no longer need it;
- in Quebec, receive your information in a structured, commonly used technological format.
Contact our Privacy Officer to make a request. We will respond within 30 days.
Complaints
If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada (priv.gc.ca) or, in Quebec, the Commission d’accès à l’information (cai.gouv.qc.ca).
Changes
We may update this policy. The date at the top of the page shows when it was last changed.