Portal Privacy Notice
Effective 22 June 2026
This notice covers the investor portal at portal.alta-fund.com.
It supplements — and does not replace — the privacy notice in your
subscription package, which governs your investment information.
Who we are
The portal is operated for Alta Real Estate II L.P. (Fund II — an Ontario limited partnership) and Alta Real Estate, L.P. (Fund I). The general partner of Fund II is Alta G-P II LLC, a Delaware limited liability company (1301 Avenue of the Americas, 25th Floor, New York, NY 10019).
Questions, or to exercise a privacy right, contact our Privacy Officer at privacy@alta-financial.com. Canadian residents may also escalate to the Office of the Privacy Commissioner of Canada.
What the portal collects
- Account data: your name, the email you log in with, and the certificate IDs tied to your investment.
- Usage data the portal generates: login events (timestamp, IP address, device/browser) and a record of which of your own documents you open or download.
- One session cookie (
__Host-wos-session) — encrypted, Secure, HttpOnly, SameSite=Strict — used only to keep you signed in. No advertising, analytics, or tracking cookies.
Sign-in is handled by WorkOS; we never receive your password or multi-factor secret. Your broader investment information (holdings, financial and tax data) is described in the privacy notice in your subscription package, not here.
How we use it
To authenticate you, authorize access to your own documents, keep an audit trail for security and compliance, and send you operational emails when a new report is available. Those emails are account/transactional messages — not marketing. We do not use portal activity for marketing or profiling.
How we share it
Only with our service providers acting for us under contract — WorkOS (authentication) and Cloudflare (hosting) — and with our professional advisers, auditors, and regulators as required by law. We do not sell or rent your information or share it for marketing.
Where it's processed
The portal is hosted in the United States. If you reside outside the U.S. (e.g., Canada or Mexico), your information is transferred to and stored in the U.S. and, while there, may be subject to access by U.S. courts and authorities; we bind our providers by contract to a comparable level of protection.
How long we keep it
Audit logs are retained for 7 years (immutable). Session records are kept about 30 days. Account information is retained for the life of your investment plus 7 years, subject to legal and tax retention.
Your rights
Email privacy@alta-financial.com to access or correct your information, or to ask us to delete data no longer required (subject to legal, tax, and security retention — notably the 7-year audit logs). Canadian residents may challenge our compliance and escalate to the OPC. Mexican residents exercise their ARCO rights through the separate Spanish-language aviso de privacidad.
Security
TLS in transit, AES-256 at rest, multi-factor authentication at sign-in, edge authorization on every file request, immutable audit logging, and a written information-security program with vendor oversight.
Breach notification
If a breach affects your information, we will notify affected individuals and any required regulators without undue delay and within the shortest period required by applicable law (from discovery); Mexican residents are notified immediately, as the LFPDPPP requires.
Which laws apply
Because the fund is an Ontario (Canadian) limited partnership, PIPEDA applies; because the fund has a U.S. nexus, U.S. financial-privacy law (GLBA) applies (the GLBA privacy notice is delivered with your subscription package); and if you are a Mexican resident, Mexico's LFPDPPP applies and you receive a separate aviso de privacidad.
Governing law; changes
This notice is governed by the laws of the State of Delaware, consistent with your subscription agreement; this does not displace the mandatory privacy laws of your home jurisdiction. We will email you about material changes and update the effective date above.