Effective Date: 2025-07-15
1. About This Privacy Policy
RateFinder ("we," "us," "our") is a Canadian loan marketplace platform that connects borrowers with lenders. We are not a direct lender but act as an intermediary service to help you find and compare mortgage rates for residential, commercial, and construction loans.
This Privacy Policy explains how we collect, use, disclose, and protect your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA), Quebec's Law 25, and other applicable Canadian privacy laws.
2. Contact Information
Privacy Officer: info@theratefinder.ca
Mailing Address: 4 Hybrid St, Brampton, ON L7A 0L5, Canada
Phone: 437-221-4858
3. Personal Information We Collect
We collect the following types of personal information:
3.1 Information You Provide Directly
- Identity Information: Name, date of birth, contact information (phone, email, address)
- Financial Information: Income, employment details, assets, liabilities, credit information
- Property Information: Property type, location, value, intended use
- Loan Information: Desired loan amount, term, purpose, down payment
- Consent Records: Records of consents given, withdrawn, or modified
3.2 Information Collected Automatically
- Technical Information: IP address, browser type, device information, operating system
- Usage Data: Pages visited, time spent, clicks, search queries
- Location Data: General geographic location based on IP address
- Analytics Data: Website performance and user interaction data
4. How We Use Your Personal Information
We use your personal information for the following purposes:
4.1 Primary Marketplace Services
- Matching you with suitable lenders based on your loan requirements
- Facilitating communication between you and potential lenders
- Providing loan rate comparisons and marketplace services
- Processing and managing your loan applications
4.2 Platform Operations
- Account creation, management, and authentication
- Customer support and responding to inquiries
- Security monitoring and fraud prevention
- Website analytics and performance improvement
4.3 Legal and Compliance
- Compliance with anti-money laundering (AML) and know-your-customer (KYC) requirements
- Meeting regulatory reporting obligations
- Responding to legal requests and protecting our rights
- Maintaining audit trails and security logs
5. How We Share Your Personal Information
We share your personal information with the following parties:
5.1 Partner Lenders
We share your loan application information with lenders in our network who may be able to provide financing that meets your requirements. Each lender has their own privacy policy governing how they handle your personal information.
5.2 Credit Bureaus and Verification Services
With your consent, we may share information with credit bureaus (Equifax, TransUnion) and income/employment verification services to assist in the loan application process.
5.3 Service Providers
- Technology Providers: Cloud hosting, data storage, and analytics services
- Communication Services: Email, SMS, and notification providers
- Security Services: Fraud detection and cybersecurity providers
- Professional Services: Legal, accounting, and compliance consultants
5.4 Legal and Regulatory Requirements
We may disclose personal information when required by law, court order, or to regulatory authorities such as FINTRAC for anti-money laundering compliance.
6. International Data Transfers
Some of our service providers may store or process your personal information outside of Canada, including in the United States. When we transfer personal information internationally, we:
- Ensure adequate protection through contractual safeguards
- Conduct privacy impact assessments
- Obtain your explicit consent where required
- Maintain oversight of data processing activities
7. Data Retention
We retain your personal information for the following periods:
- Application Data: 7 years from last activity (regulatory requirement)
- Marketing Consent: Until withdrawn or 3 years of inactivity
- Technical Logs: 90 days for security purposes
- Financial Records: 7 years as required by law
When retention periods expire, we securely delete or anonymize your personal information unless longer retention is required by law.
8. Security Measures
We implement comprehensive security measures including:
- Encryption: Data encrypted in transit and at rest using industry standards
- Access Controls: Role-based access with multi-factor authentication
- Monitoring: 24/7 security monitoring and threat detection
- Regular Audits: Third-party security assessments and penetration testing
- Staff Training: Regular privacy and security training for all employees
9. Your Privacy Rights
Under Canadian privacy laws, you have the right to:
9.1 Access and Correction
- Request access to your personal information in our possession
- Request correction of inaccurate or incomplete information
- Receive information about how we use and disclose your data
9.2 Consent Management
- Withdraw consent for specific uses of your information
- Object to certain processing activities
- Modify your communication preferences
9.3 Data Portability (Quebec)
If you are a Quebec resident, you have the right to receive your personal information in a structured, commonly used format and to have it transmitted to another organization.
9.4 How to Exercise Your Rights
To exercise any of these rights, contact our Privacy Officer at info@theratefinder.ca. We will respond to your request within 30 days and may require identity verification.
10. Automated Decision-Making
We use automated systems and algorithms to:
- Match you with suitable lenders based on your profile
- Detect fraudulent or suspicious activities
- Personalize your experience on our platform
You have the right to request human review of any automated decision that significantly affects you. Contact our Privacy Officer to exercise this right.
11. Cookies and Tracking
We use cookies and similar technologies for website functionality, analytics, and user experience. You can manage cookie preferences through your browser settings. Essential cookies required for platform operation cannot be disabled.
12. Privacy Breach Notification
In the event of a privacy breach that poses a real risk of significant harm, we will:
- Notify affected individuals as soon as feasible
- Report the breach to the Privacy Commissioner of Canada
- Take immediate steps to contain and remedy the breach
- Provide updates on our investigation and remedial actions
13. Children's Privacy
Our services are intended for adults (18+ years). We do not knowingly collect personal information from minors. If we become aware that we have collected information from a minor, we will delete it promptly.
14. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our practices or applicable laws. Material changes will be communicated through email or prominent website notice at least 30 days before taking effect.
15. Complaints and Regulatory Contact
If you have concerns about our privacy practices that we cannot resolve, you may file a complaint with:
- Office of the Privacy Commissioner of Canada: www.priv.gc.ca
- Quebec (CAI): www.cai.gouv.qc.ca
- Other provincial privacy commissioners as applicable
Questions About This Privacy Policy?
Contact our Privacy Officer at info@theratefinder.ca, call 437-221-4858, or write to us at 4 Hybrid St, Brampton, ON L7A 0L5, Canada. We're committed to protecting your privacy and will respond to your inquiries promptly.