Effective date of this Privacy Policy: October 29, 2025
- Introduction
OnLendHub (“we”, “our”, “us”) respects your privacy and is committed to protecting personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws. This Privacy Policy explains what information we collect, why we collect it, how we use and disclose it, and your rights. - Scope and applicability
This privacy policy applies to personal information collected through our website, mobile interfaces, and related online services in the course of offering mortgage agent services in Canada. It does not apply to information collected by third parties not under our control. - What we collect
- Contact details: name, email, telephone, postal address from contact forms, newsletter sign-ups, and inquiries.
- Mortgage application data: employment, income, assets, liabilities, credit information, property details, government identification numbers (as needed for applications).
- Communications: messages, emails, and recorded calls where you have consented.
- Transaction data: payment and billing information when you make purchases or pay fees.
- Technical data: IP address, device and browser information, operating system, pages visited, referring URLs.
- Cookies and tracking: session and persistent cookies, web beacons, and analytics for site functionality, performance, and marketing.
- How and why we use personal information (purposes)
We collect and use personal information to:
- Provide mortgage services, process applications, verify identity, and communicate with lenders and credit agencies.
- Manage client relationships, respond to inquiries, send confirmations and service-related notices.
- Process payments, prevent fraud, and meet legal or regulatory obligations.
- Improve and personalize our services, website functionality, and marketing communications.
We rely on consent, performance of a contract, and other lawful bases appropriate under Canadian law (including implied consent for activities within a current business relationship and necessity for legal compliance).
- Consent and limiting collection
We obtain meaningful consent where required. For online interactions, consent may be express (checked boxes, email agreement) or implied (providing contact details to receive service-related communications). We collect only the information necessary for the identified purposes. - Disclosure and third parties
We may disclose personal information to:
- Lenders, mortgage insurers, credit bureaus, legal advisors, and other parties involved in delivering mortgage services.
- Service providers (payment processors, CRM vendors, hosting and analytics providers) bound by contractual confidentiality and security obligations.
- Government, regulatory, or law enforcement authorities when required by law.
We do not sell personal information. Any cross‑border disclosure (for example, to service providers outside Canada) will include contractual safeguards to protect your personal information.
- Retention and disposal
We retain personal information only as long as necessary to fulfill the purposes described, to comply with legal and regulatory obligations, and to resolve disputes. Typical retention periods: mortgage application records and transactional documents — minimum 7 years (or as required by provincial/industry rules); marketing lists — until unsubscribed or withdrawn. We securely destroy or anonymize information when no longer needed. - Security safeguards
We maintain administrative, technical, and physical safeguards proportionate to the sensitivity of the information, including access controls, encryption where appropriate, and employee privacy training. While we strive to protect personal information, no system is infallible; we continually review security practices. - Breach notification
In the event of a privacy breach that poses a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada (OPC) as required by PIPEDA, and take steps to contain and remediate the breach. - Cookies and tracking technologies
We use cookies and similar technologies for essential site functions, analytics, and marketing. You can manage cookie preferences through our cookie banner and your browser settings; disabling certain cookies may affect site functionality. - Your rights and choices (access, correction, withdrawal)
Subject to legal exceptions, you may:
- Request access to or a copy of your personal information.
- Request correction of inaccurate or incomplete information.
- Withdraw consent to certain processing (where consent was the basis).
- Request deletion or restriction of processing, where applicable.
To exercise these rights, contact us using the details below. We will respond within a reasonable timeframe consistent with PIPEDA.
- Complaints and oversight
If you have a privacy concern or complaint, please contact us first so we can address it. You may also contact the Office of the Privacy Commissioner of Canada or the relevant provincial privacy commissioner for guidance or to file a complaint. - International transfers
Personal information may be processed or stored outside Canada by trusted service providers. We implement contractual and technical safeguards (e.g., confidentiality agreements, standard contractual clauses where applicable) to protect data transferred internationally. - Children and minors
Our services are not directed to children under the age of majority in your province. We do not knowingly collect personal information from minors. - Changes to this privacy policy
We may update this Privacy Policy. Material changes will be posted with an updated effective date. Continued use of our services after changes indicates acceptance of the revised policy. - Contact us
OnLendHub – Privacy policy
55 Ontario Street South, Milton, Ontario, Canada
Email: hello@onlendhub.ca
References to this privacy policy
