Privacy Policy
Last updated: [date]1. Who we are
[Platform Name] ("we," "us," "our") operates [domain].ca, a referral platform that connects applicants with third-party auto financing partners, including dealerships, lenders, and finance brokers ("Partners"). We are not a lender and do not make credit decisions.
2. Information we collect
When you submit an application through our site, we collect:
- Contact information: name, phone number, email, postal code
- Application details: employment status, length of employment, monthly income, credit situation, down payment amount, vehicle type of interest, driver's license status
- Technical information: IP address, browser type, device information, and site usage data collected automatically through analytics tools
3. How we use your information
We use the information you provide to match you with one or more Partners, communicate with you about your application, improve our matching process and site, and comply with legal obligations. We do not use your financial application information for any purpose beyond matching you with a Partner and following up on that application.
4. How we share your information
We share your application information only with the Partner(s) we match you with. We do not sell your information to data brokers or unrelated third parties. A matched Partner's use of your information is governed by their own privacy policy. We may also share information with service providers who help us operate the platform, under contractual obligations to protect your data.
5. Legal basis and consent
By submitting an application, you consent to the collection, use, and disclosure of your information as described here, and to being contacted by [Platform Name] by phone, text, or email regarding your application. Your information will be shared with the financing partner you're matched with, who will identify themselves when they contact you. This satisfies Canada's Anti-Spam Legislation (CASL) consent requirement for the electronic communications (text and email) covered by this policy; phone contact is separately governed by the CRTC's Unsolicited Telecommunications Rules, and your express consent here satisfies that requirement as well. You may withdraw marketing consent at any time by contacting [contact email] or using the unsubscribe link in any email we send.
6. Cookies and tracking
We use analytics tools (including Google Analytics and Meta Pixel) to understand site usage and measure marketing performance. These may place cookies on your device. You can control cookies through your browser settings.
7. Data retention
We retain application information for as long as necessary to fulfill the purpose it was collected for, and as required by law. Unmatched or abandoned applications are retained for [X months] before deletion, unless you request earlier deletion.
8. Security
We use reasonable administrative, technical, and physical safeguards to protect your information. No method of transmission or storage is 100% secure.
9. Your rights
Under PIPEDA and applicable provincial law, you have the right to access your information, request correction, withdraw consent, and file a complaint with the Office of the Privacy Commissioner of Canada. Contact [contact email] to exercise these rights.
10. Data breach notification
If a breach of security safeguards involving your personal information creates a real risk of significant harm, we will notify you and report the breach to the Office of the Privacy Commissioner of Canada, as required under PIPEDA. We maintain records of all breaches of security safeguards for a minimum of 24 months.
11. Cross-border data transfer
Some of the third-party service providers we use to operate this site (including analytics, advertising, and data storage tools) are based in, or store data in, the United States or other jurisdictions outside Canada. As a result, your information may be processed or stored outside Canada and may be subject to the laws of that jurisdiction, including lawful access requests by foreign authorities. By using this site, you acknowledge this transfer.
12. Children's privacy
Our services are not directed at individuals under 18. We do not knowingly collect information from minors.
13. Changes to this policy
We may update this policy from time to time. Continued use of the site after changes constitutes acceptance of the updated policy.
14. Contact us
[Platform Name]
[business address]
[contact email] | [phone number]