Privacy

Mathieu St-Onge is responsible for the personal information collected through this website and acts as the person in charge of the protection of personal information under Quebec law.

The website collects only what you send voluntarily, plus the minimum technical data needed to operate.

Information you provide

• Your name, email address, and phone number.
• Your contact preference and the timing that suits you.
• The project type: purchase, renewal, refinancing, or other.
• The target timeline and approximate amounts.
• The message you write and any detail you choose to include in it.

Information captured automatically

• A technical session needed to display pages and secure the forms.
• Aggregate usage data: pages viewed, general referral source, device type.
• The context already present in the page address (the service, tool, or scenario you were viewing) passed to the form to prefill the request.

Each piece of information collected serves a specific purpose, determined before collection.

Your information is not sold, rented, or traded. It is not used for advertising profiling. It is not used for a purpose incompatible with those listed above without fresh authorization from you where the law requires it.

Access is limited to Mathieu St-Onge and the providers strictly necessary to operate the service. Each provider receives only what its service requires and remains bound by its own contractual obligations and security measures.

When a brokerage file is opened, the information needed for the analysis is sent to lenders and, where applicable, to the mortgage insurer, with your authorization and only within the mandate you have given.

Information hosted outside Quebec

Some providers may process or host information outside Quebec, including in the United States. A privacy impact assessment is carried out before entrusting information to such a provider, and the agreement provides protection comparable to what Quebec requires.

Information is not kept indefinitely. It is destroyed or anonymized once the purpose is met and the applicable legal or professional retention period has elapsed.

Access controls, encryption of exchanges with the website, and limiting the number of authorized people reduce the risks. Selected providers must apply recognized security measures.

No Internet transmission is risk-free. That is why complete financial documents must not travel through the public form.

If a confidentiality incident occurs

Should an incident presenting a risk of serious injury occur, the people concerned and the competent authority would be notified, and the incident would be recorded in a register, as required by law.

Quebec law grants you rights over the information held about you. These rights are exercised free of charge, except where the law provides otherwise.

• Access: obtain the list and a copy of the information held about you.
• Correction: have inaccurate, incomplete, or ambiguous information corrected.
• Withdrawal of consent: stop a use that relies on your consent.
• Deletion: have information deleted where the law permits it and no retention obligation prevents it.
• De-indexing: request that the dissemination of information cease, in the cases provided by law.
• Portability: receive, in a structured and commonly used technological format, the computerized information you provided.

How to make a request

1. Write through the contact page, stating that it is a request concerning your personal information.
2. Provide the name and email address used in the form, so the relevant request can be located.
3. Specify the right you are exercising and, if possible, the period concerned.

Reasonable identity verification may be required before information is released or changed. A written response is provided within 30 days of receiving the request. A refusal is explained and states the available recourse.

The website uses a technical session needed to operate and may store a draft of the form steps locally in your browser so that your entries are not lost.

• That draft stays on your device and can be removed by clearing the site data in your browser.
• No advertising cookie or social network tracker is set to follow you across websites.
• External websites reached through a link apply their own privacy policies, which you should review before sending them any information.

This policy is reviewed when the website’s practices change or when a legal obligation evolves. The date shown at the top of the page indicates the last revision. A significant change in purposes is announced on the website rather than applied silently.