Privacy Policy

1. Who We Are

NP Mortgages (“NP Mortgages,” “we,” “us,” or “our”) is a licensed mortgage brokerage based in Toronto, Ontario, Canada. We help Canadians find the right mortgage by connecting them with lenders and mortgage solutions tailored to their needs.

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit npmortgages.co (the “Site”) or submit an inquiry, application, or registration through it. We are committed to protecting your privacy in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.

By using our Site or submitting any form, you consent to the practices described in this policy.

2. Information We Collect

2.1 Information You Provide Directly

Mortgage Applications

When you submit a mortgage application (to buy, refinance, or renew), we collect:

• First and last name
• Email address and phone number
• Application type (buy, refinance, or renew) and purchase intent
• Property type and province
• Property value and closing date (where applicable)
• Mortgage amount or amount needed
• Mortgage due date
• Down payment amount
• Household income and number of applicants (for pre-approval)
• Refinance goal

Agent Registration

When you register to join NP Mortgages as a mortgage agent, we collect:

• Full name
• Email address and phone number
• Years of experience in the mortgage industry

Training Enrollments

When you register for a training session or event, we collect:

• Full name
• Email address and phone number
• The specific training session selected

2.2 Information Collected Automatically

When you visit our Site, our hosting infrastructure (Vercel) may automatically log standard technical data, including:

• IP address
• Browser type and version
• Pages visited and time spent
• Referring URL
• Device type and operating system

This data is collected for security, performance monitoring, and infrastructure purposes only. We do not use it for behavioural advertising.

2.3 Cookies

Our Site uses only technically necessary cookies — for example, session tokens required for the admin panel. We do not currently use advertising cookies, tracking pixels, or third-party analytics cookies. If this changes, we will update this policy and, where required by law, obtain your consent.

3. How We Use Your Information

We use the personal information we collect to:

• Process mortgage applications — review your application details and connect you with a suitable mortgage agent or lender.
• Send confirmation and follow-up communications — deliver automated email confirmations when you submit an application, enroll in a training, or register as an agent.
• Manage training enrollments — register you for selected training events and track attendance.
• Review agent applications — assess and respond to inquiries from prospective mortgage agents.
• Improve our Site — use aggregated, anonymised data to understand how visitors use our Site and improve its content and performance.
• Comply with legal obligations — meet regulatory requirements applicable to licensed mortgage brokerages in Ontario.

We will not use your personal information for purposes other than those described here without your prior consent, except as required by law.

4. How We Share Your Information

We do not sell your personal information. We may share it in the following limited circumstances:

4.1 Lenders and Financial Institutions

If you submit a mortgage application, the relevant details may be shared with lenders or financial institutions as part of the mortgage placement process. We will only share the minimum information necessary for this purpose.

4.2 Service Providers

We use trusted third-party service providers to operate the Site. These providers process personal data on our behalf and are contractually required to protect it:

• Vercel (hosting and media storage) — our Site is hosted on Vercel’s infrastructure. Uploaded media files are stored in Vercel Blob Storage. Vercel may log server-level request data. See Vercel’s Privacy Policy.
• Google (Fonts & Maps) — our Site loads fonts from Google Fonts and embeds a Google Maps iframe on the Contact page. When these resources load, Google may receive your IP address. See Google’s Privacy Policy.
• Gmail / Google Workspace — we use Google’s email infrastructure via SMTP to send confirmation emails when you submit a form. Email content passes through Google’s servers.
• MongoDB — your submitted data is stored in a MongoDB database. See MongoDB’s Privacy Policy.

4.3 Legal Requirements

We may disclose your personal information if required to do so by law, court order, or a regulatory authority, or if we believe disclosure is necessary to protect the rights, property, or safety of NP Mortgages, our clients, or the public.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of all or part of our business, personal information may be transferred to the acquiring entity. We will notify you via email or a prominent notice on the Site before your information is transferred and becomes subject to a different privacy policy.

5. Data Retention

We retain your personal information only as long as necessary for the purposes described in this policy, or as required by applicable law (including mortgage industry record-keeping regulations in Ontario). When your data is no longer required, we will securely delete or anonymise it.

6. Your Privacy Rights

Under PIPEDA and applicable provincial legislation, you have the right to:

• Access — request a copy of the personal information we hold about you.
• Correction — request that we correct inaccurate or incomplete information.
• Withdrawal of consent — withdraw consent to the use of your personal information at any time, subject to legal or contractual restrictions. Note that withdrawal may affect our ability to process your application or provide services.
• Complaint — file a complaint with the Office of the Privacy Commissioner of Canada (OPC) at www.priv.gc.ca if you believe we have not handled your personal information in accordance with the law.

To exercise any of these rights, please contact us using the details in Section 12. We will respond to verifiable requests within 30 days.

7. Security

We implement reasonable administrative, technical, and physical safeguards to protect your personal information against loss, theft, unauthorised access, disclosure, copying, use, or modification. These include HTTPS encryption on all Site connections, role-based access controls within our systems, and bearer-token authentication for internal API calls.

No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

8. International Data Transfers

Our Site is operated in Canada. However, some of our third-party service providers (including Vercel and Google) store and process data on servers located outside Canada, including in the United States. By using our Site, you acknowledge that your information may be transferred to and processed in countries with different privacy laws than your own. We rely on contractual safeguards with these providers to protect your data.

9. Children's Privacy

Our Site and services are intended for adults (18 years of age or older). We do not knowingly collect personal information from individuals under the age of 18. If you believe a minor has provided us with personal information, please contact us and we will delete it promptly.

10. Third-Party Links

Our Site may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before providing any personal information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page. Your continued use of the Site after any changes constitutes your acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of your personal information, please contact us:

You also have the right to contact the Office of the Privacy Commissioner of Canada if you are unsatisfied with our response.