Privacy Policy
This policy explains what personal information RenewalRate.ca collects, how we use it, and your rights under Canadian privacy law. It is written to comply with the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, Quebec's Act respecting the protection of personal information in the private sector, as amended by Law 25.
Who we are
RenewalRate.ca is operated by O.MS.H Media Inc., an Ontario federal corporation. For privacy purposes, O.MS.H Media Inc. is the organization responsible for personal information collected through renewalrate.ca.
Privacy contact: Omar M.S. Hamed, Privacy Officer, [email protected]. Mailing address available on request.
What we collect, and what we do not
Calculator data: stays in your browser
Our payment-shock calculator and any other on-site calculators run entirely in your browser. The numbers you enter (mortgage balance, rate, term, payment) are not transmitted to our servers, are not logged, and are not stored by us. When you close the tab, the data is gone. We designed the calculator this way on purpose. If we ever change this, we will update this policy and say so clearly before the change takes effect.
Email waitlist
If you sign up for our email waitlist or newsletter, we collect:
- Your email address
- The date and time of your sign-up and the IP address used (for CASL consent records)
- Your interaction with our emails (opens and clicks), through our email platform
We use this information to send you the content you signed up for, to maintain a record of your express consent under Canada's Anti-Spam Legislation (CASL), and to measure engagement in aggregate. We do not sell this data, we do not rent it, and we do not share it with our affiliate partners.
Email service provider: our email is delivered through Mailerlite, a third-party email platform. Mailerlite stores subscriber data on its servers, which may be located outside Canada. By subscribing, you consent to your email address being processed by Mailerlite for the purpose of delivering our emails. Mailerlite's privacy policy is available on its website.
Every email we send includes a clearly-visible unsubscribe link and our organization's name and contact information, as required by CASL. Unsubscribes are processed within ten business days at most, typically immediately.
Retention: we keep your email on our list until you unsubscribe. We keep consent records (the date, time, and IP of your original sign-up) for three years after unsubscription, which is the CASL record-retention standard, after which those records are deleted.
Server logs and security data
Our hosting provider, Cloudflare, automatically records standard request data (IP address, user agent, referring page, timestamp) for security, abuse prevention, and basic traffic analysis. We do not link this data to individual identities, and we do not use it for marketing. Cloudflare retains these logs for a limited period as described in its own privacy policy.
Cookies
At the time this policy was last updated, RenewalRate.ca sets no tracking cookies, no advertising cookies, and no cross-site tracking of any kind. A small number of strictly-necessary technical cookies may be used by our hosting provider for security purposes (for example, Cloudflare's bot-detection cookie). We also store a local identifier in your browser if you arrive from a Google Ads campaign (GCLID) so that we can pass attribution to partner brokerages when you click through; this identifier stays in your browser and is not transmitted to us.
If and when we add analytics, we will update this policy and, where required, display a consent banner before any non-essential cookie is set. We will not enable behavioural advertising or cross-site tracking.
Affiliate clicks: you leave our site
When you click an affiliate link to a partner brokerage, you leave renewalrate.ca and arrive on the partner's own website. From that moment, the partner's privacy policy, terms, and data handling practices apply, not ours. We do not receive your loan application, your financial information, your credit data, or your personal details from the partner. We may receive an anonymous confirmation that a referral was funded, for the purpose of commission reconciliation, but we do not receive information that identifies you as an individual.
Why we collect it (purposes)
Under PIPEDA, we are required to identify the purposes for which personal information is collected. Those purposes are:
- To deliver the newsletter or waitlist updates you explicitly asked for
- To maintain records of your consent under CASL
- To operate and secure the website (server logs, abuse prevention)
- To measure website traffic in aggregate, if and when analytics are enabled, without individual tracking
- To respond to your emails and requests
We do not use your personal information for any purpose beyond the ones listed above without your further consent.
Your rights
Under PIPEDA and Quebec Law 25 (where applicable), you have the right to:
- Access the personal information we hold about you
- Correct information that is inaccurate, incomplete, or out of date
- Withdraw consent for any processing based on consent (for example, unsubscribe from our list at any time)
- Request deletion of your personal information, subject to legal retention requirements (such as CASL's three-year consent-record rule)
- Data portability (Quebec residents, under Law 25): receive your personal information in a structured, commonly-used technological format
- Complain to a regulator. If you believe we have mishandled your personal information, you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca) or, if you are a Quebec resident, the Commission d'accès à l'information du Québec (cai.gouv.qc.ca).
To exercise any of these rights, email [email protected]. We will respond within 30 days, the timeframe set by PIPEDA.
Transfers of personal information outside Canada
Our email platform (Mailerlite) and hosting provider (Cloudflare) may process personal information on servers located outside Canada, including in the United States and the European Union. While the information is outside Canadian jurisdiction, it is subject to the laws of the receiving country. We use providers that publish privacy practices consistent with PIPEDA and, where applicable, the EU General Data Protection Regulation and Quebec Law 25.
Quebec residents (Law 25)
If you are a Quebec resident, the Act respecting the protection of personal information in the private sector (as amended by Law 25) applies to your personal information. In addition to the rights listed above, you have the right to be informed when an automated decision is made about you using your personal information (we do not currently make such decisions), the right to data portability, and the right to contact our Privacy Officer for any privacy matter. Omar M.S. Hamed serves as Privacy Officer for Quebec Law 25 purposes and can be reached at the email above.
Children
RenewalRate.ca is intended for adult Canadian homeowners and mortgage holders. We do not knowingly collect personal information from children under the age of 14 (the threshold used in Quebec under Law 25) or under 13 (the threshold commonly used across Canada). If you believe we have collected personal information from a child, email [email protected] and we will delete it promptly.
Security
We use industry-standard technical safeguards: HTTPS across the entire site, reputable hosting (Cloudflare), minimal data collection by design, and restricted administrative access. No system is perfectly secure, but we keep the attack surface small by collecting very little personal information in the first place.
Changes to this policy
If we change this policy in a way that materially affects your rights or our practices (for example, enabling a new analytics tool, adding a new data collection point, or changing service providers), we will update the "last updated" date and, where appropriate, display a notice on the site before the change takes effect.