At Merge Mortgage Group, the privacy of clients is valued and protected. This Privacy Policy explains how personal information is collected, used, disclosed, and safeguarded, in accordance with Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA).

1. Information Collected Personal information necessary for providing mortgage brokerage services may include:

Full name, email address, and phone number

Home address, employment, and income details

Assets, liabilities, and supporting financial documentation

Credit bureau reports

Mortgage and rental property information

2. Methods of Collection Personal information is collected through:

Direct communication by phone, email, or secure web forms

Encrypted mortgage application platforms

CRM systems for internal service delivery Consent is obtained before pulling or sharing credit data.

3. Use of Information The information is used solely for:

Evaluating mortgage applications

Communicating updates or inquiries

Providing support and assistance

Internal analysis to improve services

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, except for aggregators and providers of the Text Message services.

4. Data Retention Information is retained only as long as necessary to serve its original purpose. Requests for deletion can be submitted at any time.

5. Data Security Security measures include:

Bank-grade encryption on all applications

Two-factor authentication and limited staff access

Regular reviews of all digital security protocols All personal data is securely stored in Canada or in trusted, compliant cloud environments.

6. Information Sharing Personal data is never sold. Sharing occurs only when necessary and with client consent:

With mortgage lenders and credit bureaus

With internal CRM systems

All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties, excluding aggregators and providers of the Text Message services.

7. Marketing Practices Occasional email notifications may be sent about service updates or promotions. These emails include an option to unsubscribe. SMS is never used for marketing.

8. Protection of Minors Information is not knowingly collected from individuals under 18. Applications require age verification.

9. Client Rights Clients have the right to:

Access their personal information

Request corrections

Withdraw consent or request data deletion Requests can be sent to the contact information provided below.

10. Data Breach Policy In the event of a data breach, all affected parties will be notified promptly with steps taken to address the issue.

11. Updates to this Policy Changes may occur from time to time. Revisions will be published on the website with a new effective date.