Privacy Notice

Effective 2026-05-13 · Version 1.0

1. Who we are

This application platform is operated on behalf of a licensed Canadian insurance advisor (the "advisor") to help you compare life insurance quotes and start an application. The platform processes your information only for the purposes set out in this notice, and is governed by the Personal Information Protection and Electronic Documents Act (PIPEDA).

2. What we collect and why

We only collect what we need to give you accurate quotes and prepare an application the carrier can act on. Each field has a specific purpose:

• Date of birth, sex at birth, province, tobacco use — required by carriers to underwrite life insurance and price it accurately. Sex at birth is used because some health risks are statistically tied to it; we recognize this may differ from gender identity.
• Name, email, phone — so the advisor can contact you about the application and email you a secure resume link if you save your progress.
• Address, citizenship/residency, country of birth, date of arrival in Canada — required by carriers as part of standard insurance eligibility and identity verification.
• Identification (driver's licence / passport / government ID) — used strictly to verify your identity with the carrier when the policy is issued. We do not sell this information or use it for marketing.
• Income, debts, mortgage, children, existing coverage, savings — only collected if you choose to do the optional needs analysis. Used to recommend an appropriate coverage amount; you can skip this section.
• Beneficiary details — required by the carrier so they know who would receive the death benefit. Provided by you, with your beneficiaries' awareness.
• Banking details — collected only by the advisor verbally during the follow-up call (not stored on this platform), so the carrier can set up premium payments after the policy is issued.

3. Consent

We ask for your express consent at two points:

• When you save your progress. Before we email you a resume link, you confirm you authorize the advisor to contact you and that we may hold the information you've entered for up to 30 days.
• When you submit the application. Before we transmit anything to the advisor's CRM, you confirm you authorize submission and disclosure to the carrier you have selected.

For audit purposes we record the exact text you saw, a version number, the time you agreed, and the IP address that sent the request — these stay with your file and are not used for marketing or analytics.

You can withdraw consent at any time by contacting us using the details in section 9. Withdrawing consent may mean we are unable to continue with your application — we will explain the consequences before acting.

4. Who we share information with

We disclose your information only to the parties that need it to fulfil the purposes above:

• The carrier (insurance company) you select — to assess your application and issue your policy.
• The licensed advisor helping you — to prepare and submit your application.
• Our customer-relationship platform (Flowlu) — used by the advisor to manage your file. Flowlu acts as a service provider on our behalf.
• Cloudflare — provides the hosting and edge network that delivers this platform.

We do not sell your information, share it with advertisers, or use it for any purpose other than your application. If law enforcement or a regulator requires us to disclose information, we will do so only as required by Canadian law.

5. How long we keep your information

• Saved-but-not-submitted applications: deleted automatically 30 days after you save them, unless you submit or request earlier deletion.
• Submitted applications: retained by the advisor for the period required by their regulatory and carrier obligations (typically the life of the policy plus a retention period set by provincial regulators).
• Consent records: retained alongside the application as part of the audit trail.

6. Your rights — access, correction, deletion, withdrawal

Under PIPEDA you have the right to:

• Know what we hold about you and a copy of your file.
• Correct inaccurate information.
• Withdraw consent at any time (subject to legal or contractual constraints — for example, the carrier may need to retain records after a policy is issued).
• Request deletion of saved (not-yet-submitted) information at any time. Saved data is also deleted automatically after 30 days.
• Complain to the Privacy Commissioner of Canada if you are not satisfied with how we handle your information. Contact details: priv.gc.ca.

To exercise any of these rights, contact us using the details in section 9. We will respond within 30 days.

7. Security

We protect your information with practices appropriate to its sensitivity:

• All communication between your browser and our servers is encrypted in transit (HTTPS / TLS).
• Access to your information inside our CRM is limited to the licensed advisor handling your file and the platform operators who maintain the system.
• Saved-for-later application data is stored in Cloudflare's KV store and automatically deleted after 30 days.
• We do not store full identification numbers or banking details on this platform; banking information is collected verbally by the advisor and sent directly to the carrier.

No method of electronic storage or transmission is perfectly secure. We will notify you in accordance with PIPEDA's breach reporting obligations if your information is ever involved in a real risk of significant harm.

8. Cookies and analytics

This platform does not run third-party analytics, advertising trackers, or cookie banners. The only browser storage used is a localStorage entry that holds your in-progress form answers on your own device so you can refresh the page without losing them. Clearing your browser data removes it. We do not read this from our servers.

9. Contact and Privacy Officer

For any privacy question, access request, correction, deletion request, or complaint, contact:

Please include enough information for us to find your file (your name, the email you used, and approximately when you used the platform).

10. Changes to this notice

We may update this notice as the platform evolves. When we do, we update the version number and the effective date at the top of this page. Material changes — anything that changes how we collect, use, or disclose your information — will be communicated to you before they take effect and will require fresh consent where required by law.