Skip to content

Privacy

Privacy policy

Effective [effective date — on approval]. Plain-English summary first; details below.

Stonefield Mortgage (a trade name of Stonefield Capital Inc., FSRA mortgage brokerage licence #13722) collects personal information only to respond to you and to arrange your mortgage, or, after telling you, to introduce you to a partner broker. Inquiries from this website are stored in Canada. When you ask for a call back, our team receives a notification e-mail that contains a link, not your details, and you are never asked to send documents by e-mail. You can ask to see, correct or delete your information at any time by writing to info@stonefieldmortgage.ca.

This policy explains what we collect through this website and when you work with us on a mortgage, why, how we protect it, and your choices. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and the rules of the Financial Services Regulatory Authority of Ontario (FSRA).

What we collect

  • When you ask for a call back: your name, phone number and e-mail, the Ontario city or town, what you want to do (buy, renew, refinance, pre-approval), a rough mortgage size and, if you add them, timing, the type of home, a short note and how you heard about us.
  • Where your visit started: the first page you visited, the site that referred you and any campaign tags in the link you clicked. This is sent only inside a form you choose to submit.
  • When you apply for a mortgage: the information and documents a lender needs — identity, income, employment, assets, debts, credit report (with your consent) and property details. These are collected through a secure application, not through this website and never by e-mail.
  • When you browse: standard server logs and privacy-friendly analytics (page views and performance), without advertising cookies.

Why we use it

  • To call you back and answer your questions.
  • To compare lenders, prepare your application and arrange your mortgage, with your consent.
  • To keep the records a licensed mortgage brokerage must keep.
  • To understand which pages and sources bring inquiries, using counts rather than individual profiles.

We do not sell personal information, and we do not add you to marketing e-mails unless you ask.

Where it is stored and who sees it

  • Inquiry database: Supabase, hosted in Canada (AWS Canada Central, Montréal). Access is limited to our team through a password-protected internal dashboard.
  • Website hosting: Vercel. This site's server functions run in Vercel's Montréal region; like any website, pages are delivered through a global network.
  • Notification e-mail: when you send the form, our team may receive an e-mail through our e-mail provider (Resend, in the United States). It says only that a new inquiry arrived, with your last name and a link to our dashboard. Your phone number, e-mail and other details are not in it.
  • A partner broker, if we refer you: when your file is better placed with another brokerage, we may refer your inquiry to an independently licensed mortgage broker we approve, who may contact you to provide mortgage services. You agree to that possible referral when you tick the referral box and send one of our forms, and we share only the details that form holds. The partner broker has its own privacy policy.
  • Lenders and insurers: when you decide to apply, we share your application with the lender(s) you agree to, and where needed with a mortgage default insurer. They have their own privacy policies.
  • Our team: only the people who need your information to help you.

Some service providers may process information outside Canada under contract. They may only use it for our purposes and must protect it.

How long we keep it

Inquiries that do not lead to a mortgage are kept for [retention period — to confirm] and then deleted. Mortgage files are kept as long as the law and FSRA's record-keeping rules require.

Your choices

  • Ask what information we hold about you, and get a copy.
  • Ask us to correct it.
  • Withdraw consent and ask us to delete it, subject to records we must keep by law.

Write to our privacy officer at info@stonefieldmortgage.ca or at 4-60 Granton Drive, Richmond Hill, ON L4B 2N6. Privacy officer: [name — to confirm]. If you are not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada.

Security

Data travels over encrypted connections. The inquiry database denies access to anyone without our server credentials. Never send your SIN, account numbers or documents by e-mail; if we need documents we will explain how to share them securely.

Changes

We will post any change to this policy on this page with a new effective date.