Privacy Policy

1. Overview

Magellan Capital Network ("Magellan," "we," "us," or "our") is an FSRA-licensed mortgage brokerage (Licence #13521) based in Markham, Ontario. We handle personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Ontario privacy legislation.

This policy applies to information collected through mcnetwork.ca, our website AI assistant, intake and pre-approval forms, phone and email conversations, in-person consultations, and any other interactions with our brokers or staff.

2. What information we collect

The personal information we collect depends on how you interact with us. Categories include:

• Contact details — first and last name, email address, phone number, and mailing address.
• Mortgage profile — the type of mortgage you are seeking (purchase, refinance, renewal, second mortgage, HELOC), your goal, where you are in the buying journey, and your preferred closing date.
• Property information — property type, intended use (primary residence, rental, second home), purchase price or estimated value, and location.
• Financial information — down payment amount, annual income, employment status, self-reported credit range, monthly debt obligations, and savings level.
• Verification documents — when you proceed with a mortgage application, we may request government-issued ID, paystubs, tax documents (T4, NOA), bank statements, and other documentation required by lenders or by law.
• Communications — records of emails, text messages, information you enter into our website AI assistant, call notes, and contact preferences (phone / email / text, preferred time of day, preferred broker).
• Technical information — IP address, browser type, device type, referring URL, pages viewed, and timestamps, collected automatically when you visit our website.
• Consent records — when you submit a form, we record that you provided consent, along with a timestamp and the page you submitted from.

3. How we collect it

• Directly from you — when you use our website AI assistant, complete our intake form, the rate-quote popup or pre-approval form, fill out a contact form, send us an email, speak with a broker, or upload supporting documents.
• Automatically — through cookies and similar technologies when you browse our website (see Section 6).
• From third parties, with your consent — credit reporting agencies (Equifax, TransUnion), lenders, employers (for income verification), insurers, appraisers, lawyers, and real estate professionals involved in your transaction.

4. How we use your information

We use your personal information to:

• Respond to inquiries and provide the information or quote you requested.
• Match you with a licensed broker on our team and prepare a pre-approval or rate quote.
• Submit mortgage applications to lenders on your behalf and negotiate terms.
• Communicate with you about your file — by phone, email, or text, using the contact preferences you have given us.
• Comply with our legal, regulatory, and licensing obligations, including FSRA requirements, anti-money-laundering (FINTRAC) obligations, and record-keeping rules.
• Detect, prevent, and investigate fraud, security incidents, and misuse of our services.
• Improve our website, products, and customer experience.
• With your separate, opt-in consent, send you marketing communications about rate changes, mortgage tips, and new offerings — you may withdraw this consent at any time.

5. Sharing and disclosure

We share your personal information only as needed to deliver the services you've asked for, or where required by law. Recipients may include:

• Lenders and financial institutions — banks, credit unions, monoline lenders, and private lenders, in order to obtain a mortgage commitment on your behalf.
• Default insurers — CMHC, Sagen, or Canada Guaranty, where mortgage default insurance is required.
• Credit bureaus — Equifax and TransUnion, to obtain credit reports with your consent.
• Other professionals in your transaction — real estate lawyers, notaries, appraisers, home inspectors, and real estate agents you have authorised us to work with.
• Service providers — technology vendors that host our website and forms, provide the website AI assistant (including Anthropic), support email and CRM functions, store documents, and provide analytics. These providers are permitted to process information only to perform services for us, subject to their contractual and privacy obligations.
• Regulators and law enforcement — FSRA, FINTRAC, courts, or other authorities where disclosure is required by law, regulation, court order, or to protect our legal rights.

We do not sell your personal information, and we do not share it with third parties for their own independent marketing purposes.

Storage outside Canada

Some of our service providers may store or process information on servers located outside of Canada (for example, in the United States). When information is held in another jurisdiction, it may be subject to the laws of that jurisdiction, including lawful requests for access by government authorities.

Messages entered into the website AI assistant are sent to our AI service provider to generate a response. Magellan does not use the chatbot proxy to persist message bodies. Please do not enter government identification numbers, account numbers, passwords, or other sensitive personal or financial details into the assistant.

6. Cookies and analytics

Our website uses cookies and similar technologies to operate properly, remember your preferences, and measure how the site is used. The categories we use include:

• Strictly necessary — required for the site to function (e.g. session handling, form state).
• Analytics — help us understand which pages are visited, where visitors come from, and how forms perform, so we can improve the experience.
• Advertising and attribution — where used, allow us to measure the performance of paid campaigns (for example, via UTM parameters appended to ad links).

Most browsers let you refuse or delete cookies through their settings. Disabling cookies may affect the functionality of the site, including the ability to submit forms.

7. Data retention

We retain personal information only as long as it is needed for the purposes set out in this policy, or as required by law. In practice:

• Active client files are retained for the duration of the broker-client relationship and your mortgage term.
• Mortgage transaction records are kept for a minimum of seven (7) years after the file closes, in line with FSRA, FINTRAC, and CRA requirements.
• Inquiries that don't proceed (lead-form submissions where you don't move forward) are kept for up to two (2) years for follow-up and audit purposes, unless you ask us to delete them sooner.
• AI assistant messages are held in your browser for the active page conversation and are not intentionally stored by Magellan's chatbot proxy. Our AI service provider processes the messages to return a response under its applicable service terms.
• Marketing contact lists are retained until you unsubscribe or withdraw consent.

8. How we protect your information

We maintain administrative, technical, and physical safeguards designed to protect personal information against loss, theft, unauthorised access, disclosure, copying, use, or modification. These include access controls, encrypted transmission (HTTPS/TLS), restricted access on a need-to-know basis, staff training, and vendor due diligence.

No method of transmission over the internet or electronic storage is completely secure, however, and we cannot guarantee absolute security.

9. Your rights under PIPEDA

Subject to certain legal exceptions, you have the right to:

• Access the personal information we hold about you.
• Correct information that is inaccurate or incomplete.
• Withdraw consent for our continued collection, use, or disclosure of your information, subject to legal or contractual obligations.
• Unsubscribe from marketing communications at any time, using the link in any marketing email or by contacting us directly.
• File a complaint with our Privacy Officer (see Section 12). If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.

We will respond to verified access and correction requests within thirty (30) days, as required by PIPEDA. We may ask you to verify your identity before processing a request.

10. Children's information

Our services are intended for adults aged 18 and over. We do not knowingly collect personal information from individuals under 18. If you believe a minor has submitted information to us, please contact our Privacy Officer and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we do, we will update the "Last updated" date at the top of this page. Material changes will be communicated through our website and, where appropriate, by email to clients with active files.

12. Contact us

If you have questions about this policy, want to access or correct your information, withdraw consent, or file a privacy complaint, please contact our Privacy Officer:

If you remain unsatisfied after contacting us, you may also reach the federal regulator: Office of the Privacy Commissioner of Canada · 1-800-282-1376.