Privacy policy

This policy explains how RenewRight (“we”, “us”, “our”) collects, uses, shares and protects personal information when you visit renewright.ca, complete our quiz, or contact us. It is written to reflect our obligations under Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and substantially similar provincial privacy laws.

Who we are

RenewRight is a referral service. We connect Canadian business owners and the people who manage their benefits with licensed group benefits advisors. We are not an insurer, a lender or a broker, and we do not sell, quote or advise on insurance or mortgage products. Connecting you with an advisor is the service we provide, which means sharing the details you give us is central to how this site works. That sharing is described in full below.

Information we collect

We collect information you give us directly, and some information automatically when you use the site.

• Information you provide: your name, business name, email address, phone number, the province your business is in, the number of employees on your plan, when your plan renews, how your last renewal went, and anything else you enter in a form or send us in a message.
• Information collected automatically: IP address, approximate location at the city or province level, browser and device type, pages viewed, referring page, and similar technical data.
• Information from cookies and similar technologies, as described below.

How we use your information

We use personal information to match you with a licensed advisor in your province, to respond to your enquiry, to provide and improve our services, to operate and secure the site, to measure how our marketing performs, and to meet our legal and record-keeping obligations.

We send commercial electronic messages only where you have given consent or where the law otherwise permits it, in line with Canada’s Anti-Spam Legislation (CASL). Every marketing message includes an unsubscribe link, and we act on unsubscribe requests promptly.

How we share your information

We share personal information in the following circumstances:

• With a licensed advisor. When you submit the quiz, we provide the details you gave us to a licensed group benefits advisor in your province so they can contact you about your options. This sharing is the purpose of the service, and by ticking the consent box and submitting the form you agree to it. That advisor is an independent third party and is responsible for its own handling of your information under its own privacy practices and licensing obligations.
• With service providers. Website hosting, email delivery, analytics, lead-routing and customer-relationship tools process information on our behalf under contract, and may only use it to provide those services to us.
• Where required by law, or to establish, exercise or defend legal claims.
• In a business transaction, such as a merger, acquisition or sale of assets, in which case the recipient remains bound by this policy until it is updated.

We do not sell your personal information to unrelated third parties, and we do not operate an open bidding marketplace for your details.

International data transfers

We aim to process personal information in Canada. Some of our service providers may store or process it outside Canada, which means it may be subject to the laws of that jurisdiction, including lawful access requests by courts, law enforcement and national security authorities. Where information is transferred outside Canada, we use contractual protections requiring a comparable standard of care.

Cookies and tracking technologies

We use three kinds of cookies: essential cookies that make the site work, analytics cookies that tell us how the site is used, and marketing cookies that measure advertising performance and help us reach relevant audiences. You can control or block cookies through your browser settings, though parts of the site may not work as intended if you do. Where required, we ask for your consent before setting non-essential cookies, and you can change that choice at any time.

How long we keep it

We keep personal information only for as long as needed for the purposes described in this policy and to meet our legal and record-keeping obligations, after which it is deleted or de-identified.

• Quiz and enquiry information: up to seven years, reflecting record-keeping expectations in financial services.
• Marketing contact information: until you unsubscribe, after which we keep a minimal suppression record so we do not contact you again.
• Web analytics: in aggregated or de-identified form, up to 26 months.
• Records we are required by law to retain: for the period that law requires.

Your rights under Canadian privacy law

Subject to the limited exceptions the law allows, you have the right to:

• Ask what personal information we hold about you and request a copy of it. We respond within 30 days.
• Ask us to correct information that is inaccurate or incomplete.
• Ask us to delete information we are not required to keep.
• Receive your information in a portable format, or ask us to transfer it where that right applies.
• Withdraw your consent at any time, though this may mean we can no longer connect you with an advisor.
• Object to the use of your information for marketing, at any time and at no cost.
• Complain to us, and to the Office of the Privacy Commissioner of Canada or your provincial regulator if our response does not satisfy you.

We may need to verify your identity before acting on a request.

Security and breach notification

We use administrative and technical measures appropriate to the sensitivity of the information we hold, including encrypted transmission, access controls limiting who can view submissions, and agreements with our service providers requiring comparable protection. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

If a breach of security safeguards creates a real risk of significant harm, we will report it to the Office of the Privacy Commissioner of Canada and notify affected individuals as soon as feasible, and we keep records of breaches as the law requires.

Quebec residents

If your business operates in Quebec, the Act respecting the protection of personal information in the private sector also applies. It sets additional requirements around consent, transparency and the handling of sensitive information. You may direct a complaint to the Commission d’accès à l’information du Québec.

British Columbia and Alberta residents

British Columbia and Alberta each have a Personal Information Protection Act (PIPA) that is substantially similar to PIPEDA and applies to private-sector organizations in those provinces. You may direct a complaint to the Office of the Information and Privacy Commissioner for your province.

Children

This site is intended for adults conducting business and is not directed to anyone under 18. We do not knowingly collect personal information from minors. If we learn that we have collected it, we will delete it promptly.

Links to other sites

Our site may link to sites we do not operate, and an advisor we connect you with will have their own website and privacy practices. We are not responsible for their content or their handling of your information, and we encourage you to read their policies.

Changes to this policy

We may update this policy from time to time. The revised version takes effect when posted, and the date at the top of this page will change. Where a change is significant, we will take reasonable steps to bring it to your attention, which may include a notice on the site or an email to contacts on our list.

Contact and complaints

Questions, access requests or complaints about privacy can be sent to our privacy officer at privacy@renewright.ca. We respond to access requests within 30 days. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada at priv.gc.ca, or your provincial privacy regulator where applicable.