Privacy Policy
Last updated: May 6, 2026
1. Introduction
TopRates.ca is operated by Webhub4u Inc., a Canadian technology company (in this Privacy Policy, “TopRates.ca”, “we”, “us”, and “our”).
We respect your privacy and are committed to handling personal information responsibly and in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and other applicable Canadian privacy legislation.
This Privacy Policy describes what personal information we collect, why we collect it, how we use and share it, how long we retain it, and how you can exercise your rights regarding your personal information.
By using TopRates.ca or submitting any form on our website, you acknowledge that you have read and understood this Privacy Policy.
2. About us and our partners
Operator
TopRates.ca is operated by Webhub4u Inc.. Webhub4u Inc. is the entity responsible for the personal information collected through TopRates.ca.
Webhub4u Inc. is not a licensed insurance broker, mortgage broker, credit advisor, investment advisor, or financial advisor.
Insurance referral partner
Insurance inquiries submitted through TopRates.ca may be referred to KLC Group Canada Inc., an independent insurance advisory firm.
KLC Group Canada Inc. is licensed under Ontario’s life insurance agent licensing framework administered by the Financial Services Regulatory Authority of Ontario (FSRA). Its advisors hold individual Life Licence Qualification Program (LLQP) licences where required.
Webhub4u Inc. and KLC Group Canada Inc. are under separate ownership and operate as independent corporations. The two companies maintain a documented commercial referral arrangement under which Webhub4u Inc. may receive a per-referral fee for inquiries referred to KLC Group Canada Inc. There is a familial relationship between the principals of the two companies, which we disclose for full transparency.
Once a referral is forwarded to KLC Group Canada Inc., that company collects, uses, and stores any further personal information directly from you under its own privacy practices and FSRA-regulated framework. Webhub4u Inc. is not the controller of personal information that you provide to KLC Group Canada Inc. after the referral is made.
3. Privacy Officer and accountability
Webhub4u Inc. has designated a Privacy Officer responsible for compliance with this Privacy Policy and applicable Canadian privacy legislation.
You can contact the Privacy Officer for any privacy-related inquiry, including access, correction, deletion, or consent withdrawal requests:
- Email: privacy@toprates.ca
- Postal address: available on request via privacy@toprates.ca
We will respond to legitimate privacy inquiries within thirty (30) days of receipt, in accordance with PIPEDA. If we are unable to respond within that timeframe, we will notify you of the delay and the reason.
4. Information we collect
We collect only the personal information necessary for the purposes described in Section 5. We categorize the information we collect as follows:
| Category | What it includes | How we collect it |
|---|---|---|
| Identity Data | Your name and any title you choose to share with us. | Provided by you when you submit a contact or referral form. |
| Contact Data | Email address, telephone number (if provided), province, and contact-time preferences. | Provided by you when you submit a contact or referral form. |
| Inquiry Data | Age range, type of insurance product you are interested in, optional message describing your situation. | Provided by you when you submit our life insurance referral form. |
| Consent Data | The verbatim consent text you agreed to, the timestamp of your consent, your IP address at submission, and your browser user-agent string. | Captured automatically when you submit any form, as proof of consent under CASL and PIPEDA. |
| Technical Data | IP address, browser type and version, device type, operating system, pages viewed, referring page, time spent on pages. | Collected automatically through standard server logs and analytics tools. |
| Communications Data | The contents of emails you send to us, and any other communications you initiate with us. | Provided by you when you contact us directly. |
What we do NOT collect through TopRates.ca:
- Driver’s licence numbers, motor vehicle records, or driving history.
- Insurance claims history.
- Medical history, prescription records, or health diagnoses.
- Detailed financial information (income, net worth, account balances, investment statements).
- Beneficiary designations or estate planning details.
- Telephone call recordings.
If you proceed to obtain a quote or apply for a policy with KLC Group Canada Inc., that firm may collect some or all of the above categories of information directly from you, under its own privacy practices and FSRA-regulated framework. We do not collect, transmit, or retain those categories of information on KLC Group Canada Inc.’s behalf.
5. Why we collect personal information
We collect, use, and disclose personal information only for purposes that a reasonable person would consider appropriate in the circumstances. The table below sets out the purposes for which we use each category of information.
| Purpose | How we use the information | Categories used |
|---|---|---|
| Responding to inquiries | To respond to questions or inquiries you send through our contact form. | Identity, Contact, Communications |
| Insurance referrals to KLC Group Canada Inc. | To forward your inquiry, with the contextual details you provide, to a licensed advisor at KLC Group Canada Inc. so that they can contact you about the insurance products you have expressed interest in. | Identity, Contact, Inquiry, Consent |
| Sending commercial messages (with your consent) | To send you optional educational content, product updates, or platform launch notifications. You may withdraw consent at any time. | Contact, Consent |
| Maintaining consent records | To demonstrate, where required by CASL and PIPEDA, that you provided consent and what you consented to. | Consent, Technical |
| Operating and improving the website | To understand how visitors use the site, identify performance issues, and improve content. Aggregate analytics where possible. | Technical |
| Detecting and preventing abuse | To identify automated form submissions, fraudulent activity, or misuse of the website. | Technical, Consent |
| Legal compliance | To comply with applicable laws, regulatory obligations, court orders, or to protect our legal rights. | All categories, as applicable |
We will not use your personal information for purposes that are materially different from those listed above without first obtaining your consent.
6. Your consent
We rely on your consent for collecting, using, and disclosing your personal information. The form of consent we rely on depends on the sensitivity of the information and the purpose:
- Express opt-in consent is required when you submit any form on TopRates.ca that collects personal information. You provide express consent by checking the consent box presented at the form, after reading the consent text. We store the verbatim consent text and the date and time of your consent for our records.
- Implied consent may be relied on for limited purposes such as responding to direct inquiries you send us by email, where the purpose of collection is obvious from your communication.
Withdrawing consent
You may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice. To withdraw consent:
- Visit /withdraw-consent on our website and submit your email address.
- Or email privacy@toprates.ca requesting that your consent be withdrawn.
When you withdraw consent, we will mark your record as withdrawn and stop further contact through our referral form. As required by Canadian privacy and CASL legislation, we retain a record of your original consent and its withdrawal as compliance proof. Your record is marked as withdrawn but not deleted from this consent log. If you wish your record to be fully deleted (rather than marked as withdrawn), email privacy@toprates.ca to request deletion.
If you have already been referred to KLC Group Canada Inc. and have begun communications with them, you must contact KLC Group Canada Inc. directly to withdraw consent for any further communications from them. Their contact information will be provided when they reach out, or upon your request to us.
7. How we share personal information
We do not sell your personal information. We do not rent or trade your personal information. We share personal information only in the following circumstances:
| Recipient | Information shared | Purpose |
|---|---|---|
| KLC Group Canada Inc. | Identity Data, Contact Data, Inquiry Data, and Consent Data submitted through our life insurance referral form. | To enable KLC Group Canada Inc.’s licensed advisors to contact you about the insurance products you indicated interest in. |
| Sanity (CMS hosting) | Form submission records (Identity, Contact, Inquiry, Consent, Technical Data). | To store form submissions on hosted database infrastructure. |
| Resend (email delivery) | Identity Data, Contact Data, and the body of referral emails forwarded to KLC Group Canada Inc. | To deliver referral emails reliably. |
| Vercel (hosting / infrastructure) | Technical Data, in the form of standard request logs. | To operate the website infrastructure. |
| Mortgage brokerage referral partner | Identity, Contact, Inquiry Data, where you submit a mortgage inquiry through our contact form. (Disclosed on the relevant page where this referral is offered.) | To refer mortgage inquiries under the MBLAA referral arrangement exemption. |
| Credit card issuers (affiliate links) | No personal information is transferred by us. If you click an affiliate link and proceed to apply, your information is collected directly by the card issuer under their own privacy practices. | Affiliate compensation tracking only. |
| Legal authorities | Categories of information as required, for compliance with valid legal process or to protect our legal rights. | Legal compliance. |
Independent controllers
When we forward your information to KLC Group Canada Inc., to a mortgage brokerage referral partner, or to any other regulated third party, that recipient becomes an independent controller of your information for the purposes of providing their licensed services. Each such recipient is responsible for its own privacy practices, communications, and compliance obligations once it receives your information. You may need to contact the recipient directly to exercise privacy rights regarding the information they hold about you.
8. Cookies and analytics
TopRates.ca uses limited cookies and analytics to operate the website, understand how visitors use it, and improve content over time.
Strictly necessary cookies
These cookies are required for the website to function properly. They include session cookies and cookies that remember your interaction with our forms during a single visit. You cannot opt out of these cookies if you wish to use our website.
Analytics
We use privacy-respecting analytics to understand traffic patterns and content performance. Where possible we use tools that do not collect personally identifiable information and do not require consent banners under PIPEDA.
If we add more invasive analytics or advertising cookies in the future, we will update this Privacy Policy and present a cookie consent banner to obtain your consent before doing so.
9. How long we keep your information
We retain personal information only as long as necessary for the purposes for which it was collected, or as required by applicable law. Specific retention periods are described below.
| Type of record | Retention period |
|---|---|
| Life insurance referral submissions | Twenty-four (24) months from the date of submission, after which records are purged unless you have asked for earlier deletion or the record has been retained as part of a converted customer relationship. |
| General contact-form inquiries | Ninety (90) days from the date of submission if no further response is needed; longer where an active conversation is in progress. |
| Consent withdrawal records | Retained for the same period as the underlying record (e.g., 24 months for referrals), as proof of consent withdrawal under CASL. |
| Server logs | Up to thirty (30) days, for security and operational purposes. |
| Records subject to legal hold | Retained for as long as required by applicable law or legal process. |
When we no longer have a legitimate business or legal reason to retain your personal information, we will securely delete or anonymize it.
10. How we protect your information
We use reasonable physical, organizational, and technological safeguards to protect personal information against loss, theft, unauthorized access, disclosure, copying, use, or modification. These measures include:
- Encrypted transmission of personal information using HTTPS / TLS.
- Encrypted storage of form submissions on hosted database infrastructure.
- Access controls limiting who can view personal information.
- Audit logging of administrative access to personal information.
- Periodic review of vendors and service providers that handle personal information.
No method of transmission over the internet or electronic storage is fully secure. While we strive to use commercially reasonable means to protect your personal information, we cannot guarantee absolute security. If a privacy breach occurs that creates a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada in accordance with PIPEDA.
11. International data transfers
Some of the service providers we use to operate TopRates.ca process or store data outside of Canada, including in the United States and the European Union. When personal information is transferred outside of Canada, it may become subject to the laws of the destination country, including the laws of any government, court, regulator, or law enforcement agency in that country.
We use service providers that are contractually obligated to protect personal information in accordance with our standards. By using TopRates.ca and submitting personal information to us, you acknowledge that your information may be transferred and processed outside of Canada.
12. Your rights
Subject to applicable Canadian privacy law, you have the following rights regarding your personal information:
- Right of access: to request a copy of the personal information we hold about you and information about how it is used and disclosed.
- Right of correction: to request that we correct inaccurate or incomplete information about you.
- Right of consent withdrawal: to withdraw consent for our use of your personal information at any time, subject to legal or contractual restrictions.
- Right of deletion: to request the deletion of your personal information, subject to retention obligations under applicable law.
- Right to file a complaint: to file a complaint with our Privacy Officer or with the Office of the Privacy Commissioner of Canada.
To exercise any of these rights, contact our Privacy Officer at privacy@toprates.ca. We may need to verify your identity before responding to a request, and we will respond within thirty (30) days as required by PIPEDA.
13. Children and minors
TopRates.ca is not directed at children under the age of thirteen (13). We do not knowingly collect personal information from children under thirteen. If you become aware that a child under thirteen has provided personal information through TopRates.ca, please contact us at privacy@toprates.ca and we will take steps to delete the information.
14. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal obligations, or other operational factors. The “Last updated” date at the top of this policy indicates the most recent revision.
When we make material changes that affect how we handle your personal information, we will provide notice through TopRates.ca, by email if we have your contact information, or both. Your continued use of TopRates.ca after a Privacy Policy update constitutes acceptance of the revised policy.
15. Filing a complaint
If you have a concern or complaint about how we have handled your personal information, please contact our Privacy Officer first at privacy@toprates.ca. We will investigate your concern and respond within thirty (30) days.
If you are not satisfied with our response, you may file a complaint with the Office of the Privacy Commissioner of Canada:
- Website: priv.gc.ca
- Telephone: 1-800-282-1376
- Address: 30 Victoria Street, Gatineau, Quebec, K1A 1H3
16. Contact us
For questions or concerns about this Privacy Policy or our privacy practices:
- Privacy and data protection inquiries: privacy@toprates.ca
- General inquiries: contact@toprates.ca
- Editorial complaints or corrections: editorial@toprates.ca
- Consent withdrawal: visit /withdraw-consent on our website, or email privacy@toprates.ca.
TopRates.ca is operated by Webhub4u Inc..
Insurance referral partner: KLC Group Canada Inc., licensed under FSRA.