Privacy Policy

Who we are

Prospero Team is a team of mortgage brokers practising within Multi-Prêts Hypothèques, a firm registered with the Autorité des marchés financiers. Each broker on the team holds a certificate issued by the Autorité; their name, title and certificate number appear on their pages.

The broker handling your request and the firm within which they practise are responsible for the personal information they hold about you. Our head office contact details appear at the bottom of every page and on the Contact page.

See the Contact page

Privacy officer

A person is designated as the officer responsible for the protection of personal information. They receive your requests for access, correction or withdrawal of consent, as well as your questions about this policy. Their contact details are published at the bottom of every page of the website; until they appear there, the Contact page receives your requests.

We answer every request in writing within 30 days of receiving it.

Information we collect

We only collect the information you send us yourself, through the website’s forms, and the information required for the service to work technically. Here is what is collected, by source.

Contact form

On the website’s Contact page and on each broker’s Contact page: first name, last name, project type, phone number, email address and, if you wish, a description of your project.

Financing request

The request form, on the website and on each broker’s page, collects the information needed to assess a mortgage project:

• your project: type of service, expected timeline, type and occupancy of the dwelling, down payment, price or value of the property, balance of the current mortgage, amount sought, type of loan sought;
• your identity and contact details: name, email, phone, preferred call-back time, address and, optionally, date of birth;
• your financial situation: source of income, annual income, whether there is a co-applicant and their income, monthly debts, support payments, properties owned;
• where applicable, whether you are working with a real estate broker, and a free description of your project;
• your consents, with the date and time you gave them and the version of this policy in effect at that time.

Team brokers’ accounts

The team’s brokers have a management area. About them, we keep: login email address, name, title and certificate number, photo, profile text, office, cities served, languages, specialties and links to their social media accounts. Actions taken in that area are logged; the IP address and browser identifier attached to those actions are anonymized after 12 months.

Visitors’ technical data

No IP address is recorded with your request. To prevent automated submissions, we may limit the number of submissions coming from the same source over a short period; this measure relies on a derived, non-reversible technical value, kept for at most 24 hours and never attached to your request. When anti-bot protection is active on a form, it is described in the “Service providers” section.

Why we collect it

We use your personal information for the following purposes only:

• to review your request and answer it;
• to call you back at the time you indicated;
• to assess your project and prepare your mortgage file;
• with your separate consent, to obtain your credit report from a credit reporting agency;
• with your separate consent, to present your file to the relevant lenders;
• with your separate consent, to send you information by email;
• to prevent abuse and keep the website secure;
• to meet the record-keeping obligations imposed on the broker and the firm by the Act respecting the distribution of financial products and services.

We do not use your information for other purposes without informing you and, where the law requires it, without obtaining your consent.

Consent

Each form presents separate consent boxes, never pre-checked. Consent to being contacted is required to process a request. Consent to a credit check and consent to the transmission of your file to lenders are requested separately, each with its own box; both are required for a financing request, neither for a simple contact. Receiving information by email is optional: we currently use no newsletter tool, and setting one up would lead to an update of this policy.

We keep the date and time of each consent and the version of the policy in effect at that time. You may withdraw your consent at any time by writing to the privacy officer. Withdrawal does not affect processing carried out beforehand, but we may no longer be able to continue handling your request.

Credit check and lenders

When you consent to it in a financing request, the broker handling your file may obtain your credit report from a credit reporting agency — Equifax or TransUnion, depending on the file — and present your file to the lenders relevant to your project, that is, the financial institutions and other mortgage lenders likely to finance it.

Credit reporting agencies and lenders are organizations separate from ours. Each handles your information under its own privacy policy, which we invite you to read.

Who we share your information with

Your information is accessible to the following people and organizations:

• the broker your request is addressed to and, when needed, another broker on the team;
• Multi-Prêts Hypothèques, the firm within which our brokers practise, for the record-keeping required by regulation;
• credit reporting agencies and lenders, only with your consent, as described in the previous section;
• the technical service providers below, who act on our behalf and are not allowed to use your information for their own purposes.

Service providers

Some of these providers are located outside Quebec. Before sharing personal information with them, we assess the privacy-related factors and make sure, by contract, that the information receives adequate protection. We do not sell your personal information.

Retention period

• Requests received through a form: 13 months from receipt, then automatic deletion. This period cannot be extended in our systems. The mortgage file opened by the broker is then kept by the firm for the periods imposed on it by regulation.
• Brokers’ action log: IP address and browser identifier anonymized after 12 months.
• Language preference: 180 days.
• Cookie choice: kept in your browser until you change it or the banner version changes.

At the end of the period, the information is deleted or anonymized so that it can no longer identify you.

Cookies and local storage

On your first visit, a banner lets you accept or decline non-essential cookies. No non-essential cookie is set before you choose. You can revisit your choice at any time through the “Privacy preferences” link at the bottom of every page.

Here is what the website stores in your browser:

• prospero_langue (cookie, 180 days): your language preference, required for the website to work;
• prospero_consentement (local storage): your choice regarding cookies;
• session cookies, only for brokers signed in to their management area.

The banner’s “Audience measurement” and “Advertising” categories currently load no tool: no analytics or advertising service is used on this website. Should that change, the banner would ask for your choice again and this policy would be updated.

Security

Exchanges with the website are encrypted. Data is partitioned so that a broker only accesses the requests addressed to them. Administrative access is restricted and protected by two-factor authentication. Deletion of requests at the end of the retention period is automatic. No measure guarantees absolute security; we undertake to inform you without delay of any incident presenting a risk of serious injury.

Your rights

Under Quebec law, you may:

• access the personal information we hold about you;
• have inaccurate, incomplete or ambiguous information corrected;
• withdraw your consent to the communication or use of your information;
• request that information stop being disseminated or be de-indexed;
• obtain, in a structured and commonly used technological format, the computerized information you provided to us;
• file a complaint with the Commission d’accès à l’information du Québec if you believe your rights have not been respected.

To exercise a right, write to the privacy officer, at the contact details published at the bottom of every page or, failing that, through the Contact page. We may ask you to confirm your identity before proceeding. We answer within 30 days.

Confidentiality incidents

We keep a register of confidentiality incidents. If an incident presents a risk of serious injury, we notify the Commission d’accès à l’information and the persons concerned, and we take reasonable measures to limit its consequences.

Minors

Our services are intended for adults. We do not knowingly collect personal information from persons under 14. If you believe a minor has sent us information, write to us and we will delete it.

Changes to this policy

Each version of the policy carries a number and an effective date, shown at the top of the page. When you give consent, the version in effect is recorded with it. If a change adds a new purpose or a new recipient, we ask for your consent again before submitting your information to it.

Contact us

For any question about this policy, write to the privacy officer or use the Contact page.

Write to us