MehmiGroup.com (operated by Mehmi Group Corp., referred to as "Mehmi Group", "we", or "us") is committed to protecting the privacy of our users and customers. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website and services. It is designed to comply with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA), and to inform you of your rights. By accessing or using our website or services, you agree to the terms of this Privacy Policy.
This policy applies to all users of MehmiGroup.com, including those in Ontario, elsewhere in Canada, and internationally. If you do not agree with our practices, please do not use our website or provide us with your personal information. We may update this Privacy Policy from time to time (see Changes to the Policy below for more information).
Personal information means any information about an identifiable individual. Mehmi Group collects several types of personal and financial information through our website, including:
We limit the personal information we collect to only that which is necessary for the purposes identified in this policy. You have choices about the information you provide; however, if you choose not to provide certain information, you may not be able to use some features of our site or apply for our services.
We collect personal information from you both directly and indirectly, through a variety of methods:
Cookies & Similar Tech: You can control or disable cookies through your web browser settings. However, note that if you block cookies, some features of our site may not function properly. For example, some parts of the site may require cookies to remember your preferences or keep you logged in (if applicable). For more details on our use of cookies or to adjust your cookie preferences, you may refer to our Cookies policy or contact us.
We use the personal information we collect for various purposes related to our business operations and providing services to you. These purposes include:
We will only retain and use personal information for as long as necessary to fulfill the purposes described above (see Data Retention and Storage for more details on retention). We do not sell your personal information to third-party data brokers or marketers for their own use.
Consent to Collection and Use: By engaging with our website or services and providing personal information, you are giving your consent for Mehmi Group to collect, use, and disclose your information as described in this Privacy Policy. In most cases, your consent is implied by your actions – for example, when you fill out a financing application and submit personal details, it is clear that you are consenting to our use of that information to evaluate and process your application. We may also explicitly request your consent in certain situations, such as when you tick a checkbox agreeing to our terms and this Privacy Policy, or when we request permission to send you marketing communications.
We aim to obtain “meaningful consent” as required by PIPEDA and other laws. This means we strive to inform you of the purposes for which we are collecting your information at the time of collection, and to use clear language so you understand how your information will be used or shared. If we ever wish to use your personal information for a new purpose that we haven’t previously identified, we will seek your consent before doing so (unless otherwise required by law).
Withdrawal of Consent: You have the right to withdraw your consent at any time, subject to legal or contractual restrictions. For example, if you initially consented to receive our email newsletter or to be contacted by phone with offers, you can later opt out. You can withdraw consent by contacting us (see Contact Information at the end of this policy) and making a request, or by using any specific opt-out mechanisms we provide (such as an “unsubscribe” link in marketing emails).
If you withdraw your consent for certain uses of your information, we will stop using or sharing your information for those purposes. Please note, however, that withdrawing consent will not affect the legality of any processing we conducted prior to your withdrawal. In some cases, withdrawal of consent may mean we can no longer provide you with certain services. For instance, if you withdraw consent for us to use and share information required to process a financing application, we will be unable to continue with the application process. We will inform you if this is the case.
Managing Cookie Consent: As mentioned above, you can manage your preferences for cookies and tracking through your browser settings. If our site uses a cookie consent banner or tool, you can also use that to opt in or out of certain categories of cookies (like analytics or advertising cookies).
Keep in mind that certain information may need to be retained by us even after you withdraw consent, if required for legal reasons (see Data Retention and Storage). Withdrawal of consent is not the same as a request for deletion; if you want us to delete your personal information, please see Your Rights and Choices below for the process to make that request.
We understand that your personal information is important, and we only share it with others under specific circumstances, and only as necessary. We do not sell your personal information to unrelated third parties. Below are the situations in which we may disclose or share your information with third parties:
All our service providers are contractually obligated to protect your information, keep it confidential, and use it only for the purposes of providing services to Mehmi Group. We do not permit them to use your personal information for their own marketing or other purposes outside the scope of what we’ve hired them to do.
Advertising Partners – Facebook/Meta and Others: We want to be transparent about how we use information in conjunction with advertising platforms like Facebook and Instagram. We use the Meta Pixel on our site, which means some data about your visit (such as pages viewed or actions taken) is sent to Meta. This helps us with “retargeting” (showing you ads on Facebook/Instagram if you’ve visited our site) and with measuring how effective our ads are (for example, seeing if people who saw an ad then visited our site or took an action). We do not receive personal data like your Facebook profile information from this (unless you explicitly provide information via a Facebook lead form or similar), but Meta may combine the information from our site with data they have about you to tailor ads.
We take steps to limit and protect the data used for advertising. In relation to our use of Facebook/Meta advertising data, we abide by the following principles:
Similar practices apply to any other advertising or analytics partners we use. The data collected is used only for our internal analysis or ad targeting as described, and not for others’ independent purposes. For example, if we use Google Ads conversion tracking, that data is only used to inform us about ad effectiveness and is not sold or shared further.
Third-Party Privacy Policies: Please note that when your information is shared with a third party (such as a financing partner or an analytics provider), that third party will have their own privacy practices and policies which may also apply. We encourage you to read the privacy policies of any third-party services or partners that you interact with. For example, you can review Google’s Privacy Policy to understand how Google Analytics data may be used, or Meta’s Data Policy for information on Facebook/Instagram data practices. However, our agreements with service providers prohibit them from using your data for any purpose other than providing services to us or as required by law.
If you have questions about our third-party sharing practices, you can always contact us for more information.
Mehmi Group is based in Canada, but the personal information we collect may be stored or processed in other countries. Specifically, some of our third-party service providers (such as web hosts, cloud storage services, analytics and advertising partners like Google, Meta, or HubSpot) are located in or have servers in the United States or other jurisdictions outside of Canada. This means that when we share information with them or when they collect information on our behalf, your data may be transferred to and stored on servers located in a country other than Canada.
Differences in Laws: If your personal information is held in another country, it may be subject to the laws of that country and could be accessible to government, courts, or law enforcement authorities in those jurisdictions. For example, data stored in the United States may be lawfully accessed by U.S. authorities under American law. Similarly, data in other countries might be accessed under local laws. It’s important to note that the privacy protections in those countries may differ from those in Canada.
However, regardless of where your data is processed, we will take appropriate measures to ensure its protection. Our practices will remain governed by this Privacy Policy, and we will employ safeguards (such as contractual data protection agreements) to ensure that any service providers outside Canada provide a level of protection for personal information that is comparable to that provided under Canadian law. For instance, when we engage service providers in the U.S., we may include standard contractual clauses or similar legal mechanisms in our agreements with them to protect your data.
By using our website or providing us with personal information, you consent to the transfer of your information to jurisdictions outside of your home country, including to Canada and the United States. If you are located in the European Union (EU) or other regions with data transfer restrictions, please note that we will take steps to ensure that adequate safeguards are in place when transferring your personal information (for example, relying on legal transfer mechanisms recognized by the EU, if applicable).
If you would like to know more about how we handle cross-border transfers of your data, or if you have questions about the policies governing our international service providers, you can contact us (see Contact Information section) and we will be happy to provide more information.
We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required or permitted by law. This section explains how long we keep different types of data and how we securely store it.
Data Retention:
We have internal policies that govern the retention and deletion of client information. The exact time frames for retention can vary depending on the type of information and the legal requirements. We strive not to keep personal data for longer than necessary.
Data Storage and Security:
Personal information collected through our website is stored on secure servers or systems. We may use cloud-based databases and storage services provided by third-party companies (for instance, data you submit might be stored in our account with HubSpot or on secure cloud servers provided by reputable providers). We and our service providers store data electronically; any physical copies of personal information (if any) are kept securely in our offices or facilities with controlled access.
All data is stored in accordance with this Privacy Policy and subject to strict security measures (see Security Measures below for details on how we protect data). For example, our website operates with Secure Sockets Layer (SSL) encryption which protects data during transmission (you can see the padlock icon in your browser when accessing our site, indicating an encrypted connection). Sensitive information (such as identification details or financial data) that we store is protected with appropriate access controls — meaning only authorized personnel who need to see that information for their job duties can access it. Our service providers are also required to implement robust security to protect the data we entrust to them.
In some cases, we may retain certain information in backup archives that are not in active use (for example, in routine back-ups of our systems for disaster recovery). If we delete your data from our active systems, it’s possible it might remain for a period in these secured backups until those backups are cycled out.
If you have specific questions about how long we keep a certain type of information, or if you believe we might be keeping your data longer than necessary, please contact us. We will be transparent about our data retention practices and will honor legitimate requests to delete data (as described in Your Rights and Choices below) in accordance with applicable law.
Mehmi Group takes the security of your personal information seriously. We employ a range of administrative, technical, and physical security measures to protect your data from unauthorized access, disclosure, alteration, and destruction. While no method of transmission over the Internet or electronic storage is 100% secure, we follow industry best practices to safeguard your information.
Technical Safeguards: We use encryption and secure protocols to protect data. Our website uses HTTPS/SSL encryption for all data transfer, which means that information you enter on our site (such as personal details on forms) is encrypted in transit between your browser and our servers. We maintain up-to-date firewall protection and intrusion detection systems to guard our network and servers against unauthorized access. Where possible, we encrypt sensitive personal information at rest (stored in our databases or servers) or apply pseudonymization techniques, so that even if data were accessed without authorization, it would be of limited use. Access to our systems requires authentication (such as strong passwords and, for administrative access, multi-factor authentication), and we regularly update and patch our software to address security vulnerabilities.
Administrative and Organizational Measures: We restrict access to personal information within our organization on a need-to-know basis. This means that only employees or contractors who require your information to perform their duties (for example, a financing specialist reviewing your application, or our customer service staff assisting you) are granted access. Our team members are trained on the importance of privacy and security, and we have internal policies in place to govern how we handle personal data. We also have a designated individual or team responsible for overseeing information security and compliance with privacy regulations, ensuring that we remain vigilant and up-to-date on best practices.
Physical Security: If any personal information is stored or accessible at our physical office locations (for instance, in printed form or on local servers), we implement physical security controls. This may include locked file cabinets for paper records, controlled access to offices (keys or access cards), and security alarm systems. For data centers or cloud providers we use, we rely on their physical security measures which typically include 24/7 security personnel, surveillance cameras, and strict access controls at their facilities.
Monitoring and Testing: We monitor our systems for potential vulnerabilities and unauthorized activity. We may perform security testing and audits (directly or through external specialists) to assess the strength of our protections. If we detect any suspicious activity or potential security issues, we act promptly to investigate and mitigate them.
Incident Response: In the unlikely event of a data breach or security incident involving your personal information, we have procedures in place to respond swiftly. This includes containing the breach, assessing the scope of impact, notifying affected individuals and relevant authorities as required by law (for example, under PIPEDA, significant breaches must be reported to the Office of the Privacy Commissioner of Canada and affected individuals), and taking steps to prevent future incidents.
While we are committed to protecting your information, it’s important to understand that you also play a role in security. Ensure that any credentials (like an account login, if we provide one) are kept secure and that you use a strong password. Be cautious about phishing attempts or fraudulent communications pretending to be us — we will never ask for sensitive information like passwords via email.
If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of an account you have with us has been compromised), please contact us immediately so we can work with you to resolve the issue.
Our website and services are intended for use by adults. By using this website, you represent that you are at least the age of majority in your province or territory of residence (which is 18 or 19 years old in Canada, depending on the province), or that you are the parent or guardian of a minor who is using our site with your consent. We do not knowingly solicit or collect personal information from children under the age of 13.
If you are under the age of majority in your jurisdiction, you must not use our website or services without verifiable parental consent. Parents or legal guardians should supervise the use of our services by minors and are responsible for ensuring that minors’ use is in accordance with this Privacy Policy.
If we become aware that we have inadvertently collected personal information from someone under the age of 13 (or under the age of majority without proper consent), we will take steps to promptly delete that information from our records. If you are a parent or guardian and you believe your child (who is under the applicable age) has provided us with personal information without your consent, please contact us and we will work to remove that information.
We believe in being transparent and giving you control over your personal information. Under applicable privacy laws (such as PIPEDA in Canada, and other data protection laws in other jurisdictions), you have certain rights with respect to your personal information that we hold. These rights include:
General Data Protection Regulation (GDPR) or UK Data Protection Act. These can include the right to object to processing, the right to data portability, and the right to restrict processing under certain conditions. While our business is primarily focused in Canada, we will endeavor to respect these rights for international users where applicable. If you are an EU resident and wish to exercise GDPR rights, please contact us and we will assist you in accordance with applicable law.
Exercising Your Rights: To exercise any of your rights, please contact us using the information provided in the Contact Information section below. Please clearly describe your request – for example, if you want a copy of your data, let us know what information you are seeking. We may need to ask for specific information to verify your identity (such as providing identifying details that match our records) before we fulfill your request. This is to ensure we protect your data from unauthorized access.
We will respond to your request within a reasonable timeframe. For access requests or more complex inquiries, we will aim to respond within 30 days as required by PIPEDA (or within the timeframe required by other applicable laws). There is no fee for making a request, though in rare cases, if your request is unusually extensive, we might charge a minimal fee as permitted by law (we would inform you in advance in such a case).
Managing Communication Preferences: Even if you do not want to make a formal request as above, you can still control certain aspects of how we interact with you. For instance, you can unsubscribe from marketing emails by clicking the “unsubscribe” link in any promotional email, or by contacting us to be removed from our mailing list. You can also ask us not to call you for marketing purposes by letting us know. We will respect your preferences and ensure that you are opted out from further marketing contact if you so choose (however, we may still contact you for transactional or account-related matters, such as messages about an ongoing application or service you are using, as those are not promotional).
We are dedicated to upholding your rights and ensuring your satisfaction. If you have any questions or concerns about your rights or how to exercise them, please reach out to us – we’re here to help.
We may update or modify this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. When we make changes, we will revise the “Last updated” date at the top of this policy (or the Effective Date noted in the Introduction).
How We Notify You of Changes: If the changes are minor or primarily editorial (for example, clarifying language), we may simply post the revised Privacy Policy on our website. For significant changes that materially affect how we handle personal information, we will provide a more prominent notice of the update. This could include a notice on our website’s homepage, a pop-up or banner notification on the site, or an email to users for whom we have contact information, notifying you of the change.
Where required by law, we will also seek your consent for material changes in how we use personal information (for example, if we ever plan to use your data for a new purpose that requires consent).
We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website or services after any changes to this Privacy Policy have been posted will be deemed acceptance of those changes. However, we will not apply changes retroactively to personal information collected previously without your consent, unless required by law.
If you do not agree with the changes to the Privacy Policy, you should stop using our services and you may contact us if you have concerns.
We welcome any questions, concerns, or feedback you may have about this Privacy Policy or our privacy practices. If you:
please do not hesitate to contact us.
Contact us at:
Email: support@mehmigroup.com
Toll-Free Phone: +1 (437) 777-5901
Mailing Address: Mehmi Group Corp. Suite 501, 77 City Centre Drive, Mississauga, ON L5B 1M5, Canada
We will do our best to address and resolve any issues you bring to our attention. If you contact us with a privacy-related request or complaint, please include your name and contact information and a detailed description of your request/concern. We may reach out to you for further clarification if needed.
If you are not satisfied with our response to a privacy issue, you may contact the Office of the Privacy Commissioner of Canada or your local Privacy Commissioner/Data Protection Authority for further guidance or to file a complaint.
Thank you for trusting Mehmi Group with your personal information. We are committed to protecting your privacy and ensuring that your personal data is handled with care and respect.
.png)