Privacy Policy

Introduction

MehmiGroup.com (operated by Mehmi Group Corp., referred to as "Mehmi Group", "we", or "us") is committed to protecting the privacy of our users and customers. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website and services. It is designed to comply with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA), and to inform you of your rights. By accessing or using our website or services, you agree to the terms of this Privacy Policy.

This policy applies to all users of MehmiGroup.com, including those in Ontario, elsewhere in Canada, and internationally. If you do not agree with our practices, please do not use our website or provide us with your personal information. We may update this Privacy Policy from time to time (see Changes to the Policy below for more information).

‍

Information We Collect

Personal information means any information about an identifiable individual. Mehmi Group collects several types of personal and financial information through our website, including:

Contact and Identification Information: Your name, email address, telephone number, mailing address, and other basic contact details. We may also collect identification details such as date of birth or government-issued ID numbers (e.g. driver's license or passport number) if you provide them for verification purposes or as required by our lending partners.

Financial and Application Information: Information related to financing applications or service inquiries, such as your income, employment details, business revenue and financial history, banking details, and credit history or credit score. For example, if you apply for financing, we collect details about your business (business name, business address, industry, time in business) and personal finances as needed to process your application and submit it to our lending partners. This may include information about any co-applicants or personal guarantors named on your application.

Credit Bureau Information: As part of the financing application process, we and our lending partners may obtain your credit report and credit score from credit bureaus including Equifax and/or TransUnion. This is done through a hard credit inquiry, which you authorize by submitting a financing application. Hard credit inquiries may affect your credit score. We use credit bureau information solely for the purpose of evaluating your eligibility for financing.

Personal Guarantor Information: If a personal guarantee is required for a financing transaction, we collect personal and financial information from the guarantor(s), including identification, personal credit history, and net worth information. Guarantors consent to a hard credit inquiry being conducted on their personal credit file by the applicable lending institution as part of the underwriting process.

Uploaded Documents: Copies of documents you choose to upload or submit through our website or directly to us. This may include identification documents (such as a driver's license, passport, or other ID), financial documents (such as bank statements, pay stubs, or tax forms), vehicle or equipment information (such as vehicle registration, VIN, or purchase invoices), void cheques or pre-authorized debit forms, and any other documentation required for financing or verification.

Vehicle and Asset Information: If you are seeking financing for a vehicle or equipment, we collect information about that asset. This may include details like the vehicle or equipment type, make, model, year, serial number or VIN, value, condition, hours or mileage, and ownership or registration information. This information is used to assess the asset's eligibility for financing and to support PPSA or provincial security registration by our lending partners.

Technical and Usage Information: When you visit our website, we automatically collect certain technical data about your device and how you interact with our site. This includes your computer or mobile device's Internet Protocol (IP) address, your browser type and version, your operating system, device identifiers, and device settings. We also collect usage data such as the pages or content you view, the dates and times of your visits, the links or buttons you click, and the website that referred you to our site.

Cookies and Tracking Data: We use cookies and similar tracking technologies (described in How Information Is Collected below) that may collect data about your browsing preferences and usage of our site. This can include information on how you navigate and interact with our webpages, which helps us improve our services and personalize your experience.

We limit the personal information we collect to only that which is necessary for the purposes identified in this policy. You have choices about the information you provide; however, if you choose not to provide certain information, you may not be able to use some features of our site or apply for our services.

‍

How Information Is Collected

We collect personal information from you both directly and indirectly, through a variety of methods:

Directly from You: Most of the information we collect comes directly from you. When you fill out forms on our website (such as our contact form, "Get My Rate" form, or a financing application form), we collect the personal and financial details you submit. This includes any information you enter into form fields and any documents you upload. Our website may use third-party form and customer relationship management tools (for example, forms may be powered by our CRM provider, HubSpot) to securely collect and manage this data. Additionally, if you communicate with us via email, phone, or in person, or if you provide information through an online chat or support inquiry, we may collect and retain those communications and any information you share.

Through Automated Technologies: When you browse our site, we and our third-party partners automatically collect technical information via cookies, scripts, pixels, and similar technologies. Cookies are small text files that are placed on your device to remember your preferences and activity. Web beacons or pixels (such as the Meta Pixel used for Facebook/Instagram) are tiny images or code snippets that can track when a page or email is viewed. We use these tools to gather data about your device and usage (as described in Technical and Usage Information above). For example, we use Google Analytics to collect information about how visitors use our website — this service uses cookies to track pages viewed, time on site, browser details, and other usage data. Similarly, we use the Meta Pixel from Facebook/Meta to understand the effectiveness of our Facebook and Instagram advertising campaigns and to help us present relevant ads to you on those platforms. These automated technologies may collect information such as your IP address, browser type, pages visited, and actions taken on the site.

From Credit Bureaus: When you submit a financing application, we and our lending partners may obtain information from credit bureaus including Equifax and/or TransUnion. This includes your personal or business credit report and credit score. A hard credit inquiry is conducted as part of the application and underwriting process. By submitting a financing application, you consent to this inquiry. Hard credit inquiries are visible on your credit file and may affect your credit score.

From Third Parties and Partners: In some cases, we may receive personal information about you from third-party sources, but only with your consent or as permitted by law. This could include information from a lender that is considering your application, identity verification results from third-party verification services, or confirmation of financing terms from our lending partners. Additionally, our analytics and advertising partners such as Google and Meta may provide us with aggregated insights about our website traffic or ad campaigns. These third-party data sources help us better understand our clients and improve our services, and we only engage with third parties that we trust and that have the legal right to share such information.

Cookies and Similar Technologies: You can control or disable cookies through your web browser settings. However, if you block cookies, some features of our site may not function properly. For more details on our use of cookies or to adjust your cookie preferences, you may contact us.

‍

How We Use Your Information

We use the personal information we collect for various purposes related to our business operations and providing services to you. These purposes include:

Providing Products and Services: To process your requests and transactions. We use your information to review and process financing applications, provide quotes or pre-approvals, package and submit applications to our lending partners, and facilitate the financing or services you have requested. We also use it to communicate with you about your application status or any agreements.

Lender Submission and Credit Evaluation: To submit your financing application to one or more of our lending partners for credit evaluation and approval. This includes sharing your personal information, financial information, application documents, and credit bureau data with lending institutions as necessary to assess your eligibility and provide financing offers.

PPSA and Security Registration: Information about you, your business, and the financed asset may be used to register a security interest under the Personal Property Security Act (PPSA) or equivalent provincial legislation on behalf of the approved lending institution. This is a standard requirement of most commercial financing transactions.

Communication: To communicate with you regarding your inquiries, applications, or accounts. This includes sending confirmations, approvals, documentation instructions, invoices, notices, and support communications.

Verification and Eligibility: To verify your identity and the information you provide. We may use identification details or run hard credit checks (with your authorization) to confirm your eligibility for financing or to prevent fraud.

Improvement and Analytics: To analyze, evaluate, and improve our website, products, and services. Technical and usage data helps us understand how users interact with our site and guides us in enhancing the user experience and developing new features.

Marketing and Promotional Communications: To send you information about our services, promotions, or updates that may be of interest to you. We will only send you marketing communications if you have provided consent to receive them, and you can unsubscribe at any time. We comply with Canada's Anti-Spam Legislation (CASL).

Advertising and Retargeting: To show you relevant advertisements on platforms such as Facebook, Instagram, and Google based on your interactions with our site. We do not use your sensitive financial or identity documents for advertising purposes.

Security and Fraud Prevention: To maintain the security of our website and services and to protect against fraud, unauthorized access, or illegal activities.

Legal and Regulatory Compliance: To comply with applicable laws, regulations, court orders, or government inquiries. As a financial services intermediary, we may be required to maintain records of applications and transactions for a defined period under federal and provincial regulations.

Internal Record-Keeping: To maintain business records appropriate for running our company, including records of applications, communications, and transactions.

Aggregated or Anonymized Data: We may convert personal information into aggregated or anonymized formats for research and analysis. Such data no longer identifies individuals and may be used to understand trends or improve our offerings.

‍

Consent and Withdrawal

Consent to Collection and Use: By engaging with our website or services and providing personal information, you consent to Mehmi Group collecting, using, and disclosing your information as described in this Privacy Policy. When you submit a financing application, you also expressly authorize Mehmi Group and our lending partners to conduct hard credit inquiries on your personal and/or business credit file through credit bureaus including Equifax and/or TransUnion.

We aim to obtain meaningful consent as required by PIPEDA. This means we strive to inform you of the purposes for which we are collecting your information at the time of collection, and to use clear language so you understand how your information will be used or shared.

Withdrawal of Consent: You have the right to withdraw your consent at any time, subject to legal or contractual restrictions. You can withdraw consent by contacting us and making a request, or by using any specific opt-out mechanisms we provide. Please note that withdrawing consent will not affect the legality of any processing conducted prior to your withdrawal. In some cases, withdrawal of consent may mean we can no longer provide you with certain services, and we will inform you if that is the case.

Note that once a financing application has been submitted to a lending institution and a hard credit inquiry has been conducted, the inquiry and any resulting credit record cannot be reversed. Withdrawal of consent will prevent further use or disclosure of your information for new purposes going forward.

Managing Cookie Consent: You can manage your preferences for cookies and tracking through your browser settings or through any cookie consent tool provided on our site.

‍

Sharing and Disclosure of Information

We understand that your personal information is important, and we only share it with others under specific circumstances and only as necessary. We do not sell your personal information to unrelated third parties. Below are the situations in which we may disclose or share your information:

Service Providers (Processors): We share personal information with trusted third-party service providers who perform services on our behalf, including IT and hosting providers, analytics services such as Google Analytics, customer relationship management and marketing tools such as HubSpot, advertising partners such as Facebook/Meta and Google, identity verification services, and other operational vendors. All service providers are contractually obligated to protect your information and use it only for the purposes of providing services to Mehmi Group.

Financial Institutions and Lending Partners:

If you apply for financing through us, we will share your information with the lending institutions and partners within our network necessary to evaluate and fulfill your financing request. Mehmi Group works with 10 or more institutional and private lenders across Canada. Your application information, supporting documents, credit bureau data, and personal guarantor information may be shared with one or more of these lenders as part of the application and underwriting process. These lending partners are independent data controllers and have their own privacy policies and legal obligations. We only share the information required to facilitate your financing request.

PPSA and Security Registration: Information about you, your business, your personal guarantors, and the financed asset may be used by the approved lending institution to register a security interest under the PPSA or equivalent provincial legislation. This registration is a standard condition of most commercial financing transactions and is conducted by the lender, not by Mehmi Group.

Legal Requirements and Protection: We may disclose your personal information when required by law or legal process, or when we believe in good faith that disclosure is necessary to comply with applicable laws, regulations, or a legal obligation such as a court order, subpoena, or government demand.

Business Transfers: If Mehmi Group is involved in a business transaction such as a merger, acquisition, or sale of company assets, your personal information may be transferred to a successor or affiliate as part of that transaction. We will ensure the successor entity is bound to protections substantially similar to those set out in this policy.

With Your Consent: Apart from the scenarios above, we will only share your personal information with third parties if you have given us explicit permission to do so.

Advertising Partners: We use the Meta Pixel and Google advertising tools on our site. Data collected through these tools is used solely to evaluate ad performance and improve our advertising strategies. We do not use this data to identify you individually for advertising purposes, and we do not sell advertising or analytics data to third parties.

‍

Cross-Border Data Transfers

Mehmi Group is based in Canada, but personal information we collect may be stored or processed in other countries. Some of our third-party service providers, including web hosts, cloud storage services, and analytics and advertising partners such as Google, Meta, and HubSpot, are located in or have servers in the United States or other jurisdictions outside of Canada. Data transferred to other jurisdictions may be subject to the laws of those countries.

Regardless of where your data is processed, we will take appropriate measures to ensure its protection. Our practices will remain governed by this Privacy Policy, and we employ safeguards such as contractual data protection agreements with our service providers. By using our website or providing us with personal information, you consent to the transfer of your information to jurisdictions outside your home country, including to Canada and the United States.

‍

Data Retention and Storage

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required or permitted by law.

If you apply for financing or use our services, we will retain the information you provided and any records of services provided for the duration of our relationship with you and for a period afterward as required by legal and regulatory obligations. Financial records and transaction details may need to be kept for a defined number of years to comply with federal and provincial regulations, tax laws, or auditing purposes. Even if your application is not approved or you choose not to proceed, we may keep your application information for a period of time for compliance and record-keeping purposes.

If you make an inquiry but do not apply for a service, we will keep your information for as long as needed to respond and follow up, and a reasonable period thereafter. Technical data from website visits is typically stored for a short period unless we are required to retain it longer.

When personal information is no longer required, we will securely delete, destroy, or anonymize it. We strive not to keep personal data for longer than necessary.

Personal information collected through our website is stored on secure servers or systems, including cloud-based databases and storage services provided by trusted third-party companies. All data is stored in accordance with this Privacy Policy and subject to strict security measures as described in the Security Measures section below.

‍

Security Measures

Mehmi Group takes the security of your personal information seriously. We employ administrative, technical, and physical security measures to protect your data from unauthorized access, disclosure, alteration, and destruction.

Our website uses HTTPS and SSL encryption for all data transmission. We maintain firewall protection and intrusion detection systems. Where possible, sensitive personal information is encrypted at rest or pseudonymized. Access to our systems requires authentication including strong passwords and, for administrative access, multi-factor authentication. We regularly update and patch our software to address security vulnerabilities.

We restrict access to personal information within our organization on a need-to-know basis. Team members are trained on privacy and security requirements, and we have internal policies governing how personal data is handled. Physical security controls are in place at our office locations for any physical records.

In the event of a data breach or security incident involving your personal information, we have procedures in place to respond promptly, including notifying affected individuals and the Office of the Privacy Commissioner of Canada as required under PIPEDA.

While we are committed to protecting your information, no method of transmission over the internet or electronic storage is 100% secure. You also play a role in security — please keep any login credentials secure and be cautious of phishing attempts. If you believe the security of your interaction with us has been compromised, please contact us immediately.

‍

Age of Consent

Our website and services are intended for use by adults. By using this website, you represent that you are at least the age of majority in your province or territory of residence (18 or 19 years old in Canada, depending on the province), or that you are the parent or guardian of a minor using our site with your consent. We do not knowingly solicit or collect personal information from children under the age of 13.

If we become aware that we have inadvertently collected personal information from someone under the age of 13 or under the age of majority without proper consent, we will take steps to promptly delete that information. If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us.

‍

Your Rights and Choices

Under applicable privacy laws including PIPEDA, you have certain rights with respect to your personal information that we hold:

Right to Access: You may request a copy of the personal information we hold about you.

Right to Correction: If any of your personal information is inaccurate or incomplete, you may request that we correct or update it.

Right to Withdraw Consent: You may withdraw consent for specific uses of your information at any time, subject to legal or contractual restrictions and noting that a hard credit inquiry already conducted cannot be reversed.

Right to Deletion: You may request that we delete your personal information from our records. We will honor such requests to the extent possible, subject to legal retention obligations.

Right to Challenge Compliance: If you have concerns about our privacy practices, you may contact us to raise a complaint. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada or your provincial Privacy Commissioner.

To exercise any of these rights, please contact us using the information provided in the Contact Information section below. We will respond to requests within 30 days as required by PIPEDA. There is no fee for making a request, though in rare cases involving unusually extensive requests, a minimal fee may apply as permitted by law.

You can unsubscribe from marketing emails at any time by clicking the unsubscribe link in any promotional email or by contacting us directly.

‍

Changes to the Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. When we make changes, we will revise the last updated date at the top of this policy. For significant changes that materially affect how we handle personal information, we will provide a more prominent notice on our website or by email where applicable. Your continued use of our website or services after changes are posted will be deemed acceptance of those changes.

‍

Contact Information

We welcome any questions, concerns, or feedback about this Privacy Policy or our privacy practices. To exercise your rights, make a request, or raise a concern, please contact us:

Mehmi Financial Group

Email: [email protected]

Phone: +1 (437) 777-5901

Address: Suite 501, 77 City Centre Drive, Mississauga, ON L5B 1M5, Canada

If you are not satisfied with our response to a privacy concern, you may contact the Office of the Privacy Commissioner of Canada or your local Privacy Commissioner for further guidance or to file a complaint.

Thank you for trusting Mehmi Group with your personal information. We are committed to protecting your privacy and ensuring your personal data is handled with care and respect.