Privacy Policy
Last updated: 2026-10-10
This policy explains how Priya Mann (“I”, “we”) collects, uses, discloses and protects personal information, both through priyamann.com and in the course of providing insurance and investment advice.
I am an independent insurance and investment advisor licensed in Ontario, British Columbia and Alberta, operating under M&C Wealth Partners Inc. This policy is written to meet the requirements of the federal Personal Information Protection and Electronic Documents Act (PIPEDA), and the Personal Information Protection Acts of Alberta and British Columbia where those apply.
1. Who is accountable
Priya Mann is the individual accountable for personal information under our control and acts as our Privacy Officer. Any question, access request or complaint about privacy can be directed to:
Priya Mann — Privacy Officer
Email: contact@priyamann.com
Telephone: (416) 455-4040
7003 Steeles Ave W #10, Etobicoke, ON M9W 0A2 (by appointment)
2. What we collect
When you use this website
- Information you enter into a contact or quote-request form: your name, email address, telephone number, the product you are interested in, and anything you write in the message field.
- Technical information collected automatically: IP address, browser and device type, pages viewed, referring page, and the date and time of your visit.
- Where you have not opted out, aggregate analytics about how the site is used.
When you become a client
Advising on insurance and investments requires considerably more, and some of it is sensitive:
- Identity and contact details, date of birth, and Social Insurance Number where an insurer or registered plan requires it.
- Health information — medical history, current conditions, medications, height and weight, family medical history, and lifestyle information such as tobacco use. Insurers require this to underwrite an application.
- Financial information — income, assets, debts, existing coverage, and beneficiary details.
- Information about family members you name as beneficiaries or dependants.
We collect only what is needed for the purposes below, and no more.
3. Why we collect it
- To respond to your enquiry and arrange a consultation.
- To assess your needs and recommend suitable insurance or investment options.
- To submit applications to insurers and financial institutions on your instruction.
- To service policies and accounts, including claims, changes and renewals.
- To meet legal, regulatory and licensing obligations, including those of provincial insurance regulators and anti-money-laundering law.
- To operate and improve this website.
We do not use your information for any purpose that is not identified here without asking you first.
4. Consent
By submitting a form on this site you consent to being contacted about your enquiry. Before an application is submitted to an insurer, you will be asked for express written consent covering the collection and disclosure of your health and financial information — because that information is sensitive, implied consent is not sufficient.
You may withdraw consent at any time, subject to legal and contractual restrictions and reasonable notice. Withdrawing consent may mean an application cannot proceed or a policy cannot be serviced. To withdraw consent, contact the Privacy Officer above.
Commercial email. Under Canada’s Anti-Spam Legislation we send commercial electronic messages only where you have consented or where the law otherwise permits. Every such message includes an unsubscribe mechanism, and we act on unsubscribe requests promptly.
5. Cookies and analytics
This site uses a small number of cookies and similar technologies.
| Purpose | Set by | What it does | Can you refuse it? |
|---|---|---|---|
| Analytics | Google Analytics 4 | Aggregate statistics on pages viewed and how visitors arrive. IP addresses are anonymised. | Yes — use Cookie settings in the footer |
| Consent preference | This site | Remembers whether you opted out of analytics, so we do not ask again. | No — it exists to honour your choice |
| Bot protection | Cloudflare Turnstile | Distinguishes real visitors from automated abuse on the contact form. Loaded only on pages with a form. | No — the form cannot be protected without it |
You can change your analytics choice at any time using the Cookie settings link in the footer of every page. You can also block or delete cookies in your browser.
Do Not Track. If your browser sends a Do Not Track signal, this site disables analytics automatically, regardless of any other setting.
6. Who we share it with
We do not sell your personal information, and we never will. We share it only as follows.
- Insurers and financial institutions — when you instruct us to submit an application. They handle your information under their own privacy policies and regulatory obligations.
- Service providers who operate this website and our systems, listed below. They may process information only as needed to provide their service to us.
- Regulators and legal authorities — where required by law, court order, or the requirements of provincial insurance regulators.
- M&C Wealth Partners Inc., the firm under which I am licensed, for supervisory and compliance purposes.
| Provider | Role | Where processed |
|---|---|---|
| Vercel | Website hosting and delivery | United States and global edge network |
| Purelymail | Email delivery for form notifications and correspondence | United States |
| Cloudflare | Bot protection on the contact form | Global network |
| Google (Analytics) | Aggregate website analytics, where not opted out | United States and elsewhere |
| Hostinger | Domain registration and DNS | European Union |
7. Information processed outside Canada
As the table above shows, some of our service providers store or process information outside Canada, principally in the United States. While information is outside Canada it may be accessible to the courts, law enforcement and national security authorities of that country under the laws that apply there.
We use contractual and other means to require comparable protection from these providers, but we cannot guarantee that foreign law will not apply. If this concerns you, contact the Privacy Officer to discuss alternatives before providing information.
8. How long we keep it
| Information | Kept for | Why |
|---|---|---|
| Website enquiries that do not become client relationships | Up to 2 years | To follow up and to answer questions about earlier contact |
| Client files, including applications and policy records | At least 7 years after the relationship ends | Insurance regulatory and tax record-keeping requirements |
| Analytics data | Per Google Analytics retention settings | Aggregate reporting only |
| Records of any privacy breach | At least 24 months | Required by PIPEDA regardless of severity |
When information is no longer needed for these purposes or for legal requirements, it is securely destroyed or anonymised.
9. How we protect it
- The site is served entirely over HTTPS with strict transport security.
- Form submissions are validated on the server, rate limited, and protected against automated abuse.
- Credentials and keys are stored as environment variables, never in code or in the public site.
- Email is authenticated using SPF, DKIM and DMARC to reduce the risk of impersonation.
- Access to client files is limited to those who need it to do their work.
- Paper records, where they exist, are kept secured.
No safeguard is perfect. We do not ask you to send health or financial details through the website contact form, and you should not do so — use a call or a secure method arranged with us instead.
10. If there is a breach
If a breach of our security safeguards creates a real risk of significant harm to you, we will report it to the Office of the Privacy Commissioner of Canada — and to the Alberta or British Columbia Information and Privacy Commissioner where applicable — and notify you directly as soon as feasible. The notification will describe what happened, what information was involved, what we are doing about it, and what you can do to protect yourself.
We maintain records of all breaches of security safeguards for at least 24 months, whether or not they meet that threshold.
11. Your rights
- Access. You may request the personal information we hold about you, and an account of how it has been used and to whom it has been disclosed. We will respond within 30 days, or explain why we need more time.
- Correction. If information is inaccurate or incomplete, tell us and we will correct it, and inform anyone we disclosed it to where appropriate.
- Withdraw consent, subject to the limits described in section 4.
- Opt out of analytics using Cookie settings in the footer.
- Unsubscribe from commercial email at any time.
There is normally no charge. In the limited cases where the law permits a fee, we will tell you the cost before proceeding. We may be unable to provide certain information — for example where it would reveal information about another person — and we will explain why if that happens.
12. Complaints
If you are not satisfied with how we have handled your personal information, please raise it with the Privacy Officer first. We take complaints seriously and will investigate.
If you remain unsatisfied, you may complain to the relevant regulator:
- Office of the Privacy Commissioner of Canada — 1-800-282-1376, priv.gc.ca
- Office of the Information and Privacy Commissioner of Alberta — oipc.ab.ca
- Office of the Information and Privacy Commissioner for British Columbia — oipc.bc.ca
Complaints about insurance advice or conduct can also be directed to the applicable provincial insurance regulator, or to the OmbudService for Life & Health Insurance.
13. Children
This website is intended for adults. We do not knowingly collect personal information directly from children through the site. Where a policy or plan involves a child — an RESP beneficiary, for example — that information is provided by a parent or guardian.
14. Changes to this policy
We may update this policy as our practices, service providers or legal obligations change. The date at the top shows when it was last revised. Material changes will be highlighted on this page.
15. Contact
Priya Mann, Privacy Officer — contact@priyamann.com · (416) 455-4040