Privacy Policy

LAST UPDATED: 20 AUGUST 2026

Car Loan Connect is a lead generation service. We are not a lender, we do not lend money, and we do not provide credit counselling or financial advice. We take one application and introduce you to one dealership.

1. Who we are

Car Loan Connect is a trade name of 2715537 Alberta Inc., a company incorporated in Alberta, Canada, with its registered address at 1179 Goodwin Circle NW, Edmonton, AB T5T 6W4 (“Car Loan Connect”, “we”, “us”, “our”).

This Policy explains what personal information we collect when you use carloanconnect.ca, complete our application form, or contact us by phone, email or SMS, and what we do with it.

Your use of the website and the application form is also governed by our Terms of Service and Use.

Privacy Officer

Brayden Lee, Privacy Officer
Car Loan Connect, 1179 Goodwin Circle NW, Edmonton, AB T5T 6W4
info@carloanconnect.ca

Direct any access request, correction request, withdrawal of consent, or complaint to the Privacy Officer. We respond within 30 days, or tell you if we need longer and why.

2. Which laws apply

We are an Alberta business. Our handling of personal information is governed by Alberta’s Personal Information Protection Act (PIPA) and, where it applies, the federal Personal Information Protection and Electronic Documents Act (PIPEDA). Our commercial email and SMS is governed by Canada’s Anti-Spam Legislation (CASL).

If you are not satisfied with our response to a privacy concern, you may complain to the Office of the Information and Privacy Commissioner of Alberta, or to the Office of the Privacy Commissioner of Canada where PIPEDA applies.

3. What we collect

Only what the application asks for, plus basic website analytics:

• Identity and contact: first and last name, phone number, date of birth.
• Address: street address, city, province, postal code, and how long you have lived there.
• Employment and income: employer, job title, income source, net monthly income, and how long you have been receiving it.
• Self-reported credit situation: a credit rating band you select yourself, plus any events you choose to tell us about, such as a repossession, consumer proposal or collections. This is what you tell us. We do not verify it and we do not obtain it from anyone else.
• Vehicle preferences: type of vehicle, budget, and optionally a specific vehicle.
• Consent records: which consent boxes you ticked and when.
• Website usage: IP address, browser and device type, pages visited, and the ad or referring site you arrived from.

What we do not collect

• We do not run a credit check. We do not obtain a credit report, soft or hard, from Equifax, TransUnion or any other bureau.
• We do not ask for your Social Insurance Number.
• We do not ask for bank account details.
• We do not record telephone calls.
• We do not ask you to upload documents.

4. Why we collect it, and your consent

We collect and use your personal information for three purposes only:

• To match you with one dealership and pass your application to them.
• To contact you about your application by phone, email or SMS.
• To operate and improve the website, including measuring which advertising brings people to us.

We rely on your consent, which you give by submitting the application. You may withdraw it at any time by emailing the Privacy Officer. Withdrawal does not undo processing that already happened, and we may be unable to continue providing the service.

5. Who receives your information

One dealership. When you submit an application, we send it to a single dealership in our network. We do not send it to multiple dealerships, we do not sell it, and we do not license or rent it to anyone.

Your application is sent to one dealership and is not re-sent. We never pass it to a second dealership on our own initiative. If you complete the form again within ninety days, we treat it as the same enquiry and do not make a second introduction. After ninety days a new application is treated as a fresh enquiry, and is normally sent to the same dealership you were matched with before.

Once your application reaches the dealership, that dealership becomes responsible for it under its own privacy policy. They may ask you for further information, including your SIN, and may run their own credit checks, with your consent and on their own terms. We are not responsible for what they do with your information after the introduction.

Service providers

We use a small number of providers to run the service. They receive only what they need, may use it only for what we have asked them to do, and may not use it for their own purposes:

• Website and application hosting
• Email delivery
• SMS delivery and phone number verification
• Address lookup for the address field
• Website analytics and advertising measurement

Advertising

We advertise on Meta (Facebook and Instagram) and use its pixel to measure which ads lead to applications. This may be used to show you our ads elsewhere. You can control this in your Meta Ad Preferences, or through the Digital Advertising Alliance of Canada.

Legal disclosure

We may disclose personal information without consent where the law requires or permits it, including a court order, subpoena or regulatory request, or to investigate fraud. If our business is sold or reorganised, information may transfer to the successor, which must honour this Policy.

6. Automated matching

Matching is automated. Which dealership receives your application is decided by software, based on the vehicle you want, the information you provide about your circumstances, and where you are located. No person reviews every application by hand.

This matching decides who contacts you. It is not a credit decision, an approval, or a rejection, and it does not affect your credit. Any decision about financing is made later by the dealership and its lenders, not by us. If you want to know why you were matched where you were, or want a person to look at it, contact the Privacy Officer.

7. Where your information is held, and for how long

Our systems are hosted in Canada. Some service providers may process information outside Canada, where local authorities may be able to access it under their own laws. Where that happens we require contractual protections and encryption in transit and at rest.

We keep applications for 24 months from submission, then delete or anonymise them, unless a longer period is required by law or needed to resolve a dispute. Consent and unsubscribe records are kept for 3 years as CASL requires. Website analytics are retained for 26 months.

8. How we protect it

Encryption in transit (TLS) and at rest, role-based access so staff see only what their job requires, multi-factor authentication on administrative systems, and an audit log of who viewed or changed an application.

No system is completely secure. If a breach creates a real risk of significant harm, we will contain it, notify affected individuals and the relevant Commissioner as required by law, and keep a record of the incident.

9. Cookies

We use cookies that are strictly necessary for the site and the application form to work, analytics cookies to understand how the site is used, and advertising cookies from Meta to measure and target advertising.

Where a cookie notice is shown on the site, you can set your preferences there and change them later. You can also block or delete cookies through your browser at any time, though the application form may not work correctly without the strictly necessary ones.

Analytics and advertising cookies are not required to use the site or to submit an application.

10. Your rights

• Access a copy of the personal information we hold about you.
• Correct anything inaccurate.
• Delete your information, subject to any legal retention requirement.
• Withdraw consent, including to marketing messages, at any time.
• Complain to us, and then to the Alberta or federal Commissioner.

Email info@carloanconnect.ca. We verify identity before acting on a request, and respond within 30 days. There is no charge.

11. Age

Our service is for individuals aged 18 or older. The application requires a date of birth and rejects anyone under 18. We do not knowingly collect information from minors. If you believe we have, contact the Privacy Officer and we will delete it.

12. Marketing messages

We send commercial email and SMS only with your express consent, given by ticking the marketing box on the application. That box is separate from the consent needed to process your application, and you can apply without it.

Every message identifies Car Loan Connect, includes our mailing address, and offers a way to opt out. Reply STOP to any SMS. We action unsubscribes within 10 business days and keep a suppression list.

13. Changes to this Policy

If we make a significant change we will post a notice on the homepage at least 30 days before it takes effect, and email you if we hold your address for that purpose. Minor corrections are posted with an updated date at the top.

14. Governing law

This Policy is governed by the laws of Alberta and the applicable federal laws of Canada, and disputes are to be resolved in the courts of Alberta. This Policy is written in English; any translation is for convenience only.