Last updated October 15, 2026
1. Our commitment
MLA Hypothèque protects the personal information you entrust to us and uses it only to provide our mortgage brokerage services. This policy explains, in plain language, what information we collect, why, who we share it with, how long we keep it and what your rights are.
MLA Hypothèque is an independent mortgage brokerage firm located at 8765, rue des Graviers, Québec (Quebec) G2K 1V4, registered with the Autorité des marchés financiers (AMF) under client number 3003303032.
This policy applies to our clients and prospective clients (borrowers, co-borrowers, guarantors), to people who contact us or book an appointment, and to visitors to our website. It complies with Quebec’s Act respecting the protection of personal information in the private sector, as amended by Law 25.
2. Person in charge of the protection of personal information
The President of MLA Hypothèque is responsible for the protection of personal information. For any question, access request or complaint, please write to him:
- Title: President and person in charge of the protection of personal information (David Bolduc)
- Email:
- Phone: 581 988-4654
- Address: 8765, rue des Graviers, Québec (Quebec) G2K 1V4
The person in charge ensures that this policy is applied, keeps the register of confidentiality incidents and responds to requests within the time limits set by law.
3. Information we collect
We collect only the information needed to assess your situation and obtain mortgage financing.
| Category | Examples |
|---|---|
| Identity | Name, date of birth, identification documents (verification required by AMF regulations), marital status |
| Contact information | Current and previous addresses, phone number, email |
| Employment and income | Employer, position, length of employment, employment letters, pay stubs, notices of assessment, tax returns, business financial statements |
| Financial situation | Bank statements, investments, debts, loans, down payment and its source |
| Credit | Credit report and credit score obtained from a credit bureau, with your authorization |
| Property | Address, offer to purchase, appraisal, tax bill, current mortgage statement |
| Communications | Emails, meeting notes, signed documents |
| Website | Browsing data collected through cookies (see section 9) |
Some of this information is sensitive, including financial information and your social insurance number. We only ask for your social insurance number when a lender or credit bureau requires it, and you may refuse to provide it to the credit bureau.
4. How and why we collect it
We collect your information mainly from you: in meetings, by phone, by email, through our pre-qualification form or our secure client portal. With your consent, we also obtain information from third parties: credit bureaus, lenders, financial institutions, employers, tax authorities, appraisers, notaries and, where applicable, the partner (real estate broker, financial planner, etc.) who referred you to us.
We use your information to:
- Identify you and verify your identity, as required by AMF regulations.
- Assess your needs and borrowing capacity and make a suitable recommendation.
- Prepare and submit your financing applications to lenders, then follow up until the funds are disbursed.
- Communicate with you about your file, your renewal and, if you agree, about products or market information.
- Meet our legal and regulatory obligations, including keeping client records.
We do not use your information for any other purpose without your consent, unless the law permits it. We never sell your personal information.
5. Your consent
Before opening your file, we ask you to sign our “Consent and Disclosure Notice” form. It specifies the information collected, the third parties to whom it may be disclosed and how long the consent remains valid (180 days after signing).
Your consent is free and informed, and it is requested for specific purposes. You may withdraw it at any time by writing to the person in charge (section 2). However, withdrawing it may prevent us from continuing to process your financing application, and we must keep your file for the period required by law (section 10).
6. Who we share your information with
We share your information only with those who need it to process your financing application, and only what they need. These “authorized third parties” are:
| Category of third party | Why |
|---|---|
| Lenders and financial institutions (banks, credit unions, alternative and private lenders) | Assess and approve your application, then disburse the loan |
| Mortgage insurers | Insure the loan when the down payment is less than 20% |
| Credit bureaus | Obtain your credit report, with your authorization |
| Lender submission platforms and the brokerage network the firm is affiliated with | Send your file to lenders securely |
| Appraisers, notaries and legal advisors | Appraise the property and close the transaction |
| Parties to the securitization, assignment or pledge of the loan | Lenders’ regular financing operations |
| Partner who referred you to us (real estate broker, etc.) | Follow-up on your file and sharing of compensation disclosed in your consent |
| Technology providers | Host and process our files (section 7) |
| Authorities (AMF, tax authorities, courts) | When required by law |
If your broker leaves MLA Hypothèque, we may transfer your file to them and to the firm they join so they can continue to serve you. We keep a copy for the period required by law.
7. Technology providers and hosting outside Quebec
Your information may be hosted or processed outside Quebec, elsewhere in Canada or in the United States, by the technology providers we use. These providers act on our behalf and may use your information only for the services they provide to us.
| Provider | Use |
|---|---|
| Microsoft 365 | Email, calendar, document storage |
| Zoho (WorkDrive, Sign, Bookings) | Client file storage, electronic signature, appointment booking |
| Anthropic (Claude) | Artificial intelligence assistant for analyzing and preparing files (section 8) |
| Supabase and Netlify | Internal file-tracking application and client portal |
| HighLevel | Management of inquiries received through our online advertising |
| Brokerage network signature platform | Electronic signature of consents and contracts |
Before entrusting your information to a provider located outside Quebec, we assess the privacy factors: the sensitivity of the information, the purposes for which it will be used, the provider’s security measures and the legal framework where it will be hosted. We only retain providers that offer adequate protection, and we govern the relationship with a written agreement.
This list may change. The current version is always published on this page.
8. Artificial intelligence
We use an artificial intelligence assistant to help us read your documents, enter information into our systems and prepare the notes attached to your financing applications. These tools save us time; they make no decisions about you.
- Every recommendation and every application submitted to a lender is reviewed and approved by your broker.
- No decision about you is based exclusively on automated processing.
- We use these tools with settings that prevent your information from being used to train the provider’s artificial intelligence models.
- We limit the information shared to what is necessary for the task.
9. Website, cookies and advertising
Our website uses cookies. Functional cookies, which are necessary for the site to work, are always active. Preference, statistics and marketing cookies are disabled by default: they are only activated if you accept them in the consent banner, and you can change your choice at any time. Details of the cookies used can be found in our Cookie Policy.
When you fill out a form in response to one of our social media ads, the advertising platform sends us your contact information so we can get in touch with you. We use it only for that purpose and to follow up on your request.
10. Retention, security and incidents
Retention. We keep your file throughout our business relationship, and then for at least 5 years, as required by the regulations that apply to brokerage firms. At the end of this period, your information is securely destroyed or anonymized.
Security. We protect your information with measures suited to its sensitivity:
- access limited to the people at MLA Hypothèque who need it for their work;
- two-factor authentication on our accounts and tools;
- device encryption and security software on our computers and phones;
- documents sent through a secure portal rather than by email whenever possible;
- backups and periodic review of our providers.
Confidentiality incidents. If your information is accessed, used or disclosed without authorization, or lost, we promptly take steps to reduce the risk of harm. If the incident presents a risk of serious injury, we notify the Commission d’accès à l’information and the people concerned. We keep a register of all incidents.
11. Your rights
At any time, you can:
- access the information we hold about you and obtain a copy;
- have corrected any information that is inaccurate, incomplete or ambiguous;
- withdraw your consent, subject to our legal retention obligations;
- obtain your information in a structured, commonly used technological format, or have it sent to the person of your choice;
- know who your information has been disclosed to and for what purposes.
To exercise these rights, write to the person in charge (section 2). We respond within 30 days. Access to your information is free; reasonable fees may apply for transcription or reproduction, and we will inform you in advance.
12. Complaints
If you believe your information has not been handled in accordance with this policy, please first write to the person in charge (section 2). We will acknowledge receipt of your complaint and respond in writing. If you are not satisfied with our response, you may contact the Commission d’accès à l’information du Québec (www.cai.gouv.qc.ca).
For any other complaint about our services, please see our complaint handling policy.
13. Changes
We may change this policy, particularly when our providers or practices change. The current version is always published on our website, with its last updated date.