Your privacy matters.

1. Scope of this Privacy Policy

This Privacy Policy applies to the website operated for David Colavita, Mortgage Agent Level 2, licence number M23005023, serving clients in Ontario, Canada.

This policy applies to personal information collected through this website, email, telephone calls, website forms, analytics tools, advertising tools, future CRM workflows, and other direct communications with David Colavita.

This website is intended for general information only. Submitting information through this website does not create a mortgage approval, mortgage commitment, lender relationship, or guarantee of financing.

2. Personal information we may collect

Depending on how you interact with the website, we may collect information that you voluntarily provide, information generated through your website activity, and information created through follow-up communications.

Information you voluntarily provide

• Your name.
• Your email address.
• Your phone number.
• Your general location or city.
• Your mortgage goals, such as buying, renewing, refinancing, investing, or self-employed borrowing.
• Information you include in a message, form field, email, or phone conversation.

Website and technical information

• Browser type, device type, operating system, and approximate device characteristics.
• General website usage data, such as pages viewed, buttons clicked, and time spent on the website.
• Referral source, such as whether you arrived from Google Search, a Google Ad, social media, or another website.
• Approximate location inferred from technical information, such as IP address.
• Cookie identifiers, advertising identifiers, analytics identifiers, or similar browser-based identifiers where enabled.

You should not submit highly sensitive information through a basic website contact form, including Social Insurance Numbers, banking passwords, full account numbers, government ID numbers, or detailed financial documents unless David specifically provides a secure method for doing so.

3. Website forms and Netlify Forms

This website may use Netlify Forms to collect and process form submissions. When you submit a form, the information you provide may be transmitted to and stored through Netlify’s form handling infrastructure.

Netlify Forms may process submissions for operational purposes, including spam detection, form storage, form management, email notifications, and integrations such as webhooks. Netlify form submissions may also be filtered by spam detection tools before being treated as verified submissions.

Information submitted through a form may be reviewed by David Colavita or authorized service providers helping operate the website, respond to inquiries, manage leads, or support mortgage-related communications.

If a form submission is connected to a marketing source, such as a Google Ad or analytics campaign, the submission may also be associated with campaign information so David can understand which marketing efforts generated the inquiry.

4. CRM and lead management

If you submit a form, email David, call David, request a consultation, click a call or email link, or otherwise make an inquiry, your information may be added to David’s customer relationship management system or lead management tools.

The CRM may be used to:

• Track your inquiry and requested mortgage service.
• Follow up with you about your mortgage goals.
• Schedule calls or consultations.
• Maintain notes about your communication history.
• Record the source of your inquiry, such as organic search, direct visit, referral, or advertising campaign.
• Send relevant mortgage-related information that you requested or that relates to your inquiry.

You may request that David stop contacting you or remove your information from active marketing or lead follow-up lists, subject to legal, regulatory, professional, or legitimate business recordkeeping requirements.

5. Google Analytics and website measurement

This website may use Google Analytics or similar analytics tools to understand how visitors use the website, measure performance, improve page content, identify popular sections, detect technical issues, and understand which marketing channels are generating website visits or inquiries.

Google Analytics may collect or process information such as pages visited, session duration, device and browser information, approximate location, referring websites, campaign information, event interactions, and other usage information. Google may use cookies, local storage, device information, or similar technologies to provide analytics services.

Analytics information is generally used in aggregate or pseudonymous form to improve the website and marketing performance. It is not intended to collect sensitive mortgage application details through analytics tracking.

If analytics tools are enabled, visitors may be presented with a privacy or cookie preference banner that allows them to accept or decline optional analytics tracking where required or appropriate.

6. Google Ads, conversion tracking, and remarketing

This website may use Google Ads, Google conversion tracking, Google remarketing, Google tag technologies, or similar advertising tools to measure the performance of advertising campaigns and understand whether ads lead to calls, emails, form submissions, page visits, or other conversion actions.

Advertising tools may use cookies, pixels, tags, local storage, device information, or similar technologies to collect information about your visit and interactions with the website. This may include information such as the ad or campaign that led to the visit, pages viewed, buttons clicked, form interactions, calls initiated, emails initiated, and conversion events.

Remarketing or audience features, if enabled, may allow David’s ads to be shown to people who previously visited the website or interacted with certain pages or actions. These tools may be operated by Google or other advertising platforms and may involve the use of advertising identifiers or similar technologies.

This website should not send sensitive mortgage application details, Social Insurance Numbers, banking credentials, full financial documents, or highly sensitive form contents to advertising platforms. Advertising conversion tracking should be limited to measurement events such as form submission, phone click, email click, or page conversion events.

Where required or appropriate, optional advertising and remarketing technologies should only be activated after the visitor has accepted optional tracking through the website’s privacy preference banner.

7. Cookies, local storage, and consent preferences

This website may use cookies, local storage, pixels, tags, or similar technologies. Some technologies are essential for basic website functionality or for remembering your privacy preference. Others may be optional and used for analytics, advertising, conversion measurement, remarketing, or CRM-related follow-up.

Essential technologies

Essential technologies are used to operate the website, remember your privacy preference, support security, prevent abuse, process website forms, and maintain basic functionality. These technologies may be used even if you decline optional tracking.

Optional analytics and advertising technologies

Optional technologies may include Google Analytics, Google Ads conversion tracking, remarketing tags, CRM tracking tools, or similar services. These technologies may help measure website traffic, understand ad performance, improve campaigns, and identify whether visitors complete actions such as calling, emailing, or submitting a form.

Your consent choice

The website may display a privacy preference banner with options such as “Accept optional” and “Decline optional.” If you decline optional tracking, optional analytics, advertising, and remarketing tools should not be intentionally activated for your visit. Your choice may be stored in your browser using local storage so the banner does not appear repeatedly.

You may also control cookies and local storage through your browser settings. If you clear your browser data, use a new device, or use private browsing, your preference may need to be selected again.

8. How personal information may be used

Personal information may be used for purposes that include:

• Responding to your inquiry.
• Contacting you by phone, email, or another method you provide.
• Helping assess your mortgage needs at a preliminary level.
• Preparing for a consultation or follow-up conversation.
• Providing information about mortgage options, renewals, refinancing, purchases, or investment financing.
• Adding your inquiry to a CRM or lead management workflow.
• Measuring website performance and improving website content.
• Measuring Google Ads, Google Analytics, and other marketing campaign performance.
• Understanding which pages, calls-to-action, and campaigns are most useful to visitors.
• Preventing spam, abuse, fraud, or unauthorized use of the website.
• Maintaining records for business, legal, regulatory, compliance, or security purposes.

Personal information will not be used for a new purpose without obtaining consent where required by applicable privacy law.

9. When information may be shared

Personal information may be shared with trusted service providers or parties where reasonably necessary for the purposes described in this policy. These may include:

• Website hosting and form processing providers, including Netlify.
• Spam filtering and security providers.
• CRM, email, calendar, call tracking, or workflow tools used to manage inquiries.
• Analytics providers, including Google Analytics, if enabled.
• Advertising and conversion measurement providers, including Google Ads, if enabled.
• Professional advisors, compliance support, or legal advisors if required.
• Lenders, mortgage partners, or related parties only where appropriate and with your direction or consent.
• Authorities, regulators, or other parties where required by law.

David does not sell your personal information. If advertising or remarketing tools are used, those tools should be used for campaign measurement, marketing optimization, and relevant advertising in accordance with this policy and applicable platform rules.

10. Security

Reasonable administrative, technical, and organizational safeguards are used to help protect personal information against unauthorized access, loss, misuse, disclosure, or alteration.

No website, email system, form service, analytics tool, advertising tool, CRM, or internet transmission can be guaranteed to be completely secure. You should avoid sending highly sensitive financial documents or identification details through standard website forms or unencrypted email unless David provides a secure upload or communication method.

11. Retention

Personal information is retained only as long as reasonably necessary for the purposes described in this policy, including responding to inquiries, maintaining business records, measuring website and advertising performance, meeting legal or regulatory obligations, resolving disputes, preventing fraud or abuse, and supporting legitimate business operations.

Website analytics and advertising data may be retained by service providers, including Google, according to their own data retention settings, policies, and platform configurations. CRM and inquiry records may be retained as long as reasonably needed for follow-up, compliance, business records, and client service.

When information is no longer required, it may be deleted, anonymized, archived, or securely disposed of, subject to legal, regulatory, professional, platform, or technical requirements.

12. Your choices and privacy rights

Subject to applicable law, you may request access to your personal information, ask for corrections, withdraw consent where consent is the basis for processing, or ask questions about how your information is handled.

You may ask David to stop sending non-essential marketing or follow-up communications. Some communications may still be required for administrative, legal, regulatory, or transactional reasons.

You may decline optional analytics and advertising tracking through the website’s privacy preference banner where available. You may also use browser privacy tools, cookie controls, private browsing, ad blockers, or Google account/ad settings to manage certain types of tracking or advertising personalization.

If you clear cookies or local storage, use another browser, use another device, or browse privately, you may need to select your privacy preference again.

13. Third-party websites and services

This website may link to third-party websites, lenders, platforms, social media profiles, scheduling tools, Google services, advertising platforms, analytics platforms, CRM tools, or external resources. Those third parties are governed by their own privacy policies, terms, and security practices.

David Colavita is not responsible for the privacy practices, content, or security of third-party websites or platforms that are not operated by him.

14. Updates to this Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes to the website, forms, CRM tools, analytics tools, advertising tools, legal requirements, platform requirements, or business practices.

The “Last updated” date near the top of this page should be revised whenever material changes are made.