Privacy policy

Last updated: August 28, 2026.

George Mathew & Associates Lifestyle and Retirement Planning Inc. is responsible for personal information under its control. This policy explains our practices under the Personal Information Protection and Electronic Documents Act (PIPEDA).

What we collect

The public contact form collects your name, email address, optional phone number, enquiry topic and message. If you ask us to provide insurance services, we may also collect the identity, financial, employment, health, lifestyle, beneficiary and policy information needed to assess your needs, obtain quotations, submit an application and service coverage.

The calculators on this site collect nothing. They run entirely in your browser. Nothing you type is transmitted, logged, or stored, and closing the tab discards it.

Why we collect it

We collect and use information to respond to enquiries, understand and document your insurance needs, obtain quotations, prepare and submit applications on your instruction, service coverage, maintain required business records, prevent fraud and meet legal and regulatory obligations. We do not sell personal information.

Consent and choices

We seek meaningful consent at or before collection, subject to exceptions permitted by law. You may withdraw consent by contacting the Privacy Officer, subject to legal, regulatory and contractual limits. Withdrawal may prevent us or an insurer from processing an application or continuing some services. We do not use website enquiries for unrelated marketing without consent.

Who we share it with

We share information only as reasonably required for the purposes above, including with insurers you authorize us to approach; HUB Financial Inc., our managing general agency (MGA), for insurer access and administrative support; reinsurers, medical information services and MIB, where applicable to an authorized application; and providers that support hosting, email, records or security. We may also disclose information where required or permitted by law, regulation or a lawful investigation.

Some service providers may process information outside Ontario or Canada, where it may be subject to the laws of that jurisdiction. We remain responsible for selecting providers and using contractual or other safeguards appropriate to the information and service.

How long we keep it

An enquiry that does not become a client relationship is normally kept for no longer than 24 months after the last contact, unless a longer period is reasonably needed for a legal, fraud-prevention or complaint purpose. Application, policy and advice records are kept for the periods required by law, regulators, insurers and our MGA and only as long as reasonably necessary afterward. Records that are no longer required are securely destroyed or anonymized. You may ask the Privacy Officer about the period that applies to a particular record.

Safeguards

We use administrative, technical and physical safeguards appropriate to the sensitivity of the information. These include limiting access, using secure systems and service providers, keeping devices and accounts protected, and avoiding sensitive information in the public contact form. No internet or email transmission is completely risk-free, so existing clients should use the secure contact method in their policy or service correspondence for health, identity, account or payment information.

Cookies and analytics

This website currently uses no advertising cookies or analytics tools. It requests fonts from Google Fonts, which may receive routine connection information such as IP address and browser details. The hosting provider may keep security and operational logs containing IP address, browser type, requested page and timestamp.

To limit automated spam, the contact handler checks submission timing and temporarily keeps a one-way hashed record derived from the requester’s IP address. The rate-limit record is retained for no more than one hour and does not contain the raw IP address. If analytics or a CAPTCHA service is introduced, this policy will be updated before or when it is enabled.

Access, correction and complaints

You may ask whether we hold personal information about you, request access, challenge its accuracy and ask for a correction. We will verify identity before releasing information and will explain any lawful refusal or limitation.

Privacy Officer: Selvin Mathew. Use the contact form and choose “Complaint or privacy concern,” call (416) 347-5213. Written correspondence can be arranged privately on request. Do not send sensitive personal information through the public form.

We will acknowledge a privacy complaint, investigate it fairly and explain the outcome. If the matter is not resolved, you may contact the Office of the Privacy Commissioner of Canada. Our broader insurance complaint process is available on the Complaints page.

Changes to this policy

We may update this policy when our services, providers or legal obligations change. The current version and revision date will remain available on this page.