Privacy policy
RatePine ("we", "us") is an independent loan comparison service operated by FTDConnect ApS, Strandvejen 130, DK-2900 Hellerup, Denmark. This policy explains what personal information we collect, why, how long we keep it, and the rights you have — in line with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
What we collect
Information you give us: if you fill in a form on this site, we collect the details you enter — typically your name, email address, phone number, province, approximate loan amount and loan purpose.
Consent records: when you're offered marketing consent checkboxes, we record your choice (including a "no"), the exact wording you were shown, and the time, page, IP address and browser it came from. This is our legal proof of what you did and didn't agree to.
Technical information: IP address, browser type (user-agent), and — on advertising landing pages — advertising identifiers such as Meta's click and browser identifiers (fbclid, fbp, fbc) used to measure which ads led to a form submission.
We do not collect government IDs, banking details or credit information. Loan applications happen on the lender's own site, never on ours.
What we use it for
We use your information to respond to your request for loan comparisons, to send you marketing email/SMS only if you expressly opted in (you can withdraw anytime), to measure advertising effectiveness, and to meet our legal record-keeping obligations under Canada's Anti-Spam Legislation (CASL). We do not sell personal information.
Who we share it with
Your information is processed by the service providers who run our infrastructure: Vercel (hosting), Supabase (database), and — for ad measurement — Meta Platforms, which receives contact details only in hashed form together with ad-click identifiers. If we send marketing messages, an email/SMS platform processes them on our behalf. When you click through to a lender, you leave our site and the lender's own privacy policy applies; we don't transmit your form data to lenders.
Where it's processed
Our database is hosted in the European Union and our website infrastructure is operated by international providers. Wherever your information is processed, it is protected by the safeguards described here and by contracts with our providers.
How long we keep it
Consent records, suppression records and message logs are kept for at least three years after our last contact with you — CASL places the burden of proof on the sender, and these records are that proof. Lead details are kept while relevant to the service and deleted or anonymized when no longer needed.
How we protect it
Data is encrypted in transit and at rest, access is restricted by row-level security and role-based keys, and consent records are append-only — they cannot be silently edited or deleted, by anyone.
Your rights
You can ask us for access to the personal information we hold about you, ask us to correct it, ask us to delete it (subject to the CASL retention duty above), and withdraw marketing consent at any time — via the unsubscribe link in any email, by replying STOP to any SMS, or by writing to us. Contact: hello@ratepine.com or FTDConnect ApS, Strandvejen 130, DK-2900 Hellerup, Denmark. We respond to access and deletion requests within 30 days.
If you're not satisfied with our response, you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca).
Changes
If we change this policy, we update the effective date above. Material changes are highlighted on this page.