Privacy Policy

Legal & privacy

How this Canadian site handles website activity, correspondence and privacy requests.

Effective: October 28, 2026Operator: MAFHH INTERNATIONAL LTD

The operator and your privacy contact

This privacy policy applies to CAFinanceCalculators.com, operated by MAFHH INTERNATIONAL LTD. For privacy questions or requests, write to the Privacy Officer, MAFHH INTERNATIONAL LTD, at [email protected].

Include “Privacy request” in the subject and describe the issue or information you want located. Do not attach identity documents to your first message. Sister websites have separate privacy policies.

What the site currently offers

As of October 27, 2026, the Canadian calculator library is being developed. Public browsing does not require an account. These information pages contain no contact form, newsletter signup, payment checkout or financial-data submission form. We do not ask you to send personal financial documents to use them. A future tool that submits or saves inputs must explain that processing before you use it.

Information handled

  • Website delivery and security: a web request necessarily supplies connection and request data, which can include an IP address, requested URL, time, browser information and security events. Hosting and security systems may process or log this information to operate and protect the site.
  • Performance measurement: the public site uses a Cloudflare analytics beacon. It can report page visits, referring pages, browser or device information and loading-performance measurements. Avoid placing personal or financial information in URLs.
  • Correspondence: if you email us, we receive your email address, message, attachments and any information you choose to include.
  • Administration: authorized WordPress administrators use login and security features. Administrative processing is separate from public calculator use.

Purposes and service providers

Information is used to deliver and secure the website, understand performance, respond to enquiries, investigate reported errors, handle privacy requests and meet applicable legal obligations. Hosting, email and infrastructure providers process information needed for their services. Cloudflare describes its processing in its Privacy Policy and Web Analytics documentation. We do not use these pages to sell personal information or build financial-product leads.

Consent and choices

Where consent is required, it must relate to a clear purpose. Optional purposes must not be bundled into access to an otherwise available tool. You can decline to send correspondence, limit what you share, use browser privacy controls and ask about withdrawing consent. Withdrawal does not reverse lawful prior processing and can be subject to legal restrictions. See Cookie Policy for browser storage and OPC guidance on consent.

Retention, safeguards and processing outside Canada

Records are retained for the purpose for which they were collected and for related needs such as completing an enquiry, maintaining security and meeting legal obligations. Retention depends on the record and the service involved. Email, operational logs and backups can have different retention arrangements. A request to delete information is assessed against those purposes and applicable law.

Safeguards need to reflect the sensitivity of the information. Public pages use HTTPS, but no internet service can guarantee absolute security. Avoid sending financial documents or sensitive identifiers through ordinary email.

Hosting, email and infrastructure providers may process information outside your province or Canada. Other jurisdictions may permit government access under their laws. We do not promise Canada-only storage. Ask the Privacy Officer for details relevant to your information.

Access, correction and complaints

Your rights depend on the applicable law and circumstances. They can include access to personal information held about you, correction of inaccuracies, withdrawal of consent and a way to challenge a handling practice. Some provincial laws provide additional rights. These rights have lawful exceptions; deletion is not unconditional in every situation.

Send a request to [email protected] with enough detail to locate the records. We may need proportionate identity verification before releasing information. If PIPEDA applies to an access request, the usual response deadline is 30 days after receipt. Any lawful extension or refusal must be explained with the required notice. See the OPC’s access guidance.

PIPEDA and provincial privacy laws apply according to the activity and jurisdiction. Alberta, British Columbia and Québec have substantially similar private-sector laws, and cross-border commercial processing can engage federal requirements. See the OPC’s jurisdiction guidance.

You may raise a concern with the operator and may also approach the Office of the Privacy Commissioner of Canada or the appropriate provincial regulator, including the Commission d’accès à l’information du Québec. Contacting us does not remove your right to complain to a regulator.

Children, marketing and external sites

The site is for general financial education and is not designed to solicit children’s personal information. A parent or guardian can contact us about information sent by a child. An enquiry does not create marketing consent. If commercial electronic messaging is introduced, applicable consent, sender identification and unsubscribe requirements must be addressed; see CRTC guidance on CASL. External links open services with their own privacy practices.

Legal disclosures and security incidents

Information may be disclosed where required by law or where law permits a necessary disclosure to address fraud, abuse or a security incident. A request for information is assessed against applicable legal requirements; it is not treated as unrestricted permission to disclose personal information.

If a privacy incident affects information under our control, the response must follow applicable investigation, record-keeping, reporting and notification requirements. Under PIPEDA, reporting and individual notification are required when a breach creates a real risk of significant harm, and records of all breaches must be kept. See the OPC’s breach guidance.

Changes to our privacy practices

We update this policy when relevant practices change. A material change to the purpose for processing information may require additional notice or consent. Updating a policy does not by itself supply that consent.

Questions about the version in effect for a particular interaction can be sent to [email protected].