Privacy Policy

Butterfly Benefits is a licensed Canadian insurance brokerage and advisory firm based in Thornhill, Ontario. We are subject to the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.

As an insurance advisor, we collect personal information as part of our normal business operations — to assess coverage needs, obtain insurance quotes, process applications, and manage ongoing policy relationships. The collection of this information is necessary to provide our services.

We collect only what we need, use it only for the purposes we've described, and do not sell your personal information to anyone — ever.

We collect personal information in the following categories:

Information you provide directly

• Contact details — name, email address, phone number, mailing address
• Date of birth — required for insurance applications and quote calculations
• Health information — relevant to individual health, disability, and life insurance applications only; collected only when necessary and with your consent
• Coverage details — existing policies, coverage preferences, claims history where relevant
• Business information — for group benefits clients, this may include company name, number of employees, industry, and payroll information
• Financial information — income information may be relevant to certain disability or life insurance applications; payment information is processed through carriers directly, not stored by us
• Communications — any emails, form submissions, or other correspondence with us

Information collected automatically

• Website usage data — pages visited, time on site, browser type, general geographic location (city/region level), and referring page, collected via standard web analytics
• Form submissions — when you submit a quote request or contact form, your submission data is processed and delivered to us via Web3Forms
• Cookies and similar technologies — see Section 8 for details

Information from third parties

• Insurance carriers may provide us with information about policies, claims, or eligibility as part of the normal course of arranging your coverage
• If you were referred to us by another party, we may receive your basic contact details from that party

We use personal information only for the purposes for which it was collected or as otherwise permitted by law:

• To provide insurance advisory services — assessing your needs, obtaining quotes, preparing and submitting applications, and managing your policies
• To communicate with you — responding to inquiries, providing policy information, sending renewal notices, and following up on applications
• To comply with legal obligations — record-keeping requirements as a licensed insurance intermediary, regulatory reporting, and responding to lawful requests
• To improve our services — understanding how our website is used helps us improve content and user experience; this is done using aggregated, non-identifiable data where possible
• To send relevant information — with your consent, we may send updates about products or services that may be relevant to your situation. You can withdraw consent at any time

We do not use your personal information for automated decision-making that has legal or significant effects on you without human review.

We share personal information only where necessary to provide our services or as required by law:

Insurance carriers and underwriters — When we submit an application or request a quote on your behalf, we share relevant personal information with the carrier. This is a core part of our service and cannot be avoided. Carriers are bound by their own privacy policies and applicable law.

Service providers — We use a small number of third-party service providers to operate our business:

• Web3Forms — processes form submissions from our website and delivers them to our email. Form data passes through Web3Forms' servers. Their privacy policy is available at web3forms.com
• Google reCAPTCHA — used to protect our contact and quote forms from spam. reCAPTCHA collects information about your interaction with the form and the device you're using. Google's privacy policy governs this use
• Web hosting and analytics providers — our website is hosted on and may use standard analytics tools. Usage data may be processed by these providers

Regulatory and legal requirements — We may disclose information to regulators, law enforcement, or other parties where required by law, a court order, or where we believe disclosure is necessary to protect our legal rights or the safety of others.

We do not sell, rent, or trade your personal information to any third party for marketing or commercial purposes.

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, or as required by law.

• Active client records — retained for the duration of our advisory relationship and for a minimum of seven years after the relationship ends, as required by insurance regulatory requirements in Ontario
• Prospective client inquiries — if you submitted an inquiry but did not become a client, we retain your contact information for a reasonable period (typically no more than two years) in case you wish to follow up
• Website analytics data — retained in aggregated, anonymised form; identifiable data is not retained beyond what is necessary for standard web operations

When information is no longer required, we destroy or anonymise it using appropriate means.

We take reasonable steps to protect your personal information from unauthorised access, use, disclosure, modification, or destruction. These measures include:

• Secure, encrypted communication channels (HTTPS) for our website
• Limiting access to personal information to those who need it to provide our services
• Using reputable, security-conscious third-party providers
• Maintaining reasonable physical and operational safeguards

No method of transmission over the internet or electronic storage is completely secure. While we use commercially reasonable means to protect your information, we cannot guarantee absolute security. In the event of a privacy breach that poses a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada as required by law.

Our website contains links to third-party websites and services, including insurance carrier portals (Manulife, GMS, Green Shield Canada, TuGo, and others). These sites operate under their own privacy policies, which we encourage you to review. We are not responsible for the privacy practices of third-party websites.

When you click a "Buy Direct" or carrier link on our website, you leave our site and are subject to that carrier's terms and privacy policy. We do not receive your personal information from transactions completed directly with carriers through those links, though we may receive a referral notification.

Third-party services we use on our website include:

• Google reCAPTCHA v3 — spam protection on forms; governed by Google's Privacy Policy and Terms of Service
• Web3Forms — form submission processing; governed by Web3Forms' privacy policy
• Google Fonts — fonts loaded from Google servers; Google may collect limited usage data

Our website uses cookies and similar technologies. Cookies are small text files stored on your device that help websites remember information about your visit.

Types of cookies we use:

• Essential cookies — necessary for the website to function, including security features (reCAPTCHA). You cannot opt out of these without affecting website functionality
• Analytics cookies — used to understand how visitors use our site, such as which pages are most visited. This data is used in aggregate and not linked to individual identities

We do not use advertising cookies or tracking pixels for remarketing purposes.

You can control cookies through your browser settings. Most browsers allow you to refuse cookies or delete them after the fact. Note that disabling certain cookies may affect website functionality.

Under PIPEDA and applicable provincial legislation, you have the following rights with respect to your personal information:

• Right to access — you may request a copy of the personal information we hold about you
• Right to correct — if information we hold is inaccurate or incomplete, you may request that we correct it
• Right to withdraw consent — where we process your information based on consent (such as for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing before the withdrawal
• Right to complain — if you believe we have mishandled your personal information, you may file a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca, or with the applicable provincial privacy commissioner

To exercise any of these rights, contact us using the details in Section 12. We will respond within 30 days. In some cases, we may need to verify your identity before processing a request.

Our services are directed at adults. We do not knowingly collect personal information directly from children under the age of 18 through our website.

Children's information may be collected as part of family insurance applications — for example, as dependents on a group benefits or individual health plan. In these cases, information is collected from and with the consent of the parent or guardian who is the primary applicant.

We may update this privacy policy from time to time to reflect changes in our practices, applicable law, or the services we offer. When we make material changes, we will update the "Last updated" date at the top of this page.

We encourage you to review this policy periodically. Continued use of our services after a policy update constitutes acceptance of the revised policy.

For any questions, concerns, or requests relating to your personal information or this privacy policy, please contact us:

If you are not satisfied with our response to a privacy concern, you have the right to contact the Office of the Privacy Commissioner of Canada at 1-800-282-1376 or priv.gc.ca.