Last updated: August 15, 2026
1. Who We Are
Nordaux is an educational platform operated by Manbir Natt ("we," "us," "our"), a licensed Sub-Mortgage Broker (BCFSA #MB612411) with Legacy Mortgage Group. We publish the website nordaux.com. Nordaux itself is not a mortgage brokerage or a lender — mortgage services, if you request them, are provided by him in his capacity as a licensed broker.
2. Information We Collect
- Email addresses — when you subscribe to our newsletter or rate alerts, or submit a contact form
- Usage data — page views and interactions collected via Google Analytics 4 (see Section 5 for details)
- Information you voluntarily submit — via contact forms (name, email, message)
- Calculator inputs — if you click "Get Pre-Approved" or "Request a Broker Match" on a calculator page, the figures you have entered (e.g. purchase price, down payment, rate) are included in your broker match request so the broker has context for your inquiry. This only occurs if you actively click that button.
Our calculators run entirely in your browser — no data is sent to our servers unless you click "Get Pre-Approved" or "Request a Broker Match", at which point your entered figures are submitted as part of your broker inquiry.
3. How We Use Information
- To send the newsletter or rate alerts you subscribed to (CASL express consent required — you opted in)
- To respond to contact form inquiries
- To understand how our content is used so we can improve it
We do not sell, rent, or share your personal information with third parties for marketing purposes.
4. CASL Compliance
All email communications require your express consent at the time of signup. Every email we send includes an unsubscribe link. You may withdraw consent at any time. We retain a record of your consent (timestamp and consent text) as required by CASL.
5. Third-Party Data Processors
We use the following third-party services that may process your personal information:
- Google Analytics 4 — We use Google Analytics to understand how visitors use our site (pages visited, session duration, general location). Google Analytics collects data via cookies and transmits it to Google's servers. We have enabled IP anonymization (
anonymize_ip: true). Google may process this data in the United States or other countries. You can opt out using Google's opt-out browser add-on. See Google's Privacy Policy. - Brevo (Sendinblue) — Email subscriber data (your email address and consent record) is stored and processed by Brevo, a French email marketing platform. Brevo may process data within the EU. See Brevo's Privacy Policy.
We do not sell your data to any third party. These processors are used solely to operate our service.
6. Data Storage
Our server infrastructure is hosted on AWS (Amazon Web Services) in Canada. Email subscriber data is processed by Brevo as described above. If you are a Canadian resident, you have rights under PIPEDA to access, correct, or request deletion of your personal information.
7. How Long We Keep It
We keep personal information only as long as it serves the purpose it was collected for, or as long as the law requires, and then we destroy it.
- Consent records — three years from the date consent was given or withdrawn. CASL requires us to be able to prove consent, and three years covers the limitation period for a complaint.
- Mortgage and contact enquiries — twenty-four months from your last contact with us, after which the record is deleted. If you become a client of the broker, your file is held under that brokerage’s own retention obligations, which are separate from this policy.
- Calculator submissions — twelve months.
- Email subscriptions — until you unsubscribe, plus the consent record above. Unsubscribing removes you from the sending list immediately.
You do not have to wait for these periods to elapse. You can ask us to delete your information at any time using the contact details below, and we will do so unless we are legally required to keep a specific record.
8. Quebec Residents
If you are a Quebec resident, you have additional rights under Quebec's Act Respecting the Protection of Personal Information in the Private Sector (Law 25), including the right to access, correct, or request deletion of your personal information, and the right to be informed of cross-border data transfers. Contact us at the address below to exercise these rights.
9. Your Rights
You may request access to, correction of, or deletion of your personal information by contacting us at [email protected]. We will respond within 30 days.
10. Unsubscribe
You may unsubscribe from any email at any time by clicking the unsubscribe link in that email, or by emailing [email protected] with "unsubscribe" in the subject line.
11. Contact
Nordaux
[email protected]