PIPEDA-compliant privacy policy covering: what personal and financial data is collected through lead forms, how lead data is shared with mortgage broker partners (explicit disclosure that form submissions are shared with brokers who have purchased lead access), email marketing practices and CASL compliance, cookie and analytics data collection, data retention periods, user rights to access and delete their data, and contact information for privacy inquiries. Include explicit disclosure about the lead generation business model per Canadian consumer protection standards.