Privacy Policy
This policy explains how Facts Immigration Consulting ("we", "us") handles personal information collected through this website, including the online immigration assessment. [Insert legal entity name, jurisdiction of incorporation and business address.]
Information we collect
When you complete the assessment, we collect the information you choose to provide, which may include:
- Contact details: name, email address, phone or WhatsApp number, and preferred contact method.
- Your immigration goal and timeline.
- Background: country of residence and citizenship, age range, English level, years of work experience, whether you have a Canadian job offer, and whether you have applied to Canada before.
- Any comments you choose to add.
- A record of the consents you gave, the wording shown, the time, and the form version.
We do not ask for passport numbers, application numbers, bank details, identity documents or file uploads in the assessment. Please do not include such information in free-text fields.
We do not collect assessments directly from people under 18. Our server keeps your IP address in temporary memory for a short time to limit abuse, but we don't store it with your assessment. When you submit an assessment, we store a one-way, keyed fingerprint (hash) of your IP address, not the address itself, and set a cookie, so that on later visits you can close the assessment window without completing it again. This website uses the Meta Pixel, which sets cookies and tells Meta (Facebook) that a page was viewed or that an assessment was submitted, so we can measure and improve our advertising. Your answers and contact details are never sent to Meta. You can manage ad preferences in your Meta account settings. [Confirm with your legal adviser whether a cookie consent banner is required for your audience.]
How we use your information
- To review your assessment and understand your circumstances.
- To contact you about your inquiry using the details and method you provided.
- To explain possible services, their scope and fees, if further assistance is appropriate.
- To send occasional immigration-related updates and service information by email, only if you opted in. You can withdraw this consent at any time.
- To maintain records of consent, protect against spam and abuse, and meet legal obligations.
Submitting an assessment does not create a professional-client relationship.
Where your information is stored and who can access it
Assessments are sent over an encrypted connection and stored in a secured database operated by our hosting provider, Supabase [confirm region, e.g. Canada (Central)]. Confirmation emails are sent through our email provider, Resend. [List any other service providers, and the countries where they process data.] Your information may be processed outside your country of residence, including in Canada and the United States.
Access is limited to authorized members of our team who sign in to a secured dashboard. Internal email notifications contain only a reference number and a link, not your answers. We do not sell your personal information.
We may disclose information where required by law, or to a professional adviser bound by confidentiality. We will not share your information with immigration authorities or third parties on your behalf without your instruction.
How long we keep it
We keep assessment records for up to 24 months from submission, after which they are deleted. If you become a client, your information is kept in line with the retention requirements that apply to client files. [Confirm periods.]
Your rights and choices
Subject to applicable law, which may include Canada's PIPEDA, India's Digital Personal Data Protection Act, 2023, and the laws of other places where you live, you may ask to access, correct or delete your personal information, withdraw consent, or opt out of marketing emails. To make a request, email [privacy contact email] and include your reference number if you have one. We may need to verify your identity before acting on a request. You may also complain to the Office of the Privacy Commissioner of Canada or your local data protection authority.
Security
We use reasonable technical and organizational safeguards, including encryption in transit, access controls, row-level database security and limited administrative access. No method of transmission or storage is completely secure.
Contact
Questions about this policy: [privacy contact email]. [Name a privacy officer if required.]