Privacy Policy

1. Introduction

ReFind Immigration Consulting Corp. (“ReFind Immigration Consulting Corp.,” “we,” “us,” or “our”) is committed to protecting the privacy and confidentiality of the personal information entrusted to us. As a Regulated Canadian Immigration Consultant (RCIC) firm based in Blackfalds, Alberta, we adhere to the highest standards of professional conduct and legal compliance, including the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and Alberta’s Personal Information Protection Act (PIPA).

2. Information We Collect

To provide expert immigration services and Strategic Roadmaps, we collect personal information that may include, but is not limited to:

• Contact Information: name, email address, phone number, and physical address.
• Identity Documentation: passport details, birth certificates, and national ID information.
• Professional & Educational History: CVs, transcripts, work experience records, and job titles.
• Financial Information: proof of funds and payment details for consulting services.
• Family Information: details regarding spouses, partners, and dependents.

3. How We Use Your Information

Your information is used strictly for the following purposes:

• Eligibility Assessment: determining your qualification for various Canadian immigration streams (Express Entry, PNP, etc.).
• Representation: preparing and submitting applications to Immigration, Refugees and Citizenship Canada (IRCC) and provincial authorities.
• Communication: sending updates regarding your file, regulatory changes, or requested Strategic Roadmaps.
• Service Improvement: optimizing our custom CRM and intake processes to better serve our clients.

4. Consent and Disclosure

By submitting your information through our website, CRM intake forms, or LinkedIn Lead Gen Forms, you consent to the collection and use of your data as described herein. We do not sell or trade your personal information. Disclosure to third parties occurs only:

• When required to represent you before IRCC or other government bodies.
• When required by the College of Immigration and Citizenship Consultants (CICC) for auditing purposes.
• To secure third-party service providers (e.g., Google Cloud, Cloudflare, Google Analytics) who assist in our operations under strict confidentiality obligations.

5. Data Storage Location and Service Providers

• Hosting: Our website and the eligibility-intake processing service are hosted on Google Cloud Platform in the northamerica-northeast1 (Montréal, Québec) region. Personal information you submit through our website is stored and processed in Canada.
• Eligibility intake: Information submitted through our online eligibility form is transmitted in real time to our case-management system, which is also hosted on Google Cloud Platform in the same Montréal region. No cross-border transfer is involved in this step.
• Edge network (Cloudflare): Network requests to our website transit Cloudflare’s global edge network for TLS termination, content delivery, and DDoS protection. Cloudflare may process limited connection metadata (such as IP addresses, browser headers, and TLS information) outside Canada under its own privacy policy. We do not transmit substantive personal information through Cloudflare beyond what is necessary to deliver web pages over HTTPS.

6. Data Security, Retention, and Breach Notification

• Encryption: Data is encrypted both in transit (HTTPS/TLS) and at rest.
• Access Control: Only authorized personnel involved in your case file have access to your documentation. API keys and database credentials are stored in Google Cloud Secret Manager, accessible only to the production runtime.
• Retention: We retain client records in accordance with the regulatory requirements set by the CICC (typically seven years), after which data is securely destroyed.
• Breach Notification: In the event of a privacy breach posing a real risk of significant harm, we will notify affected individuals and the appropriate Privacy Commissioner without unreasonable delay, in accordance with PIPEDA and PIPA.

7. Cookies, Analytics, and Server Logs

With your consent, we use Google Analytics 4 to measure aggregate website traffic and improve our content. When enabled, Google Analytics sets a small number of first-party cookies (typically _ga and _ga_<container-id>) that allow us to count unique visitors, understand which pages are most useful, and identify where our visitors come from. We have configured Google Analytics to anonymize IP addresses before they are stored, and we have disabled advertising and remarketing signals.

Analytics cookies are disabled by default. The first time you visit our site you will see a banner allowing you to accept or decline analytics cookies. You can change your decision at any time by clearing your browser’s site data for refind.info and reloading the site. You can also opt out of Google Analytics across all websites using the official Google Analytics opt-out browser add-on. Google’s handling of analytics data is described in Google’s Privacy & Terms.

Regardless of your analytics choice, our hosting provider (Google Cloud Run) automatically records technical request logs containing the source IP address, request URL, HTTP status, response time, and browser user-agent. These logs are stored in Google Cloud Logging in Canada and are retained for a limited period (typically 30 days) for security, debugging, and operational purposes.

Information collected through LinkedIn Lead Gen Forms is handled in accordance with this policy and LinkedIn’s privacy standards. We use this data to contact you regarding your expressed interest in Canadian immigration.

8. International Applicants

Most of our prospective clients reside outside Canada. If you reside outside Canada — including in the European Economic Area or the United Kingdom — you may have additional rights under your local data protection laws (such as the EU/UK General Data Protection Regulation). You can exercise those rights by contacting our Privacy Officer using the details in Section 12.

9. Children and Dependents

Personal information about dependent children is collected only as part of a family-class application, sponsorship file, or accompanying-dependent assessment, and only with the express consent of the parent or legal guardian. We do not knowingly collect personal information directly from minors.

10. Your Rights

You have the right to:

• Request access to the personal information we hold about you.
• Request the correction of inaccurate or incomplete data.
• Request information about parties to whom we have disclosed your personal information.
• Withdraw consent for the collection, use, or disclosure of your personal information at any time, subject to legal or contractual restrictions and reasonable notice.
• Withdraw consent for marketing communications at any time.

We will respond to verified requests within the timelines required by PIPEDA and PIPA.

11. Complaint Escalation

If you have a concern about how we handle your personal information, please contact our Privacy Officer first (Section 12). If you are not satisfied with our response, you may file a complaint with:

• The Office of the Privacy Commissioner of Canada — priv.gc.ca
• For Alberta residents, the Office of the Information and Privacy Commissioner of Alberta — oipc.ab.ca

12. Contact Our Privacy Officer

13. Updates to This Policy

We may update this Policy from time to time. The “Last Updated” date at the top reflects the most recent revision. Material changes affecting active clients will be communicated by email.