Privacy Policy
Effective Date: May 5, 2026 Last Updated: May 5, 2026
Redvisa Immigration Services Canada Inc. (“Redvisa,” “we,” “us,” or “our“) is a regulated Canadian immigration consultancy based in Kitchener, Ontario. We are licensed by the College of Immigration and Citizenship Consultants (CICC), and our work is led by a Regulated Canadian Immigration Consultant (RCIC).
We take your privacy seriously. Immigration is personal, and the information you share with us — your identity documents, family details, education, employment history, financial position — is among the most sensitive information you’ll ever hand over. This Privacy Policy explains, in plain language, what information we collect when you visit redvisa.ca (the “Website”) or engage our services, why we collect it, how we use it, who we share it with, and the choices you have.
By using our Website or services, you agree to the practices described in this Privacy Policy.
1. Who This Policy Applies To
This Privacy Policy applies to:
- Visitors to redvisa.ca and its subdomains
- People who contact us by form, email, phone, WhatsApp, or social media
- People who book a consultation with us
- Clients who retain Redvisa for immigration services
- Recipients of our marketing emails, newsletters, or ads
If you are a current client, the Retainer Agreement you signed with Redvisa contains additional confidentiality and file-handling terms specific to your case. Where the Retainer Agreement and this Privacy Policy address the same matter, the Retainer Agreement governs your client file.
2. The Information We Collect
2.1 Information You Provide Directly
When you fill out a form, book a consultation, message us, or engage us as a client, you may provide:
- Identifying information: full name, date of birth, gender, nationality, country of residence, photograph
- Contact information: email address, phone number, mailing address, WhatsApp number
- Immigration-related information: passport details, visa history, IRCC application numbers, biometric details, education and credential information, employment history, language test scores, family composition, travel history, prior refusals, medical or criminal history (where relevant to your application)
- Financial information: proof of funds, payment information, employment income (we do not store full credit card numbers — payments are processed by our payment provider)
- Files and documents: anything you upload through our intake forms, client portal, email, or messaging channels
- Communications: the content of your messages, calls, and meetings with us
2.2 Information Collected Automatically When You Use Our Website
When you visit redvisa.ca, certain information is collected automatically through cookies and similar technologies:
- IP address and approximate location
- Device type, operating system, and browser type
- Pages viewed, time on page, click paths, and referring URL
- Date and time of your visit
- Anonymous identifiers used for analytics and advertising
See Section 8 (Cookies and Tracking Technologies) and Section 9 (Meta Advertising and Tracking) for details on what each tool collects.
2.3 Information We Receive From Third Parties
We may receive information about you from:
- Meta Platforms (Facebook, Instagram): when you interact with our ads, message us through Messenger or Instagram DM, or click through from our paid campaigns
- Google: through Google Ads, Google Analytics, and Google Search Console
- ManyChat: when you trigger an automated keyword response on our social channels
- Calendly and Stripe: when you book and pay for a consultation
- Referral partners or co-counsel (with your consent), where relevant to your matter
- Government agencies including Immigration, Refugees and Citizenship Canada (IRCC), provincial nominee programs, visa offices, and law enforcement, where they communicate about your file
3. How We Use Your Information
We use your information for the following purposes:
| Purpose | Examples |
|---|---|
| Providing immigration services | Assessing your eligibility, preparing and submitting applications to IRCC and provincial programs, communicating with government agencies on your behalf, file management |
| Responding to your inquiries | Replying to form submissions, DMs, emails, WhatsApp messages, and consultation requests |
| Operating our Website | Hosting, security, performance, analytics, fixing bugs |
| Marketing and advertising | Sending newsletters, running Meta and Google ad campaigns, building lookalike audiences from existing leads, retargeting Website visitors — where permitted by law and your consent |
| Regulatory and professional obligations | Complying with the CICC Code of Professional Conduct, Retention of Client File rules, anti-money-laundering checks, and IRCC’s Use of a Representative process |
| Legal compliance | Responding to lawful requests from courts, regulators, and government authorities |
| Improving our services | Understanding which content is useful, which programs people ask about most, and how to improve our intake and processes |
4. Legal Basis for Collecting and Using Your Information
We rely on the following legal grounds under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Canadian provincial privacy laws:
- Your consent — express consent for sensitive information and marketing communications; implied consent where the purpose is obvious from the context (for example, providing your email on a contact form so we can reply to you)
- Performance of our services — processing necessary to deliver the immigration services you’ve retained us for
- Legal obligation — where we are required to retain or disclose information by law or by our regulator (CICC)
- Legitimate business interests — operating our Website, preventing fraud, ensuring information security
You can withdraw your consent at any time. See Section 14 (Your Privacy Rights).
5. How We Share Your Information
We do not sell your personal information. We share it only as described below.
5.1 With Government Agencies (Client Files Only)
If you retain us as a client, we share your information with:
- Immigration, Refugees and Citizenship Canada (IRCC)
- Canada Border Services Agency (CBSA)
- Provincial nominee programs (e.g., OINP, BC PNP, AINP)
- Visa Application Centres (VACs) and visa offices
- Designated learning institutions, employers, and other parties as required to advance your application
This sharing is authorized under the Use of a Representative (IMM 5476) form you sign with us.
5.2 With Trusted Service Providers
We use a small number of vetted technology vendors to operate our business. These providers process information on our behalf, under contract, and are required to keep it confidential and secure. Current providers include:
| Provider | Purpose |
|---|---|
| HubSpot | Customer relationship management and email nurture |
| CaseEasy | Case management and secure client portal |
| Calendly | Consultation scheduling |
| Stripe | Consultation payment processing |
| ManyChat | Automated DM responses on Instagram, Facebook, and TikTok |
| Meta Platforms (Facebook, Instagram, Messenger) | Advertising, messaging, and analytics |
| Google (Analytics, Ads, Workspace) | Website analytics, advertising, and email |
| Hostinger | Website hosting |
| WhatsApp (Meta) | Client and prospect messaging |
We review our vendor list periodically and update this Policy when it changes meaningfully.
5.3 With Our Regulator
The College of Immigration and Citizenship Consultants (CICC) may require disclosure of information from a client file in connection with a complaint, audit, or investigation. We will comply with any such lawful demand from our regulator.
5.4 With Legal and Professional Advisors
We may share information with our own lawyers, accountants, auditors, and insurers where reasonably necessary, under confidentiality obligations.
5.5 In Response to Legal Process
We may disclose information when required by law — for example, in response to a court order, subpoena, search warrant, or other lawful demand.
5.6 In a Business Transaction
If Redvisa is involved in a merger, acquisition, sale of assets, or insolvency, your information may be transferred as part of that transaction. We will notify affected clients and require any successor to honour this Privacy Policy.
6. International Data Transfers
Some of our service providers (including Meta, Google, HubSpot, Stripe, and others) store and process information on servers located outside Canada — primarily in the United States and the European Union. When information is transferred to another country, it becomes subject to the laws of that country, and foreign authorities may, in some cases, lawfully access it.
We require our service providers to apply protections comparable to those in Canadian law. By using our Website or services, you acknowledge that your information may be transferred and processed outside Canada.
7. How Long We Keep Your Information
We retain your information only for as long as necessary for the purposes described in this Policy, or as required by law and our regulator.
- Client files (retained matters): at least six (6) years from the date the file is closed, in accordance with the CICC’s Retention of Client File requirements
- Prospect/lead information (people who inquired but did not retain us): up to 24 months from your last interaction, unless you ask us to delete it earlier
- Marketing list subscribers: until you unsubscribe or ask us to remove you
- Website analytics data: typically 14–26 months in our analytics tools (see your browser settings to limit this)
- Financial and tax records: as required by Canadian tax law, generally 6 years
After the applicable retention period, we securely destroy, delete, or anonymize the information.
8. Cookies and Tracking Technologies
Our Website uses cookies, pixels, and similar technologies to function properly, understand how visitors use the site, and deliver relevant advertising.
8.1 Types of Cookies We Use
- Strictly necessary cookies — required for the site to work (security, session, load balancing)
- Performance and analytics cookies — used by Google Analytics and similar tools to count visits, understand which pages are popular, and improve the site
- Functionality cookies — remember your preferences (language, recent forms)
- Advertising cookies — used by the Meta Pixel, Google Ads, and similar tools to measure ad performance and serve you relevant ads on Facebook, Instagram, Google, and partner sites
8.2 Managing Cookies
You can control cookies through your browser settings. Most browsers allow you to refuse cookies or delete existing ones. Disabling some cookies may limit Website functionality.
You can also opt out of personalized advertising through:
- Your Ad Preferences on Facebook: facebook.com/ads/preferences
- Your Ad Preferences on Instagram: through the Instagram app settings
- Google Ads Settings: adssettings.google.com
- Digital Advertising Alliance of Canada: youradchoices.ca
9. Meta (Facebook & Instagram) Advertising and Tracking
We advertise on Meta platforms (Facebook, Instagram, Messenger). To do this, we use Meta’s advertising and measurement tools — and we want to be specific about what that involves so you can make informed choices.
9.1 The Meta Pixel and Conversions API
We have installed the Meta Pixel on redvisa.ca, and we may also use the Meta Conversions API for server-side event tracking. These tools collect information about your visit, such as:
- Pages you view on redvisa.ca
- Buttons you click (e.g., “Book Consultation”)
- Forms you submit
- Whether you arrived from a Meta ad
- Hashed identifiers (such as a hashed email address if you submit a form), your IP address, browser, and device
This information is shared with Meta. Meta uses it to:
- Measure the performance of our ad campaigns
- Show you our ads on Facebook, Instagram, and Messenger if you’ve visited our Website (retargeting)
- Help us reach people similar to our existing visitors and clients (Lookalike Audiences)
- Improve Meta’s own products and services in accordance with Meta’s Privacy Policy
9.2 Custom Audiences
We may upload hashed contact information (such as email addresses of newsletter subscribers or past leads) to Meta to create Custom Audiences. Hashing means the data is converted into an irreversible code before it is sent — Meta uses it only to match against existing accounts and deletes non-matches. We rely on your consent and PIPEDA’s reasonable-purposes test for this activity.
9.3 Joint Controllership Notice
For certain measurement and analytics activities involving the Meta Pixel, Redvisa and Meta act as joint data controllers. Redvisa is responsible for providing you with this information and obtaining your consent where required. Meta is responsible for the further processing of the data on its platform. You can read more about Meta’s data practices in the Meta Privacy Policy at facebook.com/privacy/policy and learn about your choices at facebook.com/help/568137493302217.
9.4 Your Choices With Meta Ads
You can:
- Adjust your Ad Preferences in your Facebook or Instagram account settings
- Opt out of off-Meta activity tracking via facebook.com/off_facebook_activity
- Use browser extensions or settings to block tracking pixels
- Email us at tech@redvisa.ca to request that we exclude your information from any future Custom Audiences we operate
10. Other Advertising and Analytics Tools
In addition to Meta, we may use:
- Google Analytics — to understand how visitors use the site. You can opt out using Google’s Analytics Opt-Out Browser Add-on: tools.google.com/dlpage/gaoptout
- Google Ads / YouTube Ads — for paid search and video campaigns
- TikTok — currently for organic content; if we begin running paid TikTok ads, this Policy will be updated to disclose the TikTok Pixel
- Microsoft Clarity / Hotjar–style heatmap tools — only if and when in use; will be disclosed here
11. How We Protect Your Information
We use reasonable physical, technical, and organizational safeguards to protect your information, including:
- Encrypted (HTTPS/TLS) connections to our Website and client portal
- Access controls limiting who at Redvisa can see your file
- Multi-factor authentication on critical business systems
- Vendor agreements with our service providers that require security and confidentiality
- Confidentiality and professional conduct obligations on every team member, consistent with our RCIC duties
No system is 100% secure. While we work hard to protect your information, we cannot guarantee absolute security. Please use a strong, unique password for any client portal account, and contact us immediately if you believe your account has been compromised.
12. Children’s Privacy
Our Website and services are not directed at children under the age of 13. We do not knowingly collect personal information from children except in the context of a family-class immigration application, where a parent or legal guardian provides the information about a minor child for the purpose of that application. If you believe we have inadvertently collected information from a child outside that context, please contact us so we can delete it.
13. Email Marketing and CASL Compliance
If you have subscribed to our newsletter, requested a checklist or eBook, or opted in to receive marketing communications, we will email you in compliance with Canada’s Anti-Spam Legislation (CASL).
Every marketing email we send will:
- Clearly identify Redvisa as the sender
- Include our mailing address and contact information
- Provide a one-click unsubscribe link
You can unsubscribe at any time. We will process unsubscribe requests within 10 business days, as required by CASL. Unsubscribing from marketing emails will not stop transactional or service-related messages (for example, replies to your case-related questions or updates from your client portal).
14. Your Privacy Rights
Under PIPEDA and applicable Canadian privacy laws, you have the right to:
- Access the personal information we hold about you
- Correct information that is inaccurate or incomplete
- Withdraw consent for ongoing collection, use, or disclosure of your personal information (subject to legal and contractual restrictions — for example, we cannot continue representing you on an active immigration file without certain information)
- Request deletion of your information, where retention is not required by law or our regulator
- Lodge a complaint with us or with the Office of the Privacy Commissioner of Canada
To exercise any of these rights, contact our Privacy Officer (see Section 17). We will respond within 30 days, as required by PIPEDA, and may ask you to verify your identity before releasing information.
15. Third-Party Websites and Services
Our Website may link to third-party websites — for example, the IRCC website, the CICC public register, our social media pages, our scheduling tool, or our payment provider. We are not responsible for the privacy practices of those third parties. Please review their privacy policies before submitting information to them.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time as our business, technology, or the law evolves. The “Last Updated” date at the top of this page will always reflect the most recent version. If we make material changes, we will notify you by email (if we have your email address) or through a prominent notice on the Website before the changes take effect.
17. Privacy Officer and Contact Information
If you have questions about this Privacy Policy, want to access or correct your information, withdraw consent, or file a complaint, please contact our Privacy Officer:
Ankush Arora, RCIC Privacy Officer Redvisa Immigration Services Canada Inc. Kitchener, Ontario, Canada
📧 Email: contact@redvisa.ca
We aim to acknowledge your privacy inquiry within 5 business days and provide a substantive response within 30 days.
Redvisa Immigration Services Canada Inc. is led by a Regulated Canadian Immigration Consultant (RCIC) authorized by the College of Immigration and Citizenship Consultants. Verify our standing at college-ic.ca.
