Effective Date: February 16, 2026
1) Who We Are
CPNIS (Canadian Provincial Nominee & Immigration Services) provides immigration consulting services to individuals seeking assistance with immigration-related matters.
Data Controller (or equivalent term under local law):
Canadian Provincial Nominee & Immigration Services
Madison Centre Tower 4950 Yonge Street Suite 1000 Toronto, Ontario, M2N 6K1
inquiry@cpnis.com
416.447.8151 | 416.447.7033
Privacy Contact:
privacy@cpnis.com
2) Scope of This Policy
This Privacy Policy applies to personal information collected through:
- Our website forms
- Social media lead forms (including Facebook and Instagram)
- Direct messages and messaging platforms (including social media messaging)
- Email, phone, and other communications
- Third-party advertising platforms (where you voluntarily submit information)
- Any other channel where individuals voluntarily submit information requesting our services
This policy is intended to be global. Where local laws require additional disclosures, consent language, or rights, we will provide them through this policy and/or supplemental notices.
3) How We Determine What Laws Apply
Privacy laws can vary based on where you live and where we operate. We aim to comply with applicable laws depending on the circumstances, which may include (examples):
- Canada: PIPEDA and applicable provincial privacy laws
- European Economic Area (EEA): GDPR
- United Kingdom: UK GDPR
- Turkey: KVKK
- Other locations: applicable local privacy and consumer protection laws
4) Legal Basis for Processing
We process personal data only when we have a valid legal basis or lawful ground. Depending on your location and the context, this may include:
- Consent: when you voluntarily submit your information requesting a consultation, assessment, or services
- Legitimate Interests: to respond to inquiries, operate our business, prevent fraud, improve services, and maintain security (where permitted by law)
- Contractual Necessity: to enter into and perform a service agreement with you
- Legal Obligation: to comply with legal, regulatory, and professional requirements
- Vital Interests: in rare cases, to protect someone’s safety
Where required, we will request explicit consent (for example, for certain marketing communications or sensitive information, depending on local law).
5) What Information We Collect
Depending on the nature of your inquiry and what you choose to provide, we may collect:
- Full name and contact details (email, phone number, address)
- Country of residence and nationality (if provided)
- Immigration history and current status
- Visa refusal details and refusal letters (if provided)
- Education, employment, family details, travel history (if relevant and provided)
- Supporting documentation voluntarily provided (for assessment or case handling)
- Communication history (messages, emails, call notes)
- Technical information from your use of our website (for security and performance), if applicable
We aim to collect only what is necessary for assessment, service delivery, compliance, and secure operations.
6) How We Use Your Information
We use your information to:
- Respond to your inquiry and communicate with you
- Assess eligibility for immigration programs and services
- Provide consultation, service proposals, and case support
- Maintain internal records and client relationship management
- Improve our processes and service quality
- Protect against fraud, misuse, and security incidents
- Comply with legal, regulatory, and professional obligations
We do not sell personal information.
7) Information Collected Through Social Media Platforms
When you submit your information through platforms such as Facebook or Instagram Lead Forms:
- Your data is collected first by the platform under its own terms and privacy practices
- The platform transmits the data to us
- We use the data to respond to your request and provide the service you asked about
- We do not use this data for unrelated marketing unless you have provided any consent required by law
8) Marketing Communications
If we send marketing or promotional messages (where applicable):
- You can opt out at any time by using the unsubscribe link (if provided) or contacting us
- We apply consent standards required by your local laws (some regions require opt-in consent)
Service-related messages (for example, replies to your inquiry, appointment confirmations, or case communications) are not marketing.
9) Data Sharing
We may share your information with:
- Licensed immigration consultants within our organization (as applicable)
- Authorized employees or contractors who need access to perform services
- Technology providers (CRM systems, email systems, secure storage, scheduling tools)
- Professional advisors (legal, accounting, compliance) where necessary
- Government authorities, regulators, or law enforcement when required by law
We require service providers to maintain confidentiality and reasonable safeguards, and to process data only for authorized purposes.
10) International Data Transfers
Because we may use service providers or systems that operate in different countries, your information may be stored or processed in Canada or other jurisdictions.
Where required by applicable law, we use appropriate safeguards for cross-border transfers (which may include contractual protections, security measures, and other lawful transfer mechanisms recognized by the relevant jurisdiction).
11) Data Retention
We retain personal information only as long as necessary to:
- Respond to inquiries and provide requested services
- Maintain business and case records
- Comply with legal, regulatory, tax, and professional obligations
- Resolve disputes and enforce agreements
When information is no longer needed, we take steps to delete, anonymize, or securely destroy it, consistent with applicable law and operational needs.
12) Data Security
We implement reasonable technical and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, or destruction. Safeguards may include access controls, account security measures, staff confidentiality controls, and secure storage practices.
No system is 100% secure, but we work to reduce risk using appropriate controls.
13) Your Rights
Depending on your location and applicable law, you may have rights such as:
- Access to your personal data
- Correction of inaccurate or incomplete data
- Deletion/erasure of your data (in certain circumstances)
- Restriction of processing (in certain circumstances)
- Objection to processing (in certain circumstances)
- Data portability (in certain circumstances)
- Withdrawal of consent (where processing is based on consent)
- Filing a complaint with a relevant privacy authority or regulator
To exercise your rights, contact: [privacy email]
We may need to verify your identity before fulfilling requests.
14) Consent
By voluntarily submitting your personal information through our website, social media forms, or direct communication channels, you acknowledge that we may collect and process your information as described in this policy to respond to your request and deliver services.
Where required by law, we will obtain additional or explicit consent.
15) Updates to This Policy
We may update this policy periodically. Changes will be posted on our website with an updated effective date.