Privacy Policy

Laws we follow and accountability

We handle personal information in accordance with British Columbia's Personal Information Protection Act (PIPA), and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) where it applies to interprovincial or international commercial activity. When we offer services to individuals in the European Economic Area or the United Kingdom, the EU General Data Protection Regulation, the UK GDPR and the UK Data Protection Act 2018 may also apply. Other local laws may apply depending on where you are located and how we interact with you. Our Privacy Officer is accountable for compliance with this policy and can be reached using the details below.

Information we collect

• Contact and identity details, including name, address, email, phone and preferred language.
• Passport and travel document details.
• Date and place of birth, nationality and immigration identifiers such as Unique Client Identifier (UCI) and application numbers.
• Immigration history, current status, applications, refusal letters, officer or GCMS notes and ATIP records.
• Family, relationship and dependent information, including information about your spouse, partner, children or other relatives when relevant to a matter.
• Education, employment, business and financial records, including qualifications, work history, income and supporting documents.
• Medical, criminal, security, admissibility and other sensitive information when relevant to a matter.
• Consultation agreements, service agreements, invoices, payment and billing records. Card details are handled directly by our payment providers and are not stored on our systems.
• Correspondence, call notes and meeting notes.
• Portal documents, uploads, revisions, messages and audit history.
• Institutional or referral information where you have been referred to us through a program such as a Designated Learning Institution referral.
• Website technical information such as IP address, browser and device information, pages viewed, and security event logs.
• Cookie and consent choices you make on this site.

Where we get it

We may receive personal information directly from you, from an authorized family member or representative acting on your behalf, from an institution that has referred you to us, from government agencies where we are authorized to obtain records for you, from our service providers, and from records you ask us to obtain such as ATIP or GCMS notes.

How we use it

• Respond to your enquiry and any follow-up questions.
• Assess whether and how we can assist and, where appropriate, propose a way to work together.
• Schedule and conduct consultations.
• Verify your identity and meet our professional and regulatory obligations.
• Prepare, review, submit and manage immigration or citizenship matters for you.
• Communicate with you and any person you have authorized us to communicate with.
• Operate secure portals so you and, where relevant, an institution can share documents and follow progress.
• Process payments, invoices and accounting.
• Administer University of British Columbia (UBC) Concierge Program referrals and other institutional referral relationships within the scope of those programs.
• Prevent fraud, protect our systems, and investigate suspected misuse.
• Comply with obligations to the College of Immigration and Citizenship Consultants (CICC) and with tax, legal and regulatory duties.
• Understand how the website is used and improve it, using only technologies that you have consented to where consent is required.
• Send marketing communications only where you have provided appropriate consent or where the law otherwise permits, with a clear way to unsubscribe in every message.

Consent and lawful bases

In Canada, we rely on your meaningful consent to collect, use and disclose your personal information for the purposes described in this policy. Consent can be express or implied depending on the sensitivity of the information and the reasonable expectations for the interaction. You can withdraw consent at any time, subject to legal, regulatory and contractual limits and to reasonable notice. Where we are prevented from continuing an activity without certain information, withdrawing consent may limit the services we can provide.

For visitors located in the European Economic Area or the United Kingdom, we rely on the lawful bases available under the EU GDPR and the UK GDPR, including steps requested by you before entering into a contract, performance of a contract, compliance with a legal obligation, our legitimate interests in operating and securing our practice, and your consent where consent is required. You can ask us which basis applies to a particular use.

When we share it

We do not sell or rent your personal information. We share it only in the following limited circumstances:

• With RCICs, employees, contractors and reviewers who need the information to work on your matter and who are subject to confidentiality obligations.
• With family members or representatives you have authorized us to speak with.
• With Immigration, Refugees and Citizenship Canada (IRCC), Employment and Social Development Canada (ESDC), the Canada Border Services Agency (CBSA), the Canadian Security Intelligence Service (CSIS), provincial authorities, educational institutions and other organizations where authorized by you or required for your matter.
• With UBC or another referring institution, only within the authorized referral or program relationship you have entered.
• With technology and operational service providers that help us run the practice, which may include Lovable, Jotform, Monday.com, Supabase, Google Workspace, payment processors, hosting, security and backup providers. Service providers process information for defined purposes and are expected to protect it.
• With professional advisers, insurers, regulators such as the CICC, or law enforcement where permitted or required by law.

Cross-border processing

Some of our service providers process information outside Canada. When information is outside Canada it may be accessible to courts, law enforcement or national security authorities under the laws of the destination country. In particular:

• Jotform states that form data is generally stored in the United States unless the account or form is configured for European storage.
• The Supabase project currently connected to our workflows is hosted in the ap-southeast-2 region in Sydney, Australia.
• Other providers may process data in Canada, the United States, the European Economic Area and other locations that they use for their infrastructure.

We do not promise that all information is stored only in Canada. Where appropriate we use contractual and organizational safeguards with our providers.

Portals and security

We operate secure portals to help centralize document uploads, reviews, feedback and status information for your matter. We use proportionate administrative, technical and physical safeguards, which include access controls, encrypted transmission over the public internet, authentication, restricted staff access on a need-to-know basis, vendor review, backups and incident response procedures. No system can be guaranteed to be perfectly secure and we do not claim absolute security.

How long we keep it

We retain enquiry, consultation, client and portal records only as long as reasonably necessary for the purpose for which they were collected and to meet professional, CICC, accounting, tax, limitation, contractual, institutional and other legal requirements. Under BC PIPA, where we have used personal information to make a decision that directly affects you, we retain that information for at least one year so that you have a reasonable opportunity to request access. When records are no longer required, we securely delete or de-identify them, subject to backup cycles and any legal holds.

Privacy incidents

If we become aware of a suspected privacy incident affecting personal information under our control, we assess, contain, investigate and document it. We will notify affected individuals and regulators where applicable law requires it.

Your rights and choices

You may request access to the personal information we hold about you, an account of how it has been used and disclosed, and correction of any information you believe is inaccurate or incomplete. We provide access at little or no cost, subject to lawful exceptions, and we may need to verify your identity before responding. If we cannot provide access we will explain the reason.

If you are located in the European Economic Area or the United Kingdom, you may also have the rights of access, correction, erasure, restriction, portability, objection and withdrawal of consent where those rights apply.

You can send requests or questions to the Privacy Officer using the contact details below. You also have the right to complain to the Office of the Information and Privacy Commissioner for British Columbia, to the Office of the Privacy Commissioner of Canada where applicable, or to the supervisory authority in your local country in the EEA or the UK.

Children and minors

This public website is not designed to collect information from children on its own for advertising purposes. In the ordinary course of our work, we may handle a minor's personal information when we assist with a family, study, immigration or citizenship matter, normally through or with a parent, guardian, authorized institution or as otherwise permitted by law. When we work with a matter involving a minor we use clear communications and appropriate consent. We do not carry out behavioural advertising directed at known minors.

Cookies and analytics

Our consent tool groups technologies into three categories.

• Essential. Required to operate the site, keep it secure, and remember your cookie choice. Always active.
• Analytics. Would help us understand how visitors use the site so we can improve it. Off by default and used only after your opt-in where consent is required.
• Marketing. Would allow measurement of campaigns and audience-based content. Off by default. We do not currently have any advertising trackers installed.

You can reopen the choices at any time using Cookie preferences in the site footer. Withdrawing consent is as straightforward as giving it. We do not treat continued browsing, scrolling or your browser's default settings as consent.

Automated decisions

We do not use website or portal data to make solely automated decisions that produce legal or similarly significant effects about you.

External links and updates

Our site may link to third-party sites and services that have their own privacy practices. Please review those practices before you interact with them. We may update this policy from time to time. When we make a material change, we will provide reasonable notice on this page or through our usual communications channels rather than relying on silent acceptance.

Contact

Privacy Officer
Sunrise Resettlement Consulting Inc.
Email: iwantto@immigratenow.ca
Telephone: +1 604 545 0761

You may also reach us at the office addresses listed in the site footer, by appointment only.