Master Privacy & Confidentiality Policy

This is the consolidated Master Privacy Policy for Cross Canada Immigration Consulting. It integrates standard Canadian practices (PIPEDA), professional RCIC requirements (CICC), and the specific mandates for GDPR (Europe) and CCPA/CPRA (California).
 

Last Updated: February 20, 2026

This Privacy Policy describes how Cross Canada Immigration Consulting (“we,” “us,” or “our”) collects, uses, and protects your information when you visit www.waystocanada.com (the “Website”). 
 

As a Regulated Canadian Immigration Consultant (RCIC), we maintain the highest standards of confidentiality in accordance with the College of Immigration and Citizenship Consultants (CICC) Code of Professional Conduct.

​

1. Information We Collect

We collect information to provide professional immigration services and improve your experience:

• Personal Identifiers: Name, email address, phone number, and mailing address.

• Immigration & Professional Data: Citizenship, education, work history, and family status provided during "Blitz" or "In-Depth" consultations or via DIY product forms.

• Payment Information: For purchases of digital products or consultations, payments are processed through secure third-party processors. We do not store full credit card details.

• Technical Data: IP addresses, browser type, and usage statistics collected via cookies.

2. Legal Basis for Processing (GDPR Compliance)

If you are located in the European Economic Area (EEA), we process your data under the following legal bases:

• Contractual Necessity: To deliver the consulting services or DIY products you purchased.

• Legal Obligation: To comply with CICC regulatory requirements and Canadian law.

• Consent: When you voluntarily opt-in to our Telegram channel, newsletter, or marketing.

• Legitimate Interests: To maintain website security and improve our service offerings.

3. How We Use & Share Your Information

We use your data strictly for business purposes:

• Service Delivery: Providing immigration advice and legal representation.

• Communication: Sending updates via Telegram or email (only with your consent).

• Third-Party Disclosure: We do not sell or rent your personal information. Data is only shared with:

  • Government Authorities: IRCC or provincial authorities as required for your application.

  • Service Providers: Secure payment processors and website analytics tools.

4. Data Security & International Transfers

• Security: We implement industry-standard encryption and security protocols to prevent unauthorized access.

• International Transfers: Since we are based in Canada, your data is transferred from your home country to our servers in Canada. The European Commission recognizes Canada’s PIPEDA as providing an adequate level of protection for personal data.

5. Data Retention

• Inquiry Data: Kept for 1 month if no contract is signed.

• Client Files: As mandated by the CICC Code of Professional Conduct, we are legally required to retain client files for 6 years following the closing of a file or termination of the retainer agreement.

• Marketing Data: Retained until you unsubscribe.

​​6. Your Global Privacy Rights

Depending on your location (notably under GDPR and CCPA), you have the following rights:

• Access/Know: Request a copy of the personal data we hold about you.

• Correction: Request that we update or fix inaccurate information.

• Erasure/Deletion: Request that we delete your data (subject to our 6-year CICC legal retention audit requirements).

• Portability: Request your data in a structured, machine-readable format.

• Opt-Out: California residents have the right to opt-out of the "sale" or "sharing" of info (Note: We do not sell your data).

• Non-Discrimination: We will not treat you differently for exercising your privacy rights.

​​7. California-Specific Disclosures (CCPA/CPRA)

• Notice at Collection: We collect Identifiers, Customer Records, Commercial Information, and Internet Activity for the business purposes listed in Section 3.

• Sensitive Information: We only collect sensitive information (e.g., passport numbers) to provide immigration services.

• Do Not Sell/Share: We do not sell your data to third parties or share it for cross-context behavioral advertising.

8. Cookies

We use cookies to enhance website functionality. You can manage or disable cookies through your browser settings, though some website features may be limited.

9. Contact Us & Data Requests

To exercise any of your rights or ask questions about this policy, please contact us. ​

10. Do not use this website if you disagree with the Policies above.