Privacy Policy
1. Who We Are
GetNorthPath operates an online Canadian immigration support platform at getnorthpath.com. Our services include AI-powered document validation, IRCC form preparation, a Chrome Extension for portal data entry, access to Regulated Canadian Immigration Consultants (RCICs), and consultation booking. For privacy inquiries, contact us at [email protected].
2. Scope of This Policy
This Policy applies to personal information collected by GetNorthPath through:
- getnorthpath.com and any sub-domains we operate.
- The GetNorthPath Chrome Extension.
- Emails, consultation forms, and other direct communications with us.
It does not apply to third-party websites or services linked from our platform. Those services have their own privacy notices, which we encourage you to review.
3. Information We Collect
Information you provide directly:
- Identity and contact data (name, email address, phone number, country of residence) when you create an account, book a consultation, or submit our contact form.
- Immigration profile data (nationality, travel history, work and education history, language test scores, family composition) that you enter to use our eligibility tools or form preparation features.
- Documents you upload (e.g. passports, language test results, employment letters) when using the document scanning or form population features.
- Payment information processed by our payment provider. We do not receive or store full card details on our servers.
- Communications you send us, including support messages and consultation notes.
Information collected automatically:
- Technical data: IP address, browser type, operating system, device type, and referring URL.
- Usage data: pages visited, time on page, features used, and interaction events — collected to maintain platform security, diagnose errors, and improve the Service.
- Cookies and similar technologies as described in our Cookie Policy.
4. How We Use Your Information
We use personal information to:
- Deliver and support the Service — including form preparation, document scanning, eligibility assessment, and consultant matching.
- Facilitate RCIC consultations — sharing relevant profile and document information with the assigned consultant under confidentiality obligations.
- Communicate with you — to respond to inquiries, confirm bookings, send service-related notifications, and where you have opted in, share updates about immigration pathways relevant to your profile.
- Improve and develop the platform — using aggregated and de-identified usage data to understand how the Service is used and where it can be enhanced.
- Ensure security and prevent fraud — monitoring for unauthorized access, abuse, and suspicious activity.
- Comply with legal obligations — including responding to lawful requests from regulatory or law enforcement authorities.
We do not sell, rent, or trade your personal information to any third party for their own marketing purposes.
5. Legal Basis for Processing
Where applicable privacy legislation requires a legal basis for processing, we rely on:
- Contract performance — to deliver services you have requested or paid for.
- Legitimate interests — for platform security, fraud prevention, and product improvement, where those interests are not overridden by your rights.
- Consent — for optional analytics cookies and marketing communications. You may withdraw consent at any time.
- Legal obligation — where we are required to process or retain data by applicable law.
6. Service Providers and Sub-Processors
We share personal information with carefully selected service providers who process data on our behalf and under our instructions, including providers of cloud hosting, email delivery, appointment scheduling, payment processing, and analytics. We require all sub-processors to maintain appropriate confidentiality and security standards.
Where you interact with an embedded third-party tool (such as a scheduling widget or payment form), that provider’s own privacy notice may also apply to information you enter through their interface.
We may also share information with RCIC consultants on the platform solely for the purpose of delivering the consultation or review service you have engaged.
7. Your Privacy Rights
Depending on the province or territory in which you reside, you may have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial legislation, including:
- Access — request a copy of the personal information we hold about you.
- Correction — ask us to correct inaccurate or incomplete information.
- Withdrawal of consent — withdraw consent for processing that is consent-based, subject to legal or contractual exceptions.
- Deletion — request erasure of your personal information where it is no longer required for the purposes for which it was collected, subject to applicable legal retention obligations.
- Complaint — file a complaint with the Office of the Privacy Commissioner of Canada or a provincial privacy commissioner if you believe your rights have been violated.
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days, or as otherwise required by law.
8. Data Retention
We retain personal information for as long as necessary to deliver the Service, fulfil the purposes described in this Policy, meet our legal and regulatory obligations, resolve disputes, and enforce our agreements. When information is no longer required, we delete or de-identify it in accordance with our internal retention schedule. Uploaded immigration documents are retained only for the duration of the active engagement unless a longer period is required by law or agreed in your service agreement.
9. International Data Transfers
Our platform and some of our service providers operate in Canada, the United States, and other countries. Personal information may therefore be transferred to, stored in, or accessed from jurisdictions outside your province or country of residence. When data is transferred internationally, we take appropriate steps to ensure protection consistent with applicable Canadian privacy law, such as contractual data processing agreements with our providers.
10. Security
We implement technical, administrative, and organizational safeguards designed to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These include encrypted data transmission (HTTPS), access controls, and regular security reviews. However, no system can be guaranteed to be completely secure. If you suspect a security incident related to your account, contact us immediately at [email protected].
11. Children’s Privacy
The Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a minor, please contact us and we will take steps to delete it promptly.
12. Links to Third-Party Sites
getnorthpath.com may contain links to external websites, government portals (including the IRCC portal), and partner services. This Privacy Policy does not apply to those sites. We encourage you to read the privacy notices of any website you visit that is not operated by GetNorthPath.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data practices. The “Last updated” date at the top of this page will reflect the most recent revision. For material changes, we will provide additional notice by email or through a prominent notice on the website.
14. Contact and Privacy Inquiries
For questions, access requests, or concerns about this Privacy Policy or how we handle your data:
[email protected] · Contact page
GetNorthPath · 1016 Falgarwood Dr, Oakville, ON L6H 2P5
You also have the right to lodge a complaint with the Office of the Privacy Commissioner of Canada if you believe your privacy rights have been violated.