Privacy Policy
Last updated: [date of publication]
This policy explains how ThinkAhead Immigration Inc. (“ThinkAhead”, “we”) collects, uses and protects personal information through thinkahead.world and in the course of our work. It is written to meet Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and the EU General Data Protection Regulation (GDPR), and applies wherever you are.
1. Who is responsible
ThinkAhead Immigration Inc.
Suite 900, Two Morneau Shepell Center
895 Don Mills Rd.
North York, Ontario M3C 1W3
Canada
Email: hello@thinkahead.world · Phone: +1 647 896 6507
Our privacy officer is Minhas Ali. Write to hello@thinkahead.world with any question about your personal information.
2. What we collect, why, and on what basis
Visiting the website. Our hosting provider records technical data for every visit: IP address, date and time, page requested, browser and referring page. We use it only to keep the site secure and working (GDPR Art. 6(1)(f), legitimate interests). Server logs are kept for up to [30] days.
Your language and cookie choices. Small, strictly necessary cookies remember the language you chose and your cookie decision. See our Cookie Policy.
Booking a consultation. Bookings are made through Calendly. We receive your name, email address, phone number and any answers you give when booking, and use them to arrange and hold the consultation (Art. 6(1)(b), steps before a contract).
Employer enquiries. Our employer enquiry form collects your name, work email, phone number (optional), company, country, the job titles you are hiring for, the number of positions and any message. We use this to respond and discuss your hiring needs (Art. 6(1)(b) and (f)). The enquiry is stored securely on our website and emailed to our team.
Registration of skilled professionals. Skilled professionals register through a form hosted on Google’s platform. It collects the information shown on the form, such as your name, contact details, country, trade, experience and language level. We use it to assess your readiness and, only with your agreement, to introduce you to employers (Art. 6(1)(a) consent and 6(1)(b)). We never share your profile with an employer without your agreement.
Emails and calls. When you contact us, we keep the correspondence to answer you and to keep a record of our advice (Art. 6(1)(b) and (f)).
Clients. When you engage us under a written service agreement, we collect the information your matter requires: identity and contact details, immigration history, education, employment, family and financial information. Some applications require sensitive information, such as medical examination results or police certificates. We collect that only when an application requires it, only with your explicit consent (Art. 9(2)(a)), and through our secure client process, never through website forms. We use client information to provide our services and to meet our legal and professional obligations (Art. 6(1)(b) and (c)).
Maps and reviews. If you accept external media in the cookie banner, the site loads a Google map and our Google reviews (displayed through Trustindex). Your IP address is then sent to those providers (Art. 6(1)(a), consent).
Analytics and advertising. We do not currently use analytics, advertising or tracking tools. If that changes, we will ask for your consent first and update this policy.
3. What we never do
- We do not sell or rent personal information.
- We do not use your information for advertising profiles.
- We do not make decisions about you by automated means alone.
4. Who we share information with
We share personal information only where needed:
- Service providers who process it on our behalf under contracts that require them to protect it: [HostGator / Newfold Digital (website hosting, United States)], [Microsoft (email and documents)], [Calendly (appointment booking, United States)], [Google (skilled-professional registration form; maps with consent)] and [Trustindex (review display, European Union)].
- Government authorities such as Immigration, Refugees and Citizenship Canada, when you instruct us to submit an application on your behalf.
- Employers, only with the agreement of the skilled professional concerned.
- Others where the law requires it, or to protect our legal rights.
5. International transfers
We are based in Canada, and some of our providers process data in the United States. The European Commission recognises Canada as providing adequate protection for organisations subject to PIPEDA. For transfers to the United States, we rely on the EU–US Data Privacy Framework where the provider is certified, or on the European Commission’s standard contractual clauses (GDPR Art. 46).
6. How long we keep information
- Server logs: up to [30] days.
- Employer enquiries and booking records that do not lead to an engagement: deleted automatically after 24 months.
- Skilled-professional registrations: until you ask us to delete them, or 24 months after our last contact.
- Client files: for the period required by our professional regulator and by law, [currently at least seven years after the file is closed].
7. Security
We protect personal information with encrypted connections (HTTPS), access limited to people who need it, two-factor authentication on our systems, regular updates and backups. No method of transmission over the internet is completely secure, so please do not send sensitive documents through website forms.
8. Your rights
You may ask to access the personal information we hold about you, to correct it, to delete it, to restrict or object to its use, or to receive it in a portable format. Where we rely on your consent, you may withdraw it at any time, without affecting what we did before. Legal or contractual obligations, such as record-keeping required by our regulator, may limit deletion.
To exercise any right, email hello@thinkahead.world. We respond within one month, and may ask you to confirm your identity.
If you are not satisfied, you may complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca) or, if you live in the European Union, to the data protection authority in your country or German state.
9. Children
This website is not directed at children. Information about a child that is needed for a family application is provided by a parent or guardian through our client process.
10. Changes to this policy
We will update this policy when our practices change. The date at the top shows the current version.
