Privacy Policy

Global Link Consulting Inc. ("Global Link Consulting", "we", "us") is a Canadian immigration and recruitment consultancy based in Toronto, ON. We are the organization accountable for the personal information described in this policy.

This policy explains what we collect through globallinkconsulting.org and our client portal, why we collect it, who we share it with, and the choices available to you. It is written to meet our obligations under the Personal Information Protection and Electronic Documents Act (PIPEDA) and Canada's Anti-Spam Legislation (CASL).

Information you give us

We only collect what a given form actually needs. Depending on which form you use, that may include:

• Consultation requests: your name, email address, phone number, date of birth, mailing address, the services you are interested in, and any details you choose to add.
• Quote requests: your name, email address, phone number, organization, the service required, and any budget or timeline context you provide.
• General enquiries: your name, email address, phone number, subject, and message.
• Job applications: your name, email address, phone number, location, years of experience, cover note, and links to your résumé, LinkedIn, or portfolio.
• Newsletter subscriptions: your email address.
• Client portal accounts: your account credentials, case records, uploaded documents, appointments, and messages exchanged with your consultant.

Information collected automatically

When you submit a form we record limited technical context alongside it — your IP address, browser user-agent, referring page, and preferred language. We use this strictly for security purposes: rate limiting, spam and abuse prevention, and an audit trail of submissions. It is never used to build an advertising profile.

We store a small cookie to remember your chosen site language. It contains no identifying information.

Sensitive information

Immigration work involves sensitive documentation — identity documents, financial records, and civil-status records. We collect these only where they are necessary to the service you have engaged us for, and only through the authenticated client portal, never through a public web form or ordinary email.

We use personal information for the following purposes, and no others:

• To respond to your enquiry, quote request, or consultation booking.
• To deliver the immigration or recruitment services you have retained us for, including preparing and submitting applications.
• To operate your client portal account and communicate securely with you about your file.
• To send transactional email — confirmations, receipts, and status notifications tied to an action you took.
• To send newsletters and service updates, where you have given express consent (you may withdraw it at any time).
• To protect the service against spam, fraud, and abuse.
• To meet our legal, regulatory, and professional-conduct obligations.

We collect, use, and disclose personal information with your knowledge and consent, except where the law permits or requires otherwise. Submitting a form constitutes consent to use that information for the purpose the form describes.

Marketing email requires separate, express consent — a distinct opt-in checkbox that is never pre-ticked. Every marketing message includes an unsubscribe link that works for at least 60 days, as CASL requires. Withdrawing marketing consent does not affect transactional messages about a file you have with us.

You may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice. Withdrawing consent may mean we can no longer provide some or all of a service.

We do not sell personal information, and we do not share it for advertising. We use a small number of vetted service providers to run this site and our portal, each with access limited to what its function requires:

• Vercel — website and application hosting.
• Supabase — database, authentication, and encrypted document storage.
• Resend — delivery of transactional and subscription email.
• Stripe — payment processing for paid consultations. Card details are entered directly with Stripe; we never see or store full card numbers.
• Google (Gemini API) — powers assistant features. Prompts are processed to generate a response and are not used to train public models.

Some of these providers process or store data outside Canada, including in the United States. While information is in another country it may be accessible to that country's courts and law-enforcement authorities under its laws.

We may also disclose personal information to Immigration, Refugees and Citizenship Canada or other government bodies where doing so is part of the service you retained us for, to professional advisors, or where required by law, subpoena, or regulatory obligation.

We protect personal information with safeguards appropriate to its sensitivity, including encryption in transit (HTTPS/TLS) and at rest, role-based access controls so staff see only the files they are assigned, a strict Content-Security-Policy and related security headers, rate limiting and spam filtering on public forms, and server-side validation of every submission.

No method of transmission or storage is completely secure. If a breach creates a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada as PIPEDA requires.

We keep personal information only as long as it is needed for the purpose it was collected for, or as long as professional and legal record-keeping obligations require — which, for immigration files, may be several years after a matter closes.

Enquiries that do not become engagements are deleted once they are no longer needed. Newsletter subscriptions are kept until you unsubscribe. When information is no longer required, we destroy, erase, or anonymize it.

Subject to limited legal exceptions, you have the right to:

• Ask whether we hold personal information about you, and request access to it.
• Request a correction to information that is inaccurate or incomplete.
• Withdraw consent to a use or disclosure, or unsubscribe from marketing email.
• Request deletion of information we are no longer required to retain.
• Ask how your information has been used and to whom it has been disclosed.

To exercise any of these rights, email info@globallinkconsulting.org. We will respond within 30 days. We may need to verify your identity before acting on a request.

If you are not satisfied with our response, you may bring a complaint to the Office of the Privacy Commissioner of Canada at priv.gc.ca.

This website is not directed at children, and we do not knowingly collect personal information directly from a child. Where a minor is included in a family application, their information is provided and consented to by a parent or legal guardian.

We may update this policy as our services or legal obligations change. The revision date at the top of this page always reflects the most recent substantive change. Where a change is material, we will take reasonable steps to notify you.