This Privacy Policy describes how ATIP.ca (“ATIP.ca”, “we”, “us”, or “our”) collects, uses, discloses, and protects personal information when you access or use our websites, products, and services, including ATIP.ca, gcms-notes.ca, and any associated subdomains, portals, applications, or platforms we operate (the “Services”). By using our Services, you agree to the practices described in this Privacy Policy.
1. Personal Information We Collect
ATIP.ca operates online platforms and services that assist users with obtaining access to information requests, case notes, and related services. We are incorporated in Ontario, Canada, are a part of NextMigrant Inc. and and aim to meet the standards set out in PIPEDA and, where applicable, the GDPR and CCPA/CPRA.
2. Personal Information We Collect
We collect personal information that you provide to us directly, automatically through your use of the Services, and from authorized third parties. This may include:
Information you provide to us includes but not limited to:
- Name, email address, phone number, billing address
- Account login details
- Immigration-related data, including but not limited to UCI number, application details, case information, and uploaded documents
- Identity documents, forms, or files uploaded to the Services
- Order and payment information (processed via Stripe – we do not store full credit card data)
Information collected automatically:
- IP address, device details, browser type, operating system
- Usage data, interactions, access times, referring URLs
- Cookies, pixels, and similar tracking technologies
Information collected from third parties:
- Payment processors
- Analytics and marketing platforms
- Subcontractors involved in fulfilling service requests
We may collect other information reasonably necessary to provide and improve the Services.
3. How We Use Personal Information
We use personal information for the following purposes:
- Service Delivery: To create accounts, process and fulfill orders, and provide the requested Services
- Customer Support: To respond to inquiries and provide assistance
- Service Improvements: To analyze usage, improve the Services, and develop new features
- Marketing & Communications: To send updates, promotions, and relevant information (you may opt out at any time)
- Security & Fraud Prevention: To verify identity, detect misuse, and maintain the integrity of our Services
- Legal & Compliance: To meet our legal, regulatory, and contractual obligations
We will not use your personal information for purposes that are materially different from the above without obtaining your consent, unless otherwise permitted by law.
4. Sharing of Personal Information
We may share personal information with the following parties:
Service Providers & Partners. Including, but not limited to:
Stripe, AWS, Cloudflare, Google Analytics, Google Workspace, Meta, email marketing platforms, IT tools, and other upstream or downstream providers.
Independent Immigration Professionals or Legal Representatives:
If required to fulfill a service purchased by you.
Authorized Subcontractors:
Individuals or entities engaged to assist with service delivery or customer support.
Legal & Compliance:
If required to comply with law, legal process, or to protect rights, safety, or security.
5. International Transfers
Your information may be processed or stored in jurisdictions outside your region, including Canada, the United States, or other countries where our service providers operate. When personal information is transferred internationally, we take reasonable measures to ensure adequate protection in accordance with applicable laws.
6. Data Retention
We retain personal information until you request deletion, unless we are required to retain it longer for legal, regulatory, or legitimate business purposes.
7. Cookies & Tracking Technologies
We use cookies, pixels, and similar technologies for authentication, analytics, performance, and marketing. You may control cookies through your browser settings, though disabling certain cookies may limit functionality.
8. Your Rights
Depending on your region, you may have the right to:
- Access, correct, or update your personal information
- Request deletion of your personal information
- Withdraw consent (where applicable)
- Opt-out of marketing communications
- Request a copy or transfer of your data (GDPR)
- Limit or object to certain processing activities (GDPR & CCPA)
To exercise your rights, contact us at [email protected].
9. Children’s Privacy
Our Services are not intended for use by individuals under the age of 18. We do not knowingly allow minors to create accounts or purchase services directly. However, we may receive personal information about a minor when it is provided by a parent or legal guardian for the purpose of using our Services (for example, when submitting an ATIP or GCMS request on behalf of a child).
By providing us with a minor’s personal information, you confirm that you are the parent or legal guardian and that you consent to our collection and use of that information in accordance with this Privacy Policy.
10. Data Security
We implement reasonable administrative, technical, and physical measures to protect personal information. While no method of transmission or storage is 100% secure, we strive to safeguard data from unauthorized access, loss, misuse, or alteration.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The “Last Updated” date at the bottom will reflect the most recent version. Continued use of the Services after changes means you accept the updated policy.
12. Contact Us
For questions, concerns, or to exercise privacy rights, you may contact us at: [email protected]
Last updated: Nov 1, 2025