I
IRCC.com

Privacy Policy

Last updated: April 2026

This privacy policy describes how IRCC.com (“we,” “us,” or “the site”) collects, uses, and protects personal information of visitors. We comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

1. Information we collect

1.1 Information you provide

  • Contact form submissions: name, email, message subject, and message contents.
  • Newsletter signups (when launched): email address and any preference data you provide.
  • Account data (when accounts launch): email, hashed password, profile preferences.

1.2 Information collected automatically

  • Server logs: IP address, user agent, referrer, request timestamps, response status codes. Used for security and rate-limiting.
  • Analytics: aggregated, privacy-respecting page-view data (Cloudflare Web Analytics, which does not use cookies or fingerprinting).
  • Optional analytics (only with consent): Google Analytics 4 cookies if you accept them.

2. How we use information

  • To respond to contact-form messages.
  • To prevent abuse and enforce rate limits on forms and APIs.
  • To produce aggregate, anonymized site-usage statistics.
  • To improve content and site functionality.
  • To deliver a newsletter you've subscribed to (with an unsubscribe link in every email).

We do not sell personal information. We do not share personal information with third parties for their marketing.

3. Cookies

IRCC.com uses minimal cookies. Essential cookies enable site functionality (e.g., remembering theme preference). We do not use cross-site tracking cookies, third-party advertising cookies without consent, or fingerprinting techniques.

If we add Google Analytics 4 or display advertising in future, we will display a consent banner before any non-essential cookies load, and respect your preference.

4. Third-party services

The site uses the following third-party services:

  • Cloudflare (hosting, security, analytics) — privacy policy
  • Resend (transactional email) — privacy policy
  • GitHub (source-code hosting; not used for visitor data)

Each receives only the data necessary to provide its service.

5. Data retention

  • Contact form submissions: retained for 12 months unless you request deletion.
  • Server logs: retained for up to 90 days for security purposes.
  • Newsletter subscribers: retained until you unsubscribe.
  • Account data: retained until you delete your account.

6. Your rights under PIPEDA

You have the right to:

  • Know what personal information we hold about you.
  • Request a copy of that information.
  • Request correction of inaccurate information.
  • Withdraw consent and request deletion (subject to legal retention obligations).
  • Lodge a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca.

To exercise these rights, contact us via our contact form.

7. International transfers

Some of our service providers (e.g., Cloudflare, Resend) may process data in jurisdictions other than Canada. We use providers with privacy practices reasonably equivalent to Canadian standards.

8. Security

We implement reasonable technical and organizational measures to protect personal information, including HTTPS, secret management for credentials, rate limiting, and access controls. No system is 100% secure; we encourage you to use a strong unique password if/when account features launch.

9. Children

IRCC.com is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.

10. Changes to this policy

We may update this policy from time to time. The “Last updated” date reflects the most recent revision. Material changes will be highlighted on the homepage for at least 30 days.

11. Contact

Privacy questions or requests: contact form. We respond within 30 days (typically much faster).