Privacy Policy

Last Updated: January 16, 2026

Important Notice

As a law firm dealing with sensitive immigration and corporate matters, we take your privacy seriously. This isn't just legal boilerplate - we actually practice what's written here because your trust matters to us and because, well, we're legally bound to protect your information under Canadian law.

Look, we get it - nobody really enjoys reading privacy policies. But when you're dealing with immigration cases or business formations, your personal info is kinda critical. So we've tried to make this as straightforward as possible.

Driftelation Legal Services operates out of Toronto, Ontario, and we're bound by Canadian privacy laws including PIPEDA (Personal Information Protection and Electronic Documents Act). That's the federal law that governs how private sector organizations handle personal information.

By using our website or engaging our services, you're agreeing to how we handle your data as described here. If something doesn't sit right with you, let's talk about it before moving forward.

Here's what we typically gather, depending on what you need from us:

Personal Identification Info
  • Name, date of birth, citizenship details
  • Contact info - email, phone numbers, mailing address
  • Government-issued ID copies (passports, driver's licenses, etc.)
  • Social Insurance Numbers when legally required
Immigration-Specific Data
  • Travel history and immigration records
  • Educational backgrounds and professional credentials
  • Employment history and reference letters
  • Family information for sponsorship cases
  • Police clearance certificates and background checks
Business & Corporate Info
  • Company registration details and shareholder info
  • Financial documents for business applications
  • Trade agreements and contract details
  • Corporate structure and ownership data
Website Usage Data
  • IP addresses and browser information
  • Pages you visit and how long you stick around
  • Referral sources and search terms used
  • Device type and operating system
Note: We'll never ask for sensitive info via unsecured email. If something seems fishy, call us directly at (416) 555-2847 to verify.

We don't collect your info just for kicks. Here's what we actually do with it:

  • Providing Legal Services: Obviously the main reason - preparing applications, filing documents, representing you in proceedings, that sort of thing.
  • Communication: Keeping you updated on your case, responding to inquiries, sending appointment reminders. We won't spam you with stuff you didn't ask for.
  • Compliance & Filing: Submitting required documents to immigration authorities, regulatory bodies, courts, or government agencies. This isn't optional - it's literally why you hired us.
  • Billing & Accounting: Processing payments, maintaining financial records, tax compliance. Gotta keep the CRA happy.
  • Improving Our Services: Analyzing trends to better serve clients, training staff, quality control. All anonymized when possible.
  • Legal Obligations: Sometimes we're legally required to maintain or disclose information - think law society regulations, anti-money laundering requirements, court orders.
Client Files: Your case files are maintained for at least 10 years after the conclusion of your matter - that's our professional obligation under Law Society of Ontario rules. Even if you ask us to delete everything, we've gotta keep the core file for regulatory purposes.

We don't sell your data. Period. But there are situations where we need to share information:

With Your Consent

When you explicitly authorize us to share info with third parties - like when you want us to coordinate with your accountant or another lawyer.

Government Authorities

Immigration, Refugees and Citizenship Canada (IRCC), Canada Border Services Agency (CBSA), provincial regulators, courts, and other government bodies. That's literally the point of most immigration and business law work.

Service Providers
  • Document translation services (with confidentiality agreements)
  • Secure cloud storage providers
  • Payment processors for billing
  • IT support and cybersecurity firms
  • Couriers for document delivery

All service providers sign confidentiality agreements and are vetted for security practices.

Legal Requirements

If we're served with a valid court order, subpoena, or legally-binding request, we may be required to disclose information. We'll notify you unless prohibited by law.

Professional Consultations

Sometimes we consult with other lawyers or experts on complex matters. Info is shared on a need-to-know basis and under strict confidentiality.

Security's not just a checkbox for us - it's essential when handling immigration documents and corporate files. Here's what we do:

  • Encryption: All data transmission uses SSL/TLS encryption. Files at rest are encrypted using industry-standard protocols.
  • Access Controls: Role-based access means staff only see what they need for their work. Multi-factor authentication on all systems.
  • Physical Security: Our Bay Street office has controlled access, alarm systems, and locked file storage.
  • Secure Communications: We use encrypted email for sensitive communications and a secure client portal for document exchange.
  • Regular Audits: Annual security assessments and penetration testing by third-party experts.
  • Staff Training: Everyone undergoes privacy and security training. We run phishing tests regularly (and yes, people still click them sometimes).
  • Backup Systems: Regular encrypted backups stored in Canadian data centers with geographic redundancy.
Real Talk: No system is 100% foolproof. We do everything reasonably possible to protect your data, but if you're emailing us your passport from a coffee shop on public WiFi, that's on you. Use common sense with sensitive info.

Yeah, we use cookies. Not the chocolate chip kind, unfortunately.

Essential Cookies

These make the website actually work - stuff like keeping you logged into the client portal, remembering your language preference, basic security functions. Can't really disable these without breaking things.

Analytics Cookies

We use Google Analytics to see how people use our site - which pages are popular, where folks get confused, how long they stick around. It helps us improve the user experience. This data is anonymized.

Managing Cookies

You can control cookies through your browser settings. Just know that blocking certain cookies might make parts of our site less functional. Most browsers let you:

  • See what cookies are stored
  • Delete cookies individually or all at once
  • Block third-party cookies
  • Block cookies from specific sites

We don't use tracking for advertising purposes - we're a law firm, not a marketing company.

Under Canadian privacy law, you've got rights. Here's what you can do:

Access Your Information

You can request copies of what personal data we hold about you. We'll provide it within 30 days, usually free of charge (though we might charge for extensive requests that take significant time).

Correct Inaccuracies

If something's wrong in your file, let us know and we'll fix it. This is actually super important for immigration applications - one wrong digit in a passport number can cause major headaches.

Request Deletion

You can ask us to delete your data, with some caveats. We have to keep certain records for regulatory compliance (typically 10 years for client files). But we can delete unnecessary marketing data or website analytics tied to you.

Withdraw Consent

You can withdraw consent for certain data uses - like marketing communications. Just note that we can't provide legal services without processing your personal information, so withdrawing consent for core functions means we can't represent you.

Object to Processing

If you think we're using your data inappropriately, raise the concern. We'll investigate and respond.

File a Complaint

If you're not satisfied with how we handle your privacy concerns, you can file a complaint with the Office of the Privacy Commissioner of Canada. Their website is priv.gc.ca.

To exercise these rights: Email us at contact@driftelation.info or call (416) 555-2847. We'll verify your identity (for security reasons) and process your request promptly.

How long we keep your stuff depends on what it is:

  • Client Files: Minimum 10 years from case closure (Law Society requirement). Immigration files often kept longer due to potential future applications or appeals.
  • Financial Records: 7 years for tax purposes (CRA requirement).
  • Website Analytics: 26 months, then automatically deleted.
  • Marketing Data: Until you unsubscribe or request deletion, then removed within 30 days.
  • Email Communications: As part of client files - same retention as above.
  • Initial Consultations (non-clients): 2 years, then securely destroyed.

When retention periods expire, we securely destroy data through certified shredding services for physical documents and secure digital deletion protocols for electronic records.

We primarily store data in Canada, but international law sometimes requires cross-border transfers:

  • Immigration Applications: Your data gets submitted to the relevant country's immigration authorities. That's kinda the whole point.
  • International Business Transactions: Trade agreements and corporate matters may involve parties in multiple jurisdictions.
  • Cloud Services: Some of our service providers use servers in multiple countries, though we prioritize Canadian data residency where possible.

When we transfer data internationally, we ensure:

  • The receiving country has adequate privacy protections
  • Contractual safeguards are in place
  • You're informed of where your data is going
  • Transfers are necessary for the service you requested
Important: If you're applying for immigration to another country, your data will be processed under that country's laws once submitted. We can't control what foreign governments do with information you authorize us to submit on your behalf.

Our website isn't designed for kids under 18, and we don't knowingly collect their personal information through our site.

That said, immigration law often involves minor children - family sponsorships, dependent applications, etc. In these cases:

  • We obtain consent from parents or legal guardians
  • Children's data is handled with extra care and security
  • We collect only what's necessary for the application
  • Parents/guardians can access and correct their child's information

If you're under 18 and somehow ended up on our website, please don't submit any forms or personal info without your parent or guardian's involvement.

Privacy laws evolve, our practices improve, and technology changes. We'll update this policy from time to time.

When we make significant changes, we'll:

  • Update the "Last Updated" date at the top
  • Notify current clients via email
  • Post a notice on our website homepage for 30 days
  • For major changes affecting how we use your data, we'll seek renewed consent

We encourage you to review this policy periodically, especially if you're a current client. Continuing to use our services after changes means you accept the updated policy.

Previous versions are available upon request if you want to see what changed.

Got questions, concerns, or requests about your privacy? We're here to help.

Privacy Officer

Driftelation Legal Services
1250 Bay Street, Suite 402
Toronto, ON M5R 2A5

Contact Methods

(416) 555-2847
contact@driftelation.info

We'll respond to privacy inquiries within 30 days. For urgent matters, call us directly.

We're here to help: Privacy concerns aren't a bother - they're important. Don't hesitate to reach out if something isn't clear or if you need to exercise your privacy rights.
Still Have Privacy Questions?

We know legal privacy policies can be dense. If anything's unclear or you want to discuss how we protect your specific information, give us a call.

Get in Touch