How we protect your information.

Client case management is handled through our authorized CRM portal, which requires individual credentials per user. Administrative access to our website backend is restricted to named team members and protected by role-based access controls.

Public website forms (consultations, contact, eligibility intake) do not require an account; submissions are stored in access-controlled records visible only to authorized staff.

We collect only the information you choose to share with us — typically name, email, country of interest, and the questions or background details you provide in intake forms. We use this information solely to respond to your inquiry and, if you become a client, to deliver the services you've engaged us for.

We do not sell personal information. We do not use client intake data to train third-party AI models.

The website and intake systems run on managed cloud infrastructure with encryption in transit (HTTPS/TLS) for all traffic. Payment processing for consultations is handled by Stripe; we do not store full card numbers on our systems.

Database access is gated by row-level security policies so that records are only readable or modifiable by the roles authorized for that table.

We rely on a small number of vetted providers to operate the service, including cloud hosting and database (Supabase / Lovable Cloud), payment processing (Stripe), transactional email delivery, and the client CRM portal. Each receives only the data necessary for its function.

Inquiry and intake records are retained for as long as needed to respond to your request and meet record-keeping obligations associated with immigration advisory work. You may request deletion of your inquiry data at any time by contacting us.

To request access to, correction of, or deletion of your personal information, or to report a suspected security issue, please reach us through our contact page. We aim to acknowledge security reports within two business days.