Privacy
Policy

Abroad Mobility respects your privacy and is committed to protecting the personal information you entrust to us. This Policy explains what we collect, why we collect it, who we share it with, how long we keep it, and the rights you have over it.

It applies to abroadmobility.com and every subdomain, form, tool and download on it (the “Site”), and to the services we provide to individuals and to partner firms.

The controller of your personal information is:

Abroad Mobility
5000 Yonge Street, Suite 1901, Toronto, Ontario, Canada, M2N 6P6

We have designated an individual accountable for our compliance with this Policy and with applicable privacy law:

Privacy Officer
Amanda Sullivan
Email: [email protected]
Telephone: +1 289 536 5883

You may contact the Privacy Officer with any question, access request or complaint about how we handle personal information.

(a) Information you give us

• identity and contact details: name, email address, telephone number, country of residence, citizenship;
• professional details: company or firm name, role, professional licence or regulator, jurisdictions of practice;
• enquiry content: the programs, destinations or services you are interested in, and anything you write in a message field;
• partner onboarding information: legal business name, registration and tax numbers, jurisdiction of incorporation, professional liability insurance details, compliance declarations, and documents you upload, which may include certificates of incorporation, professional licences, insurance certificates, government-issued identification of an authorised signatory, and banking confirmation;
• correspondence with us by email, telephone, WhatsApp, Telegram or the chat and voice assistant on the Site.

Some of this information is sensitive. Where you provide identification documents, financial documents or information about your immigration status, we treat it as sensitive and rely on your express consent, given when you submit it.

(b) Information collected automatically

• IP address, approximate location derived from it, device and browser type, operating system, language;
• pages viewed, time on page, referring page, search terms, links and buttons clicked, tool inputs and results;
• cookies and similar technologies, described in section 9.

(c) Information from third parties

• from partner firms, where a partner introduces a case to us and provides information about the applicant;
• from advertising and analytics platforms, in aggregate or pseudonymised form;
• from public and government sources, where we verify program or corporate information.

Children. The Site is not directed at children, and we do not knowingly collect personal information from anyone under 16. Where an application involves dependent children, their information is provided to us by a parent or legal guardian.

Where we rely on legitimate interests, those interests are operating and improving a professional services business, securing our systems, and protecting our legal position; we have assessed that they are not overridden by your rights.

Identifying purposes. We identify the purpose of collection at or before the time we collect the information, on the relevant form or in this Policy. We do not use your personal information for a new purpose without your consent, unless the law authorises it.

Limiting collection. We collect only what is necessary for the purposes identified.

The Site offers an Eligibility Engine, a passport check tool and program comparison tools. These filter published program criteria against the parameters you enter and return general information. They do not profile you, do not produce a decision about you, and are not a substitute for professional assessment. We do not carry out automated decision-making that produces legal effects concerning you or similarly significantly affects you.

We do not sell your personal information.

We share it only as follows:

• Partner professional firms, where you ask to be introduced to a lawyer, licensed immigration consultant or adviser, or where a partner firm is handling your matter. That firm is a separate controller under its own privacy policy.
• Service providers acting on our instructions, including: our customer relationship management system, our workflow and automation platform, website hosting and security providers, email and communication providers, the voice and chat assistant provider on the Site, and analytics and advertising platforms. They may process personal information only for the purposes we specify and under contract.
• Government authorities, program units and their appointed agents, where required to progress an application.
• Professional advisers, auditors and insurers, where necessary.
• Where required by law, including in response to a lawful demand by a court, regulator or law enforcement body, or to establish, exercise or defend legal claims.
• In a corporate transaction, where all or part of the business is reorganised, sold or transferred, subject to equivalent protection.

Abroad Mobility is based in Canada. Your personal information may be stored and processed in Canada and in other countries where we or our service providers operate, including in the European Union and the United States, and where a program authority is located.

Legal systems in those countries may differ from your own, and personal information located in a foreign country may be accessible to the courts, law enforcement and national security authorities of that country under its laws. By providing information to us, you acknowledge this.

Where personal information is transferred from the European Economic Area or the United Kingdom, we rely on: the partial adequacy decisions covering Canadian organisations subject to PIPEDA; standard contractual clauses where a recipient is not covered by an adequacy decision; the necessity of the transfer for the performance of a contract with you; or your explicit consent. A copy of the safeguards in place is available from the Privacy Officer.

We remain accountable for personal information transferred to a service provider for processing, and we use contractual means to require a comparable level of protection.

We keep personal information only for as long as necessary for the purposes for which it was collected, and to satisfy legal, regulatory, accounting and reporting requirements.

• Enquiries that do not proceed: 24 months from the last contact.
• Client and partner case files, including due-diligence and identification records: up to 10 years from completion or termination of the services, reflecting anti-money-laundering record-keeping requirements and limitation periods.
• Marketing contact records: until you withdraw consent, plus a suppression record so that we can honour your withdrawal.
• Website analytics: as set out in the cookie banner.

At the end of the retention period we securely destroy, erase or anonymise the information.

We use cookies and similar technologies, including advertising pixels operated by Meta (Facebook), Google and LinkedIn, and tag management and analytics tools.

Cookies are grouped as follows:

• Strictly necessary: required for the Site to function and for security. These cannot be switched off.
• Functional: remember your preferences and choices.
• Performance and analytics: help us understand how the Site is used.
• Targeting and advertising: used to build an audience and to show you our advertising on other platforms, including retargeting.

Non-essential cookies and pixels are not set until you consent. Profiling and tracking technology is off by default. You can accept or reject each category through the consent banner, and change your choice at any time. Refusing is as easy as accepting. You can also block or delete cookies in your browser, though parts of the Site may then not work.

We send commercial electronic messages only where we have your express consent, or where consent is implied under CASL, for example because you have made an enquiry to us in the preceding six months, or because we have an existing business relationship.

Every message identifies us, gives our mailing address and a means of contacting us, and includes an unsubscribe mechanism that works for at least 60 days. We action unsubscribe requests within 10 business days. You may also withdraw consent at any time by writing to the Privacy Officer. Withdrawal does not affect service or transactional messages relating to a matter we are handling for you.

We maintain physical, organisational and technological safeguards appropriate to the sensitivity of the information, including encrypted transmission, access control on a need-to-know basis, authentication controls on our systems, contractual confidentiality obligations on staff and providers, and security monitoring of the Site.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Where a breach of security safeguards creates a real risk of significant harm, we will report it to the Office of the Privacy Commissioner of Canada and notify affected individuals as required, and we maintain a record of every breach for at least 24 months. Where the EU or UK GDPR applies, we notify the competent supervisory authority within 72 hours where required.

We take reasonable steps to keep personal information accurate, complete and up to date for the purposes for which it is used. Please tell us if your details change.

Subject to applicable law, you may:

• access the personal information we hold about you, and be told how it has been used and to whom it has been disclosed;
• ask us to correct information that is inaccurate or incomplete;
• ask us to delete information, where we have no lawful basis to keep it;
• withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice; we will tell you what the consequences of withdrawal are;
• object to or ask us to restrict processing based on legitimate interests;
• receive certain information in a portable form, and, in Quebec, ask us to transfer it to another organisation;
• ask us to de-index a link to information about you, where the conditions in Quebec law are met;
• be informed about the automated processing we carry out.

To exercise a right, write to the Privacy Officer. We may ask you to verify your identity. We respond within 30 days, and will tell you if we need more time or if an exemption applies.

If you are not satisfied with our response, you may escalate the matter:

• Canada: Office of the Privacy Commissioner of Canada, priv.gc.ca
• Quebec: Commission d’accès à l’information du Québec, cai.gouv.qc.ca
• European Economic Area: the national supervisory authority
• United Kingdom: Information Commissioner’s Office, ico.org.uk

The Site links to third-party websites, including partner firms, government pages and social platforms. This Policy does not apply to them, and we are not responsible for their privacy practices. Review their policies before providing information.

We may update this Policy from time to time. The current version is always published on this page with its effective date. Where a change is material, we will bring it to your attention by a notice on the Site or by email.

Abroad Mobility – Privacy Officer
5000 Yonge Street, Suite 1901
Toronto, Ontario, Canada, M2N 6P6
Telephone: +1 289 536 5883
Email: [email protected]