Privacy Policy

Move To Directories Inc., operating as MoveToCanada 1208-131 Bloor Street West, Toronto, Ontario, Canada, M5S 1S3

Last updated: May 3, 2026 Effective date: May 3, 2026

---

1. Introduction

This Privacy Policy explains how Move To Directories Inc., operating as MoveToCanada ("MoveToCanada", "we", "us", or "our"), collects, uses, discloses, retains, and protects personal information when you visit movetocanada.com (the "Site") or use our services. It applies to visitors, prospective immigrants who submit inquiries or complete the eligibility quiz, immigration lawyers who apply for or hold a city listing, service providers who apply for or hold a category listing, and newsletter subscribers.

We are committed to handling your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA), Canada's Anti-Spam Legislation (CASL), the California Consumer Privacy Act and California Privacy Rights Act (CCPA/CPRA), and other applicable Canadian and US privacy laws.

If you are accessing the Site from outside Canada, please note that your information will be transferred to and processed in Canada and other jurisdictions described in section 9.

2. Important Notice — Not a Law Firm

MoveToCanada is not a law firm and does not provide legal advice. We are an online directory that connects prospective immigrants with licensed immigration lawyers. Communications between you and a lawyer listed on our Site occur directly between you and that lawyer; we transmit your inquiry but are not part of any solicitor-client relationship that may result.

3. Information We Collect

3.1 Information you provide directly

• Lawyer contact inquiries — When you submit a contact form on a city page or lawyer profile, we collect your name, email address, phone number (if provided), country of origin (if provided), visa type of interest, and the message content.
• Eligibility quiz responses — When you take our immigration eligibility quiz, we collect the profile information you enter (such as age range, education, work experience, language proficiency, family status, and immigration goals). If you choose to receive your results by email, we also collect your email address.
• Newsletter subscriptions — When you sign up for our newsletter, we collect your email address, the date and time of your consent, and the source page from which you subscribed (for CASL compliance).
• Lawyer applications — When a lawyer applies to be listed for a city, we collect their full name, firm name, professional bar admission jurisdiction and bar number, years of practice, areas of practice, languages spoken, biographical information, profile photograph, business email address, business phone number, business address, business website URL, optional video introduction, and government-issued identification or law society credentials submitted for verification purposes.
• Service provider applications — When a service provider (moving company, real estate agent, insurance broker, banker, or tax accountant) applies to be listed for a city in their category, we collect their business name, contact name, business email, business phone, business address, website URL, professional licensing information where applicable, and supporting documentation submitted for verification.
• Lawyer and service provider account data — Once approved, we maintain your listing data, login credentials (passwords are stored only as cryptographic hashes, never in plain text), subscription status, and communications with us.
• Payment information — Payment for subscriptions is processed by Stripe. We do not store your full credit card number, CVV, or bank account number on our servers. We retain only the payment metadata Stripe provides to us, including the last four digits of the card, card brand, billing postal code, transaction amount, transaction timestamp, and Stripe customer and subscription identifiers.

3.2 Information collected automatically

• Usage and analytics data — When you visit the Site, we automatically collect information about your visit including your IP address, browser type and version, device type, operating system, referring URL, pages visited, time spent on each page, links clicked, and approximate location derived from IP address.
• Cookies and similar technologies — We use cookies and similar tracking technologies as described in our Cookie Policy.

3.3 Information from third parties

• We may receive verification information about lawyer applicants from publicly available law society records or credentialing services we engage to confirm bar admission status.

4. How We Use Your Information

We use the information described above for the following purposes:

• Connecting you with a lawyer — To forward your contact inquiry to the immigration lawyer listed for the city you selected.
• Processing applications — To review, verify, and approve or decline lawyer and service provider applications, including conducting credential checks and contacting applicants for additional information.
• Service delivery — To create and maintain user accounts, process subscription payments, provide access to the lawyer or service provider dashboard, and respond to support requests.
• Transactional emails — To send you operational emails that you would reasonably expect as part of using our service, including: payment receipts and invoices, subscription renewal notices, payment failure alerts, account verification messages, password reset emails, application status updates, inquiry-received notifications (sent to lawyers), inquiry-confirmation messages (sent to inquirers), and account security alerts. These messages are not marketing and are sent regardless of marketing consent.
• Quiz results delivery — To email your eligibility quiz results to you when you have requested them.
• Marketing communications — To send you newsletters, immigration tips, and product updates only where you have given us express consent under CASL (see section 6).
• Analytics and improvement — To understand how visitors use the Site, identify popular content and pages, diagnose technical problems, measure the effectiveness of features, and improve the user experience.
• Security and fraud prevention — To detect, prevent, and respond to fraud, abuse, security incidents, and violations of our Terms of Service.
• Legal compliance — To comply with applicable laws, regulations, court orders, and lawful requests from public authorities, and to enforce our legal rights.

5. How We Share Your Information

We do not sell your personal information to anyone, ever. We do not rent or trade your personal information. We share your information only in the limited circumstances below:

• With the listed lawyer for your selected city, only — Our directory operates on an exclusive one-lawyer-per-city model. When you submit a contact form for a particular city, your inquiry (including your name, email, phone if provided, country of origin if provided, visa type of interest, and message content) is shared only with the single immigration lawyer currently listed for that city. Your inquiry is not shared with lawyers in other cities, with our broader network, or with any aggregator. If no lawyer is currently listed for your selected city, your inquiry is held by us and you are notified.
• With service providers, only on your initiative — If you choose to contact a listed service provider through our Site, the relevant inquiry information is shared only with that specific service provider in that specific category and city.
• With our service providers and processors — We share information with the third parties identified in section 7 strictly to operate our service, under written agreements that limit their use of the information to the purposes for which we engage them.
• For legal reasons — We may disclose personal information when we believe in good faith that disclosure is required by law, court order, subpoena, or other legal process; necessary to protect the rights, property, or safety of MoveToCanada, our users, or others; or necessary to investigate or respond to suspected fraud, security incidents, or violations of our Terms.
• In connection with a business transaction — If MoveToCanada is involved in a merger, acquisition, financing, reorganization, sale of assets, or insolvency proceeding, personal information may be transferred to the successor entity. We will notify affected users by email or a prominent notice on the Site before any such transfer takes effect, and your rights under this policy will continue to apply.

5.1 Paid directory listings

Lawyers and service providers listed on the Site pay a subscription fee to MoveToCanada for inclusion in the directory. Listing on the Site does not constitute an endorsement, certification, or recommendation by MoveToCanada beyond verification of professional credentials at the time of admission.

6. Consent

We collect, use, and disclose your personal information based on your consent, except where otherwise permitted or required by law.

• Implied consent — When you submit a contact form, you are providing implied consent for us to forward your inquiry to the relevant lawyer. When you create an account, you are providing implied consent for us to use your information to operate that account.
• Express consent (CASL) — We will send you commercial electronic messages such as marketing newsletters only after you have given express consent through an unambiguous opt-in (typically a checkbox you actively check). You can withdraw your consent at any time by clicking the unsubscribe link in any marketing email or by emailing privacy@movetocanada.com. Transactional and service-related emails (described in section 4) are not commercial electronic messages and are sent on the basis of the existing business relationship recognized by CASL.
• Withdrawal of consent — You may withdraw your consent to our collection, use, or disclosure of your personal information at any time, subject to legal or contractual restrictions and reasonable notice. To withdraw consent, contact us at privacy@movetocanada.com. Withdrawing consent may affect our ability to provide certain services to you; we will explain any such impact when you contact us.

7. Third-Party Service Providers

We rely on the following third-party processors to operate the Site. Each is bound by its own privacy obligations and, where applicable, by data processing agreements with us.

We will update this list when we add or change material service providers. The current list is what we use as of the "Last updated" date above.

8. Cookies and Tracking Technologies

We use cookies and similar technologies for authentication, security, analytics, and (where you consent) marketing measurement. Detailed information about each cookie category, the third parties we work with, and how to manage your cookie preferences is available in our Cookie Policy.

9. International Data Transfers

Your personal information may be stored, processed, and accessed in countries outside Canada, including the United States, where our service providers operate (see section 7). These jurisdictions may have data protection laws that differ from Canadian law.

While your personal information is in another jurisdiction, it may be subject to the laws of that jurisdiction, including lawful access by foreign courts, governments, regulators, and law enforcement authorities. By using the Site, you acknowledge this cross-border transfer.

We use contractual and technical safeguards to protect personal information transferred outside Canada, including written data processing terms with each provider, encryption in transit (TLS) and at rest where supported, and least-privilege access controls.

10. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, to comply with our legal and contractual obligations, and to resolve disputes. Specific retention periods are:

• Contact inquiries — 2 years from the date of submission, after which the inquiry is permanently deleted from our database.
• Quiz responses — Responses linked to your email address are retained for 12 months. After 12 months, your email address is removed and the underlying response data is anonymized and may be retained indefinitely for aggregate analytics.
• Newsletter subscribers — Until you unsubscribe, plus 12 months after unsubscribe to maintain a suppression list (so we do not accidentally re-subscribe you) and to demonstrate CASL compliance if questioned.
• Lawyer and service provider applications — declined or rejected — 6 months from the decision date, after which the application and supporting documents are permanently deleted.
• Lawyer and service provider accounts — cancelled — 12 months from the cancellation date for the listing profile, login credentials, and operational data, after which these are permanently deleted.
• Billing and payment records — Up to 7 years from the date of the transaction, in compliance with Canada Revenue Agency record-keeping requirements under the Income Tax Act and Excise Tax Act. These records are retained even after a lawyer or service provider account is cancelled, but are isolated from active service systems.
• Server access logs and security logs — 90 days, except where retained longer for an active investigation.
• Anonymized and aggregated data — May be retained indefinitely; this data cannot be re-identified to you.

When the retention period for personal information ends, we securely delete or irreversibly anonymize that information.

11. Your Rights Under PIPEDA

You have the following rights with respect to your personal information held by us:

• Right to access — You may request a copy of the personal information we hold about you, the categories of third parties to whom it has been disclosed, and how it is being used.
• Right to correct — You may request that we correct or amend personal information that is inaccurate or incomplete.
• Right to challenge accuracy — If we disagree with your correction request, you may require us to record a notation of the dispute on the file. Subsequent disclosures of that information will include the notation.
• Right to delete — You may request that we delete personal information we hold about you, subject to legal exceptions (for example, billing records we are required to retain for tax compliance).
• Right to withdraw consent — As described in section 6.
• Right to information about practices — You may request information about our personal information policies and practices, including the name and contact information of our Privacy Officer.
• Right to file a complaint — If you believe we have not adequately addressed your privacy concern, you may file a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca or by phone at 1-800-282-1376.

To exercise any of these rights, email our Privacy Officer at privacy@movetocanada.com. We will verify your identity (typically by confirming control of an email address on file) before fulfilling the request. We will respond to your request within 30 days, in accordance with PIPEDA. If we cannot meet that deadline, we will tell you why and how much additional time we need (up to a further 30 days, as PIPEDA permits).

There is no fee for most requests. If a request is excessive or repetitive, we may charge a reasonable fee or decline the request, and we will explain our reasoning.

12. Rights of California Residents (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act and California Privacy Rights Act provide you with the following rights regarding your personal information:

• Right to know — You may request that we disclose what personal information we have collected about you, the categories of sources from which the information was collected, the business or commercial purpose for collecting the information, the categories of third parties with whom we share the information, and the specific pieces of personal information we have collected about you.
• Right to delete — You may request that we delete personal information we have collected from you, subject to exceptions provided by law (for example, information required to complete a transaction, comply with legal obligations, or detect security incidents).
• Right to correct — You may request that we correct inaccurate personal information we maintain about you.
• Right to opt out of the sale or sharing of personal information — We do not sell or share your personal information for cross-context behavioral advertising or any other purpose. There is no sale or sharing for you to opt out of.
• Right to limit use of sensitive personal information — We do not use sensitive personal information for purposes beyond what is reasonably necessary to provide the services you request. There is no additional use to limit.
• Right to non-discrimination — We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny services, charge different prices, or provide a different level or quality of service because you exercised these rights.

To exercise any of these rights, email privacy@movetocanada.com. We will verify your identity before fulfilling the request and respond within 45 days as required by the CCPA/CPRA. If we need additional time, we will notify you and may extend our response by up to an additional 45 days.

You may also designate an authorized agent to make a request on your behalf. We will require written proof of authorization and will verify the identity of both you and the authorized agent.

We honor the Global Privacy Control (GPC) signal where it is sent by your browser. When we detect a GPC signal, we treat it as a request to opt out of the sale or sharing of personal information for that browser, regardless of any prior consent choice.

13. Rights of Other US State Residents

We extend equivalent privacy rights to residents of the following US states under their respective privacy laws:

• Virginia — Under the Virginia Consumer Data Protection Act (VCDPA), Virginia residents have the right to access, correct, delete, and obtain a copy of their personal data, and to opt out of targeted advertising, sale, and certain profiling activities.
• Colorado — Under the Colorado Privacy Act (CPA), Colorado residents have rights equivalent to those described above for California residents, including the right to access, correct, delete, and opt out of sale, targeted advertising, and certain profiling.
• Connecticut — Under the Connecticut Data Privacy Act (CTDPA), Connecticut residents have rights equivalent to those described above.

To exercise any of these rights, email privacy@movetocanada.com. We will verify your identity and respond within the timeframe required by your state's law.

14. Children's Privacy

The Site is intended for adults aged 18 and older. We do not knowingly collect personal information from anyone under the age of 18. If you are under 18, please do not submit any personal information to us. If you are a parent or guardian and believe a person under 18 has provided personal information to us, contact privacy@movetocanada.com and we will delete the information.

15. Automated Decision-Making

Our eligibility quiz uses simple rule-based scoring against publicly available immigration program criteria to provide informational guidance. The quiz does not produce a legal opinion, an immigration application, or a decision on your eligibility for any program. All quiz results are advisory only and should not be relied on as a substitute for advice from a qualified immigration lawyer.

We do not otherwise make decisions that produce legal or similarly significant effects about you using solely automated processing.

16. Data Security

We protect personal information using a combination of administrative, technical, and physical safeguards appropriate to the sensitivity of the information, including:

• Transport Layer Security (TLS) encryption for all data transmitted between your browser and the Site
• Encryption at rest for our primary database where supported by Supabase
• Row-level security policies that restrict access to personal information at the database level
• Secure password hashing (we never store passwords in plain text)
• Multi-factor authentication for administrative access
• Role-based access controls limiting employee and contractor access to the minimum necessary
• Automated security monitoring and rate limiting
• Bot prevention on inquiry and signup forms (Google reCAPTCHA)
• Regular security reviews and prompt remediation of identified issues

No method of transmission or storage is perfectly secure. While we work to protect your personal information, we cannot guarantee absolute security.

17. Breach Notification

If we determine that a breach of security safeguards involving your personal information has occurred and creates a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner of Canada as soon as feasible, in accordance with PIPEDA's mandatory breach reporting requirements (PIPEDA Division 1.1). We will also keep records of all breaches of security safeguards for at least 24 months, as required.

For US state residents, we will provide breach notification in accordance with applicable state laws (including California's data breach notification statute).

Notifications to you will be made by email to the address on file (or by another reasonable method if email is not feasible) and will include sufficient information for you to understand the significance of the breach and take protective steps where possible.

18. Links to Other Sites

The Site contains links to lawyer websites, service provider websites, government resources, and other third-party sites. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policy of any site you visit through a link from our Site.

19. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where the changes meaningfully affect your rights or how we handle your information, provide additional notice (such as a banner on the Site or an email to registered users).

We encourage you to review this Privacy Policy periodically. Your continued use of the Site after changes take effect indicates your acceptance of the updated policy.

20. Contact Us

If you have questions about this Privacy Policy, wish to exercise any of your rights, or want to raise a concern, please contact our Privacy Officer:

Privacy Officer — Move To Directories Inc. Email: privacy@movetocanada.com Mail: 1208-131 Bloor Street West, Toronto, Ontario, Canada, M5S 1S3

We will acknowledge your inquiry promptly and respond substantively within 30 days.