Privacy Policy

Markham Visa & Document Services, 3601 Highway 7 East, Suite 1005, Markham, ON L3R 0M3, is responsible for the personal information described here. We handle it under Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).

For any privacy question or request, contact info@markhamvisa.ca or call (647) 696-0986.

Depending on the service, this can include:

• Contact details — name, email address, phone number.
• Application details — nationality, province of residence, purpose and dates of travel, number of entries, flight and accommodation details, and the document type and count for apostille work.
• Documents you upload or hand in — passport bio page scans, photographs, and the supporting documents an application requires. For apostille work, the physical original documents themselves.
• Order and payment records — what you bought, the amount, the payment method, and the date. We never see or store your full card number.
• Correspondence — emails and messages between us.

We ask for the minimum an application needs. If you give us more than that, we do not use it for anything else.

We use your information to quote for, prepare, check, and submit your application; to hold and return your documents; to take payment; to keep you updated; and to keep the business records Canadian tax law requires. That is all.

You consent when you place an order and provide the information. You can withdraw consent at any time — but if you withdraw it while an application is under way, we will usually be unable to continue, and clause 6 of our Terms of Service applies to fees.

We do not sell your personal information. We do not share it with advertisers, brokers, or marketing lists, and we do not send you marketing you did not ask for.

Your order records and uploaded documents are stored in Canada, in our database and private file storage hosted in the Montréal region (ca-central-1). Uploaded files are held in private storage that is not readable from the public web.

Our website itself is served from a global network, and some of the service providers below process data outside Canada. Where that happens it is named in clause 5. Information held in another country may be accessible to that country’s courts and authorities under its own laws.

We use a small number of service providers. Each acts on our instructions, and none of them is permitted to use your information for their own purposes.

• Supabase — database and private document storage, in Canada. Holds everything, including uploaded documents.
• Stripe — card payments. Stripe receives your name, email, and the amount, and handles the card details directly. We never receive your full card number.
• Resend — sends our transactional emails (confirmations, reminders, forms). Receives your name and email address and the contents of those emails. Outside Canada.
• Vercel — hosts the website and processes requests to it. Outside Canada.
• Anthropic — provides the AI model used to prepare and check applications. Where automated preparation runs on your file, your order details and your uploaded document images are sent to Anthropic’s API for processing and a result is returned. Outside Canada. See clause 6.
• Blue — our internal work queue. Receives order details and your contact information only. Passport scans and uploaded documents are never copied into it.

We also give your information to the government authority, consulate, or application centre your application is addressed to — that is the point of the service — and to couriers where you have chosen a shipped return. Once your information reaches an authority, that authority’s own rules govern it, not ours.

We will disclose information if the law requires it, and we may disclose it to a professional adviser or to establish or defend a legal claim.

We use artificial intelligence to do the first pass of preparing and checking applications — reading a passport image, filling in form fields, and flagging problems for the person who reviews your file.

• It never submits anything and never decides anything. Its output is a proposal for a person, who reviews it and is responsible for what is submitted.
• It never emails you. Where it drafts a message asking for a missing document, a person reads that draft and decides whether to send it.
• Your data is sent to Anthropic’s API to produce that result and is not used to train their models.
• If you would rather your file was not processed this way, tell us and we will prepare it manually. It costs you nothing and changes nothing about your price.

• Uploaded documents and scans — deleted 12 months after your order is completed or closed.
• Order and financial records — kept for 6 years after the end of the tax year they relate to, which is what Canadian tax law requires of us.
• Physical original documents — returned to you as part of the service. We do not keep them.
• Correspondence — kept while it is useful for servicing your file and then deleted.

You can ask us to delete your uploads sooner and we will, unless we still need them for an application in progress.

• The document store is private. There is no public link to any file in it, and our website’s own public key cannot read from it.
• Looking up an order requires both the order number and the surname on it, or the private link we emailed you. Neither exposes another customer’s order.
• Information is encrypted in transit and at rest.
• Access is limited to the people who need it to do the work, and to the providers listed in clause 5.

No system is perfectly secure. If a breach affects you and creates a real risk of significant harm, we will notify you and the Privacy Commissioner of Canada as PIPEDA requires.

This site does not use advertising cookies and does not track you across other websites. We use only what is needed to make the site work and to keep it secure.

Under PIPEDA you may:

• ask what personal information we hold about you and get a copy;
• ask us to correct anything inaccurate;
• ask us to delete information we no longer need to keep;
• withdraw your consent, subject to clause 3;
• ask a real person how any of this works, rather than being sent to a form.

Write to info@markhamvisa.ca. We respond within 30 days. If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada.

We do not knowingly collect information directly from children. Where an application is for a child, we deal with the parent or guardian, who provides the child’s information and consents on their behalf.

If we change this policy we will update the date at the top of this page. If a change materially affects how we handle information we already hold about you, we will tell you directly.