Documents
Privacy Policy
Last updated: August 29, 2026
This Privacy Policy describes how RCIC.link (“we,” “our,” or “us”) collects, uses, and protects your information when you use our website and related services (“Platform”).
By using RCIC.link, you consent to the collection and use of your information as described in this Policy.
Information We Collect
We collect the following types of information:
a. Account Information
When you create an account or claim a profile, we collect:
- Name
- Email address
- RCIC ID
- Business details you choose to display
b. Billing Information
If you subscribe to a paid plan, payment details are processed securely by Stripe. RCIC.link never stores full credit card information.
c. Technical Request Data
We do not run analytics of our own. What is collected is what any web server records: our hosting provider, Cloudflare, keeps standard request logs containing the IP address, browser and device type, the page requested and the referring URL. We use these for security, abuse prevention and diagnosing faults — not to build a profile of you, and not to measure how long you spend on a page.
d. Cookies and Analytics
RCIC.link does not set advertising or analytics cookies, and does not run Google Analytics on its own pages. When you sign in, your session is held in your browser's local storage so that you stay signed in; clearing your browser data removes it.
Consultant pages are different. A consultant on our Premium plan may connect their own Google Analytics or Meta Pixel to their page. Where they have done so, that tracking is theirs and is governed by their own arrangements, not ours.
e. Communications
If you contact us via email or support forms, we may keep those communications for service and record-keeping purposes.
User-Generated Content and Profiles
Information published on your RCIC profile (e.g., name, business, services, links) becomes publicly visible. Please avoid including sensitive personal data in public fields. You may update or remove your profile information at any time from your dashboard.
If You Are Listed and Have Not Signed Up
Most profiles on RCIC.link belong to consultants who have never created an account. Those listings are built from the public register of the College of Immigration and Citizenship Consultants, which publishes each licensee's name, registration number, licence class, employer and city. We hold only what that register publishes, together with anything the consultant later adds by claiming their listing.
If a listing is yours, you can:
- Claim it, free, and correct or expand it yourself;
- Ask us to stop any enquiries being forwarded to you; or
- Ask us to remove the listing, which we will do.
Email support@rcic.link from the address on the register, or use the contact form, and say which of the three you want.
Custom Domains
If you connect a custom domain to your RCIC.link profile:
- We collect the domain name to configure SSL and DNS records through Cloudflare.
- RCIC.link does not claim ownership of your domain.
- You remain responsible for domain renewal, configuration, and compliance with your registrar’s policies.
Contact Forms
A consultant who has claimed their listing may choose to display a contact form. It is off until they switch it on, and they can switch it off again at any time. On a paid plan the same form can also appear on their own page or their own domain.
We store what you send. When you submit an enquiry through one of these forms, the following is saved to our database:
- your name and email address,
- the message you wrote,
- the subject you selected, and
- a one-way hash of your IP address — never the address itself — used only to detect abuse.
The enquiry is also emailed to the consultant immediately, with your email address as the reply-to, so replying reaches you directly. We keep the stored copy so that a delivery failure cannot lose your message.
The consultant can read and delete these messages from their dashboard, and we keep them until they do. We may also receive a notification recording that a listing received an enquiry; that notification contains no message content and no sender details.
Please do not include sensitive information in an enquiry — passport, UCI or social insurance numbers, financial details, or medical information. Describe your situation in general terms and share documents directly with the consultant once you are in contact.
Contact Details on a Profile
On rcic.link's own listing pages, a consultant's email address and phone number are not written into the page in readable form. They are encrypted, and released only after your browser completes an anti-bot check — which is why those details sit behind a "Show email" button rather than being printed. This keeps the addresses published on the register out of the reach of bulk scrapers.
A consultant who has moved their page to their own domain may choose to publish those details openly instead. That is their decision to make about their own contact information.
How We Use Information
We use collected information to:
- Provide, operate, and improve the Platform
- Verify RCIC credentials and manage user accounts
- Process payments and renewals
- Send administrative updates and notices
- Monitor site performance and prevent fraud
Data Sharing
We use a small number of service providers to run RCIC.link. They process personal information only to provide their service to us:
- Hosting and security — Cloudflare hosts the site and stored files, and protects our forms from automated abuse
- Accounts and database — Supabase stores profiles, messages and sign-in accounts
- Payments — Stripe processes subscription payments; we never see your card details
- Email — Emailit delivers sign-in links and enquiry notifications
Pages also load fonts and scripts from content delivery networks (Google Fonts, jsDelivr), which receive your IP address as part of any web request.
Some of these providers store or process information outside Canada, including in the United States, where it may be accessible to authorities under the law of that country.
We do not sell or rent your personal information.
Data Retention
We retain account-related data for as long as your account is active. If you delete your account, we remove or anonymize associated data within a reasonable timeframe, except where retention is required by law (e.g., billing records).
Security
We employ industry-standard security measures, including encryption and restricted access, to protect your information. However, no online platform can guarantee absolute security.
Your Rights
Depending on your location, you may have rights to:
- Access the data we hold about you
- Request correction or deletion
- Withdraw consent for marketing emails
To exercise these rights, contact us at support@rcic.link.
Changes to This Policy
We may update this Policy periodically. The most recent version will always be posted at https://rcic.link/privacy. Continued use of the Platform after changes constitutes acceptance of the updated Policy.
Contact
If you have questions or privacy-related requests, please contact: