Privacy Policy

Tafur Connections ("Tafur", "we", "our") is committed to protecting your personal information. This policy describes how we collect, use, disclose, and protect your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable legislation of the Province of Ontario.

1. Privacy Officer

The person responsible for privacy compliance at Tafur Connections is: • Name: Magda Tafur, Founder & Director • Email: magda@tafur.ca • Phone: +1 (647) 569-3214

2. Personal Information We Collect

Through our website: full name, email address, phone number, area of legal interest, content of messages sent via the contact form, IP address and browser technical data, cookie information (subject to your consent). Through the professional relationship: identification and immigration documents, financial information required for billing, case history and pertinent legal information, and any other information you voluntarily provide.

3. Purposes of Collection

We collect and use your personal information exclusively to: respond to your inquiries; assess potential conflicts of interest; provide strategic immigration and human rights advisory services; prepare evidence-driven case files; manage business operations (billing, professional insurance); improve our website and services (only with your consent for analytics cookies); and comply with legal and regulatory obligations.

4. Consent

We obtain your consent before collecting, using, or disclosing your personal information. Express consent: for collection of sensitive data, non-essential cookies, and marketing communications. Implied consent: when you engage our services, for information necessary to fulfill your mandate. You may withdraw consent at any time by contacting us. Withdrawal may limit our ability to provide certain services.

5. Limiting Collection

We only collect personal information that is necessary for the identified purposes. We do not request information that is not functionally necessary for your case or inquiry.

6. Use, Disclosure & Retention

Your information is used only for the purposes for which it was collected. We do not sell, rent, or trade your personal information to third parties for marketing purposes. We may share information with: government immigration bodies (with your authorization), associated lawyers and consultants (when necessary for your case), payment processors for billing transactions, and authorities when required by law. Retention: web inquiry information is kept for a maximum of 24 months. Case files are retained per our professional record-keeping obligations (minimum 6 years). You may request deletion of your data at any time.

7. Security Safeguards

We protect your information with: data encryption in transit (HTTPS/TLS); multi-factor authentication for system access; secure encrypted platforms (Microsoft OneDrive) for sensitive documents; complex password and credential management; and minimization of physical paperwork. Financial data is processed by certified secure payment providers; we do not store credit card data.

8. Data Transfers

Your personal information may be processed or stored outside Canada through our technology service providers (web hosting, email, cloud storage). When this occurs, your information will be subject to the laws of the country where it is processed. We take contractual measures to ensure your information receives a level of protection comparable to Canadian legislation.

9. Your Rights

Under PIPEDA, you have the right to: access the personal information we hold about you; correct any inaccurate or incomplete information; request deletion of your personal information (subject to legal retention obligations); withdraw your consent for use of your information; and know how your information has been used and disclosed. To exercise any of these rights, contact us at magda@tafur.ca. We will respond within 30 days of your request.

10. Cookies & Tracking Technologies

Our website uses cookies. For detailed information about the types of cookies we use, their purposes, and how to manage them, please see our Cookie Policy at /cookie-policy.

11. Electronic Communications (CASL)

We comply with Canada's Anti-Spam Legislation (CASL). We do not send commercial electronic messages without your prior consent. If you have consented to receive communications from us, you may unsubscribe at any time by contacting us or using the unsubscribe link in each communication.

12. Minors

We do not intentionally collect personal information from individuals under 18 years of age. If we discover we have collected information from a minor without appropriate parental consent, we will delete it immediately.

13. Complaints

If you have questions or complaints about our privacy practices: 1. Contact our Privacy Officer first: magda@tafur.ca 2. We will investigate and respond within 30 days. 3. If you are unsatisfied with our response, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada (OPC): www.priv.gc.ca · 1-800-282-1376 · 30 Victoria Street, Gatineau, Quebec, K1A 1H3.

14. Changes to this Policy

We reserve the right to modify this Privacy Policy at any time. Changes will be posted on this page with the updated date. We recommend reviewing this policy periodically.