Privacy Policy

Last updated: April 2026

1. Introduction

At GCMS.ca, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our service to request Global Case Management System (GCMS) notes from Immigration, Refugees and Citizenship Canada (IRCC) via the Access to Information and Privacy (ATIP) Act.

2. Information We Collect

We collect personal information that you voluntarily provide to us when you submit an application. This includes:

  • Personal Identification Information: Name, email address, date of birth, and current address.
  • Immigration Details: Unique Client Identifier (UCI), Application Number, and Application Type.
  • Consent Forms: The signed IMM 5744 Consent for an Access to Information and Personal Information Request form.

3. How We Use Your Information

We use the information we collect primarily to provide, maintain, and improve our services. Specifically, we use your information to:

  • Submit ATIP requests to IRCC on your behalf.
  • Communicate with you regarding the status of your request.
  • Process payments securely via Stripe (we do not store your credit card information).
  • Provide plain-language summaries of your GCMS notes if you selected the Premium package.

4. Data Security and Retention

We implement administrative and technical safeguards to protect your personal information. Sensitive identifiers — your UCI and application number — are encrypted at rest, and your signed IMM 5744 consent form is held in private, access-controlled storage used only to fulfill your request. We retain your information only as long as necessary to provide the service and meet our legal obligations: your encrypted identifiers and signed consent form are securely purged within 90 days of your notes being delivered, unless you ask us to remove them sooner.

5. Sharing Your Information

We do not sell, trade, or otherwise transfer your personally identifiable information to outside parties. The only exception is sharing the information necessary with IRCC to process your ATIP request, and with our payment processor (Stripe) to take payment.

6. Communications & Consent (CASL)

When you place an order, you consent to receive transactional emails about your request (order confirmation and status updates). We do not send marketing emails. You can contact us at any time to update your communication preferences.

7. Your Rights (PIPEDA)

Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), you may request access to, or correction of, the personal information we hold about you, and you may withdraw consent subject to legal or contractual limits. To make a request, contact us at support@gcms.ca.

8. Contact Us

If you have questions or comments about this Privacy Policy, please contact us at: support@gcms.ca.