Privacy Policy

Last updated: April 9, 2026

1. Overview

StudyCareer Canada (“we”, “us”, “the Service”) is a service operated by VisionSpector (visionspector.com). We respect your privacy. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

This policy is designed to comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and its ten fair information principles. Where applicable, it also addresses obligations under the General Data Protection Regulation (GDPR) for visitors from the European Economic Area and the California Consumer Privacy Act (CCPA).

2. Information we collect

2.1 Information you provide

If you contact us, subscribe to updates, or create an account, we may collect your email address and any information you include in your message. We do not currently require account registration to use the Service.

2.2 Information collected automatically

When you visit the Service, we may automatically collect:

  • Device and browser type, operating system, and screen resolution
  • IP address (anonymized where possible)
  • Pages visited, time spent, click events, and referral source
  • General geographic location (country or city level, not precise location)

This data is collected through analytics tools (see Section 5) and is used in aggregate to improve the Service. We do not use this data to identify individual users.

3. How we use information

We use the information we collect to:

  • Operate, maintain, and improve the Service
  • Understand how visitors use the Service (aggregate analytics)
  • Respond to inquiries or support requests
  • Send updates or notifications if you have opted in
  • Detect and prevent fraud or abuse

We do not sell, rent, or share your personal information with third parties for marketing purposes. We do not use personal information for automated decision-making or profiling that produces legal or similarly significant effects.

4. Consent and legal basis

Under PIPEDA, we collect, use, and disclose personal information only with your knowledge and consent, except where permitted or required by law. By using the Service, you consent to the collection of automatically gathered data described in Section 2.2. For email communications, we obtain express consent at the point of collection.

You may withdraw consent at any time by contacting us or using the unsubscribe mechanism in any email. Withdrawal of consent may limit your ability to use certain features of the Service.

5. Analytics and cookies

We may use Google Analytics or similar tools to collect anonymous usage data. These tools use cookies — small text files stored on your device — to distinguish users and analyse traffic patterns.

The cookies we use fall into the following categories:

  • Essential cookies: Required for the Service to function (e.g., session management). Cannot be disabled.
  • Analytics cookies: Help us understand usage patterns. Can be disabled through your browser settings or our cookie preferences.

You can control cookies through your browser settings. Disabling analytics cookies will not affect the core functionality of the Service. Google Analytics data is processed in accordance with Google's Privacy Policy. We use the IP anonymization feature of Google Analytics.

Where required by applicable law (e.g., GDPR for EU visitors), we will obtain your consent before setting non-essential cookies.

6. Commercial electronic messages (CASL)

We comply with Canada's Anti-Spam Legislation (CASL, S.C. 2010, c. 23). We will only send you commercial electronic messages (including email newsletters and promotional content) if you have provided express consent. Every commercial message we send will:

  • Clearly identify the sender (StudyCareer Canada)
  • Include valid contact information
  • Provide a working unsubscribe mechanism

Unsubscribe requests are processed within 10 business days as required by CASL. Transactional messages (e.g., account confirmations, support replies) are not subject to CASL consent requirements and may be sent without prior opt-in.

7. Cross-border data transfers

The Service uses third-party infrastructure providers that may process or store data outside of Canada. Your information may be transferred to, stored, and processed in the United States or other jurisdictions. Our current service providers include:

  • Vercel Inc.(San Francisco, USA) — website hosting and content delivery
  • Supabase Inc.(San Francisco, USA) — database hosting, data stored on AWS infrastructure in North America
  • Google LLC(Mountain View, USA) — analytics (Google Analytics)

By using the Service, you consent to the transfer of your information to these jurisdictions. We ensure that our service providers maintain adequate privacy and security protections consistent with PIPEDA. Where GDPR applies, transfers are made pursuant to Standard Contractual Clauses (Article 46 of the GDPR).

8. Data retention

Analytics data is retained for up to 14 months. If you contact us by email, we retain your message for as long as necessary to respond and for our records, unless you request deletion. Account data (if applicable) is retained for the duration of your account and deleted within 30 days of account closure.

9. Data security

We implement reasonable technical and organizational measures to protect the information we process, including encryption in transit (TLS/HTTPS), access controls, and regular security reviews. However, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security.

10. Data breach notification

In the event of a breach of security safeguards involving personal information that poses a real risk of significant harm, we will:

  • Report the breach to the Office of the Privacy Commissioner of Canada as soon as feasible, as required under PIPEDA
  • Notify affected individuals as soon as feasible, describing the nature of the breach, the information involved, steps we have taken, and steps individuals can take to mitigate risk
  • Maintain records of all breaches of security safeguards for a minimum of 24 months

Where GDPR applies, we will additionally notify the relevant supervisory authority within 72 hours of becoming aware of a qualifying breach.

11. Your rights

Under PIPEDA, you have the right to:

  • Access your personal information held by us
  • Correct inaccurate or incomplete personal information
  • Withdraw consent for the collection, use, or disclosure of your personal information (subject to legal or contractual restrictions)
  • Complain to the Office of the Privacy Commissioner of Canada if you believe your privacy rights have been violated

If you are located in the EEA, you may additionally have the right to erasure, data portability, and restriction of processing under the GDPR. If you are a California resident, you may have additional rights under the CCPA, including the right to know and the right to delete.

To exercise any of these rights, contact us using the details below. We will respond within 30 days as required by PIPEDA.

12. Children

The Service is not directed at individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us so we can promptly delete it.

13. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page reflects the most recent revision. Material changes will be communicated through a notice on the Service.

14. Privacy officer and contact

StudyCareer Canada has designated a privacy officer responsible for compliance with this policy and applicable privacy legislation. For privacy questions, access requests, or complaints, reach us at admin@visionspector.com.

If you are not satisfied with our response, you may file a complaint with the Office of the Privacy Commissioner of Canada.