Privacy Policy
Effective and last updated: November 3, 2026
This policy explains the personal information handled by the Immicademy learning portal and how to contact us about it.
1. Scope and contact
This policy covers the Immicademy website at immicademy-lms.vercel.app, including its account, course, assessment and certificate functions. Immicademy is based in British Columbia, Canada. Our original website, external contact services and linked websites may have different privacy notices.
For a privacy question, access or correction request, or complaint, use the channels on our Contact page and identify your message as a privacy request for the learning portal. Ask for the person responsible for Immicademy privacy inquiries.
Please do not send your password, passport, immigration application, financial records or other sensitive documents in an initial inquiry. Describe the request and provide only the contact details needed for a reply.
2. Information we handle and why
- Account information: registration asks for your full name, email address and password. Your name, account identifier and role are used to operate your account, control access and identify you on a completion certificate. Your email supports sign-in, confirmation and password recovery.
- Authentication: credentials submitted through this website are processed by our hosting service and Supabase Authentication. Passwords are not stored in lesson-progress or quiz records, and the portal does not provide administrators with a password-viewing function.
- Course access: enrollment records contain your account and course identifiers, access status and start/end dates. Administrative access changes are recorded with the action, time and relevant before/after enrollment information.
- Learning records: when you mark a lesson complete or submit an assessment, the portal stores completion timestamps, selected answers, correctness, scores, feedback and submission timestamps. These records support your progress, results and completion eligibility. Administrator quiz test mode does not save a learner attempt.
- Certificates: eligible certificates are generated from your profile name, course, completion date and a completion reference. Downloading or sharing a certificate can disclose those details to anyone you share it with; the portal does not provide a public learner-certificate directory.
- Technical information: hosting and authentication services handle request and device information, such as IP addresses, browser information, request times and diagnostic or security logs, to deliver, troubleshoot and protect the service.
- Communications: if you contact Immicademy, the channel you choose handles your contact details and the information you send so your inquiry can be answered. The portal itself has no contact-message upload form.
The current portal has no checkout or payment-card collection. Course access is administered separately. This policy does not describe payment processing that may occur on another website.
3. Service providers, access and processing locations
Supabase provides authentication and the database for account, enrollment and learning records. Vercel hosts and delivers the website and processes requests to its server functions. These providers process information needed for those services. Authorized Immicademy administrators can access relevant account, enrollment and learning records for administration and support; your learner records are not published in the public course catalog.
Provider processing and support may occur outside Canada. Information processed in another country may be subject to that country’s laws and lawful access by its authorities. We do not promise that all information remains in Canada. You can request information about the providers and processing arrangements relevant to your account.
Personal information may also need to be disclosed when required or permitted by applicable law. This policy does not authorize unrelated disclosure, marketing or sale of learner information.
Provider information: Supabase privacy information and Vercel Privacy Notice. These documents describe the providers’ own practices and do not replace Immicademy’s responsibility for information under its control.
5. Retention and safeguards
Account and learning records are retained to provide course access, progress, assessment history and completion records, and where needed for legitimate administrative, security or legal purposes. Retention must be assessed against those purposes and applicable obligations, including any required period for records used to make a decision affecting an individual. Records should not be kept merely because storage is available.
The portal currently has no automatic account-deletion schedule or self-service deletion button. Signing out, clearing cookies or reaching an enrollment end date does not delete stored records. Contact us to request deletion or information about retention. A request may require identity verification, review of legal retention requirements and consideration of provider backups; immediate or complete deletion cannot be assumed.
The application uses sign-in checks and database access controls to limit access to learner information. No website or transmission method can guarantee absolute security. Protect your password, sign out on shared devices and contact us if you suspect unauthorized access. This security limitation does not remove our obligations to protect personal information.
6. Your choices, access, correction and complaints
You can browse public pages without registering. Account and learning information is necessary for the associated signed-in functions. You can ask what personal information we hold about you, how it is used, request access or correction, raise a privacy concern, or request withdrawal of consent where applicable. Withdrawing information needed for an account or course may prevent us from providing those functions; applicable legal requirements or restrictions may also affect a request.
Send a written request through the Contact page, identify the portal account and describe the information or correction sought. We may need proportionate information to confirm that the request concerns your own records. Do not send identity documents unless a necessary and appropriate verification method has been explained to you.
You may also seek information or raise a concern with the Office of the Information and Privacy Commissioner for British Columbia or, where applicable, the Office of the Privacy Commissioner of Canada. Nothing in this policy restricts a right or remedy available under applicable privacy law.
7. Changes and further information
We will update this page when the portal’s described practices change and identify the revision date. If a new use or disclosure requires consent, posting a revised policy alone is not a substitute for obtaining it. Reading this policy does not give permission for unrelated uses of your information.
The Office of the Privacy Commissioner of Canada states: “For non-integral collections, uses and disclosures, individuals must be given a choice.”
Official consent guidance, checked November 3, 2026. See also our Terms & Conditions.