Immicademy · Website policies

Privacy Policy

Effective and last updated: November 3, 2026

This policy explains the personal information handled by the Immicademy learning portal and how to contact us about it.

1. Scope and contact

This policy covers the Immicademy website at immicademy-lms.vercel.app, including its account, course, assessment and certificate functions. Immicademy is based in British Columbia, Canada. Our original website, external contact services and linked websites may have different privacy notices.

For a privacy question, access or correction request, or complaint, use the channels on our Contact page and identify your message as a privacy request for the learning portal. Ask for the person responsible for Immicademy privacy inquiries.

Please do not send your password, passport, immigration application, financial records or other sensitive documents in an initial inquiry. Describe the request and provide only the contact details needed for a reply.

2. Information we handle and why

  • Account information: registration asks for your full name, email address and password. Your name, account identifier and role are used to operate your account, control access and identify you on a completion certificate. Your email supports sign-in, confirmation and password recovery.
  • Authentication: credentials submitted through this website are processed by our hosting service and Supabase Authentication. Passwords are not stored in lesson-progress or quiz records, and the portal does not provide administrators with a password-viewing function.
  • Course access: enrollment records contain your account and course identifiers, access status and start/end dates. Administrative access changes are recorded with the action, time and relevant before/after enrollment information.
  • Learning records: when you mark a lesson complete or submit an assessment, the portal stores completion timestamps, selected answers, correctness, scores, feedback and submission timestamps. These records support your progress, results and completion eligibility. Administrator quiz test mode does not save a learner attempt.
  • Certificates: eligible certificates are generated from your profile name, course, completion date and a completion reference. Downloading or sharing a certificate can disclose those details to anyone you share it with; the portal does not provide a public learner-certificate directory.
  • Technical information: hosting and authentication services handle request and device information, such as IP addresses, browser information, request times and diagnostic or security logs, to deliver, troubleshoot and protect the service.
  • Communications: if you contact Immicademy, the channel you choose handles your contact details and the information you send so your inquiry can be answered. The portal itself has no contact-message upload form.

The current portal has no checkout or payment-card collection. Course access is administered separately. This policy does not describe payment processing that may occur on another website.

3. Service providers, access and processing locations

Supabase provides authentication and the database for account, enrollment and learning records. Vercel hosts and delivers the website and processes requests to its server functions. These providers process information needed for those services. Authorized Immicademy administrators can access relevant account, enrollment and learning records for administration and support; your learner records are not published in the public course catalog.

Provider processing and support may occur outside Canada. Information processed in another country may be subject to that country’s laws and lawful access by its authorities. We do not promise that all information remains in Canada. You can request information about the providers and processing arrangements relevant to your account.

Personal information may also need to be disclosed when required or permitted by applicable law. This policy does not authorize unrelated disclosure, marketing or sale of learner information.

Provider information: Supabase privacy information and Vercel Privacy Notice. These documents describe the providers’ own practices and do not replace Immicademy’s responsibility for information under its control.

4. Cookies, searches and public tools

The portal uses authentication cookies to maintain and refresh a signed-in session. Clearing or blocking them can sign you out or prevent protected course functions from working. The current application does not include advertising pixels or a separate visitor-analytics integration. This does not mean that hosting and authentication services produce no operational or security logs.

The program-and-career finder matches your search and filters against a supplied catalog in your browser. It does not send those search terms to an AI service, save them to your student profile or persist them in browser storage. Public news filtering can appear in a page URL, browser history and hosting request logs. Avoid entering sensitive personal information into public search fields.

The Express Entry chart retrieves public IRCC information on the server. News updates use public publisher information. These source updates do not send your course answers or program-finder query to the publishers. Following a source or contact link opens another service, whose privacy practices apply to your visit there.

The current portal offers no student AI chatbot or AI adviser. Browser controls and the program finder are not an immigration eligibility decision system.

5. Retention and safeguards

Account and learning records are retained to provide course access, progress, assessment history and completion records, and where needed for legitimate administrative, security or legal purposes. Retention must be assessed against those purposes and applicable obligations, including any required period for records used to make a decision affecting an individual. Records should not be kept merely because storage is available.

The portal currently has no automatic account-deletion schedule or self-service deletion button. Signing out, clearing cookies or reaching an enrollment end date does not delete stored records. Contact us to request deletion or information about retention. A request may require identity verification, review of legal retention requirements and consideration of provider backups; immediate or complete deletion cannot be assumed.

The application uses sign-in checks and database access controls to limit access to learner information. No website or transmission method can guarantee absolute security. Protect your password, sign out on shared devices and contact us if you suspect unauthorized access. This security limitation does not remove our obligations to protect personal information.

6. Your choices, access, correction and complaints

You can browse public pages without registering. Account and learning information is necessary for the associated signed-in functions. You can ask what personal information we hold about you, how it is used, request access or correction, raise a privacy concern, or request withdrawal of consent where applicable. Withdrawing information needed for an account or course may prevent us from providing those functions; applicable legal requirements or restrictions may also affect a request.

Send a written request through the Contact page, identify the portal account and describe the information or correction sought. We may need proportionate information to confirm that the request concerns your own records. Do not send identity documents unless a necessary and appropriate verification method has been explained to you.

You may also seek information or raise a concern with the Office of the Information and Privacy Commissioner for British Columbia or, where applicable, the Office of the Privacy Commissioner of Canada. Nothing in this policy restricts a right or remedy available under applicable privacy law.

7. Changes and further information

We will update this page when the portal’s described practices change and identify the revision date. If a new use or disclosure requires consent, posting a revised policy alone is not a substitute for obtaining it. Reading this policy does not give permission for unrelated uses of your information.

The Office of the Privacy Commissioner of Canada states: “For non-integral collections, uses and disclosures, individuals must be given a choice.”

Official consent guidance, checked November 3, 2026. See also our Terms & Conditions.