Privacy Policy

Last Updated: August 12, 2025

Zohil-Morton Law (“We“, “Us“, “Company“, or “Our“) is committed to protecting your (“User” or “You“) privacy and safeguarding your personal information. This Privacy Policy (the “Policy“) explains how we collect, use, store, and disclose personal information when you visit our website, engage in our services, or communicate with us.

As a Canadian immigration law firm, we provide Canadian immigration legal services to corporations and individuals worldwide. We are dedicated to respecting your rights and protecting your privacy while maintaining the highest standards of confidentiality, professionalism, and data protection. By using our website or engaging with our services, you agree to the collection, use, and disclosure of your personal information in accordance with this Policy. We reserve the right to make changes to this Policy at any given time.

This Policy applies to individuals, not corporations, unless otherwise specified, and applies solely to the information collected by this website and any affiliated social media accounts.

By accessing and using this website, and our related social media accounts, you agree to our Policy and consent to the data collection procedures expressed in the Policy.

1. Commitment to Privacy

1.1 We are committed to respecting your privacy, safeguarding your personal data, and complying with applicable data laws regarding data protection, including the Personal Information Protection and Electronic Documents Act (PIPEDA), the General Data Protection Regulation (GDPR) for Users located in the European Union, and the California Online Privacy Protection Act (CalOPPA) for California residents. All personal information collected is handled in accordance with our professional obligations as a law firm.

1.2 Our work often involves sharing your information with third parties, which may include submitting your application to government departments. If we need to involve others in the process, we will inform you.

2. Information We Collect

2.1 Personal Information

2.1.1 We collect personal information only to the extent necessary to provide immigration and legal services or for other lawful purposes. This may include, but is not limited to:

Your full name;
Contact details;
Medical, criminal, and legal records;
Immigration records;
Your employment and education history; and,
Payment and billing information.

Additional details may be collected where required to provide the specific legal services you requested.

2.2 How We Collect Information

2.2.1 We collect information when you provide it voluntarily and/or directly. Information may be collected directly from you through emails, contact forms, consultations, and/or applications. We also collect certain information automatically when you interact with our website, including your IP address, browser type, and device data.

2.2.2 In some cases, we may obtain personal information from third parties, such as government agencies, recruitment agencies, service providers, clients we represent, regulatory and legal authorities, and publicly available records, provided that such collection is permitted by law. Additionally, we may gather information from public sources during investigations or legal proceedings related to the legal services we are providing to you.

2.3 Use of Information

2.3.1 We use personal information for the purposes set out in this policy, including to carry out legal services retained for. We use the personal information we collect for the following purposes, amongst others:

To establish and verify your identity;
To prepare and submit applications to government authorities;
To provide and improve our legal services;
To respond to inquiries and communicate with you;
For billing and financial transactions;
For internal record keeping;
For detection and prevention of fraud;
For analytics and website optimization; and,
To ensure compliance with applicable laws, regulations, and obligations.

2.3.2 We do not sell your personal information to third parties.

2.3.3 Non-personally identifiable information may be used to provide an overview of how users are accessing and engaging with our website.

2.4 Security and Storage of Your Information

2.4.1 While we take reasonable measures to keep your information secure, we cannot guarantee the absolute security of data transmitted via the internet. You are responsible for taking necessary precautions when transmitting personal information. Personal information will be retained by us only as long as necessary for the purpose it was collected, and those outlined in this policy, as required by law, or to address any potential future issues.

2.4.2 We may disclose personal information if required to do so by law, regulation, or court order, or if we have a good-faith belief that such disclosure is reasonably necessary to protect the rights, property, or safety of Zohil-Morton Law, our users, or the public. Disclosure may also occur where we reasonably believe that unlawful activity has been, is being, or may be engaged in, and such disclosure is necessary to investigate or prevent the activity.

2.4.3 In the event of a merger, acquisition, restructuring, or sale of our company, personal information may be transferred as part of the transaction. We may also share information with carefully selected partners or affiliates where reasonably necessary to support our services. In all circumstances, we take reasonable steps to ensure that personal information is handled securely and in accordance with this Policy.

2.4.4 User information is stored through a data management system. You understand that there are limited circumstances where we will share your confidential information. Any parties who have access to the user’s information will keep the information confidential and will not share it with any other parties.

2.4.5 Information provided by you will never be shared, sold, or given to any other company, person, or party without prior consent, other than when is required to complete a request made by the user, unless required to do so by law or in accordance with any governmental requirements.

2.4.6 This website, along with the servers and service providers that support it, operate within Canada. The laws of Canada govern all matters relating to this website. Any personal information you provide through the website will be collected and processed in Canada. Depending on the services provided, this information may also be transferred within Canada or to other jurisdictions outside of your country of residence. Some of these jurisdictions may not have data protection laws as comprehensive as those in your home country; however, any transfer, collection, storage, and use of your personal information will be handled in accordance with this Policy. By using the website and submitting personal information, you acknowledge and consent to such transfers and processing.

2.4.7 When we collect and use your personal information, we act as a data controller, thereby we determine the purposes for which information is collected, how long it is retained, and how it is used. In certain instances, we rely on carefully selected third-party service providers to act as data processors, such as for email list management or secure data storage. To the best of our knowledge, all third-party data processors engaged by us have represented that they are compliant with applicable privacy and data protection laws, including the General Data Protection Regulation (GDPR) where relevant.

2.4.8 The data our website collects from you will be retained and stored only for as long as necessary. The retention period is determined based on the relevance of information, the reasonable time needed to demonstrate that we have fulfilled our duties and obligations, any legal limitation periods for potential claims, the nature of the contract with the user, the existence of consent, and our legitimate interest in maintaining such information as outlined in this Policy. In all cases, data will be kept only for as long as permitted under applicable Data Protection Legislation, and in accordance with governing laws and associations.

2.5 Contacting Us

2.5.1 If you elect to fill out the “Contact Us” section of our website, or communicate with us through any means, including, but not limited to, email, social media messaging or posting, telephone calls, or text messages, we may collect personal information including your name, email address, as well as the text of any message sent electronically.

2.6 Retaining Us

2.6.1 If the user becomes a client of ours, we will collect additional information to complete the services requested. We will collect and process this data and will not retain the information any longer than necessary.

3. Sharing of Information

3.1 Third-Party Services

3.1.1 In the course of providing legal services, we may share your personal information with third parties. This may include government departments, such as Immigration, Refugees and Citizenship Canada (IRCC), the Canada Border Services Agency (CBSA), Employment and Social Development Canada (ESDC), as well as courts, tribunals, or regulatory authorities. We may also engage in trusted service providers who assist us with technology, accounting, or case management support. These parties are required to handle your personal information securely and only for the purposes for which it was shared.

3.1.2 In the event of a merger, reorganization, or change of ownership of the Company, personal information may be transferred to the acquiring party, provided that the receiving organization agrees to respect this Policy.

3.2 Cookies and Web Analytics

3.2.1 Our website uses cookies, digital markers, and tools such as Google Analytics to improve the user experience, personalize content, and analyze website traffic. Cookies allow us to track how users interact with our website and help enhance functionality. We may use both session cookies and persistent cookies. Users may disable cookies through their browser settings, although doing so may limit access to certain features of our website. We may collect information through Automatic Data Collection Technology.

3.3 Security of Information

3.3.1 We implement reasonable technical and organizational safeguards to protect personal information against loss, misuse, unauthorized access, disclosure, alteration, or destruction and damage; however, no method of data transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security. We can therefore only guarantee that we maintain a reasonable level of security to protect your personal information.

3.3.2 Personal information will be retained only for as long as necessary to fulfil the purposes outlined in this Policy, to comply with legal obligations, or as reasonably required to address potential future legal issues.

3.3.3 We take measures to safeguard user information offline; access to personally identifiable information is strictly limited to employees who require it to perform specific job functions. The technology and servers used to store this information are maintained in a secure environment to prevent unauthorized access.

3.3.4 We do not have a Data Protection Officer, as our legal services do not consist of processing operations that require regular and systematic monitoring of data subjects. We do not process sensitive categories of data on large scales.

4. Your Access To, and Control Over, Your Information

4.1 Depending on your jurisdiction, you may have certain rights with respect to your personal information. These include the right to access the personal information we hold about you, the right to request corrections of any inaccuracies, and, in some cases, the right to request deletion of information subject to applicable legal and professional obligations.

4.2 Providing your personal information implies consent to its collection, use, and disclosure under this Policy. Consent can be given explicitly or impliedly. If you do not consent, please do not provide your information to us, although certain immigration services may not be available without it.

4.3 You have the right to withdraw consent for the use of your personal information at any time. Please note that withdrawing consent may limit our ability to provide immigration services to you.

4.4 You have the right to update, edit, or delete your information from our database. To do so, please email us at cristina@zomolaw.ca.

4.5 If you no longer wish to receive marketing emails from us, you may opt out of receiving marketing communications at any time by using the unsubscribe link provided in the email or by contacting us directly. We will continue to adhere to this Policy in regard to any personal information previously collected.

5. International Users

5.1 If you access our website from outside of Canada, your personal information may be transferred to and processed in Canada or other jurisdictions where data protection laws may differ from those in your country of residence. We comply with the European Union’s General Data Protection Regulation (GDPR) requirements for users in the European Union and ensure that adequate safeguards are in place for international data transfers.

5.2 If you are a resident of California, you have the right to request information from us regarding how we collect, use, store, or share your personal information with third parties. A request for this information can be made via email to cristina@zomolaw.ca.

5.3 We confirm that we have lawful grounds for processing the personal information we collect from users under the European Union’s General Data Protection Regulation (GDPR). We process all data and personal information collected via our “Contact Us” page and all other electronic communication based on our legitimate interest in responding to user or client inquiries.

6. Governing Law

6.1 Any claim relating to our website shall be governed by the laws of the Province of Ontario, without regard to its conflict of law provisions.

7. Changes to This Policy

7.1 We may update this Policy periodically. Updates will be posted on this page, and the revised Policy will become effective immediately upon posting. We encourage users to review this Policy regularly to remain informed about how we manage personal information.

7.2 Your continued use of the website and any services or products following the posting of changes to our Policy constitute your consent of such changes.

8. How to Contact Us

8.1 If you have any questions or concerns regarding this Policy, would like to obtain additional information, or would like to exercise your rights, please contact us at the following email address: cristina@zomolaw.ca.