Privacy & Cookie Policy

Last updated: September 28, 2026

1. Who we are

NIMARIA Immigration Solutions Ltd. ("NIMARIA," "we," "us," or "our") is the data controller for the personal data described in this policy. We are a boutique immigration and investment migration consultancy based in Canada, advising individuals and families on citizenship and residency by investment, business immigration, and related real estate matters.

Registered office: 1601–1239 West Georgia St., Vancouver, BC, V6E 4R8, Canada. Contact: [email protected] · +1 604 945 7456.

We have not appointed a Data Protection Officer, as one is not required for a firm of our size and processing activities. Requests relating to your personal data should be sent to the email address above.

2. What personal data we collect

We only collect personal data that you choose to give us, through one of the following:

• Free preliminary assessment (/assessment): full name, email, phone (optional), country of citizenship (and any second citizenship), country of residence, occupation, education level, years of professional experience, a banded range of investable assets, primary source of funds, your timeline, and which programmes you’re interested in.
• Contact form (/contact): full name, email, phone (optional), your reason for writing, and your message.
• Event registration (/events): full name, email, phone (optional), and the number of tickets requested.
• Booking a meeting (any “Book a meeting” button, or /meeting): if you open our Calendly booking calendar, Calendly collects the details needed to schedule the call (typically name and email) directly — see Cookies and Who we share it with below.
• Direct contact: anything you send us by email, phone, or WhatsApp.

We do not knowingly collect financial account numbers, government ID numbers, or other documents through this website — the assessment form deliberately asks for broad ranges (e.g. an asset band) rather than exact figures or account details. Any such documents are only ever exchanged later, directly with your adviser, once a client relationship begins.

Our web server and hosting provider also automatically log standard technical data for every visitor — IP address, browser type, device type, pages visited, and referring page — as is normal for any website.

Website analytics, only if you accept: if you click “Accept analytics” in our cookie banner, Google Analytics records how you use the site — pages viewed, how you arrived, approximate location (country/city, derived from your IP address, which Google Analytics does not store), device and browser type, and actions such as clicking a phone, email or WhatsApp link, opening the booking calendar, completing a booking (that a meeting was booked — not its details), or successfully sending one of our forms. It never receives what you type into a form. If you reject or ignore the banner, Google Analytics is not loaded at all. We do not use advertising or social-media tracking.

3. Why we process it, and our legal basis

• To respond to your enquiry or assessment request — legal basis: your consent (given by submitting the form), and, where you are asking us to take steps before entering into an engagement, our legitimate interest and the taking of pre-contractual steps at your request.
• To schedule and conduct a consultation you requested — legal basis: performance of pre-contractual steps taken at your request.
• To register you for an event — legal basis: consent and, for logistics like catering or capacity, our legitimate interest in running the event properly.
• To maintain basic security and functioning of this website (server logs) — legal basis: our legitimate interest in operating a secure, reliable website.
• To understand how our website is used and improve it (Google Analytics) — legal basis: your consent, given by clicking “Accept analytics” and withdrawable at any time through “Cookie settings” in the footer of every page.
• To comply with legal, regulatory, or professional obligations once a client relationship exists (for example under applicable anti-money-laundering or immigration-consultant regulatory rules) — legal basis: legal obligation.

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects on you. We do not sell personal data.

4. Who we share it with

We do not sell or rent your personal data. We share it only with the following categories of recipients, and only as needed to run this website and our practice:

• Calendly, Inc. — if you choose to open and use our booking calendar (a “Book a meeting” button, or /meeting), the scheduling details you enter are processed by Calendly as an independent controller under its own privacy policy. We deliberately do not load this widget until you click to do so.
• Google Analytics (Google LLC) — only if you accept analytics cookies, the usage data described in section 2 is processed by Google on our behalf, under Google’s data processing terms and privacy policy. Google Analytics’ advertising features are switched off.
• Cloudflare Turnstile (Cloudflare, Inc.) — the security check shown on our forms, which protects them from spam and automated abuse. It processes your IP address and technical browser signals to tell people from bots, sets no tracking cookies, and is governed by Cloudflare’s Turnstile privacy addendum. Legal basis: our legitimate interest in keeping the forms secure.
• Our website hosting and email service providers, strictly to store this site and to receive and reply to messages sent through it.
• Regulators, courts, or authorities, only where we are legally required to disclose information.
• Named professional partners listed on our Partners & affiliations page, but only once you become a client and only to the extent necessary to advance your specific file, and only with your knowledge.

WhatsApp links on this site (operated by Meta) simply open a chat — we don’t share any data with Meta by placing that link on our site. Anything you subsequently send us over WhatsApp is governed by WhatsApp’s own privacy policy as well as this one.

5. International data transfers

We are based in Canada, and our servers and the third parties listed above may process data outside your home country, including in Canada and the United States. Canada’s federal private-sector privacy law (PIPEDA) has been recognised by the European Commission as providing an adequate level of protection for commercial data transfers. Where we or our processors transfer personal data from the EU/EEA or UK to a country without an adequacy decision, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses, as required by GDPR Chapter V.

6. How long we keep it

If you submit a form but do not go on to become a client, we keep your information only for as long as reasonably needed to respond to you and follow up on your enquiry — typically no more than 24 months, after which it is deleted or anonymised. If you become a client, your file is retained for the period required by our professional and regulatory obligations (which can be several years after an engagement ends) and in line with our engagement agreement with you. You can ask us to delete your information sooner, subject to section 8 below.

7. Cookies

A cookie is a small file a website can ask your browser to store. Here is every cookie-setting mechanism currently on this site:

• Essential: a single, non-tracking local storage flag (nimariaConsent) that remembers whether you accepted or rejected analytics, so we don’t ask again on every page. No personal data is stored in it.
• Google Analytics (optional, only if you accept): the _ga and _ga_<ID> cookies, which distinguish visitors and sessions and expire after up to 2 years. They are never set unless you click “Accept analytics”, and are deleted if you later choose “Reject”.
• Calendly (third-party, only if you choose it): our booking calendar is never loaded automatically. Only when you click a “Book a meeting” button, or “Load the booking calendar” on /meeting, does Calendly’s calendar load and set its own cookies, described in its own privacy policy.

Our typefaces are served from this website itself, so no third-party font service is contacted when you visit.

We do not use advertising or social-media tracking cookies. You can change your analytics choice at any time — it takes effect immediately:

Change cookie preferences

8. Your rights

If you are located in the EU/EEA or UK, the GDPR (or UK GDPR) gives you the right to:

• Access the personal data we hold about you;
• Rectify inaccurate or incomplete data;
• Erase your data ("right to be forgotten"), subject to our legal and regulatory retention obligations;
• Restrict or object to our processing of your data in certain circumstances;
• Port your data to another provider in a structured, commonly used format;
• Withdraw consent at any time, where consent is our basis for processing, without affecting processing already carried out;
• Lodge a complaint with your local supervisory authority (for example, the data protection authority in your EU/EEA member state, or the UK’s Information Commissioner’s Office), or with Canada’s Office of the Privacy Commissioner, if you believe we have mishandled your data.

Wherever you are located, you can ask us at any time to tell you what information we hold about you, correct it, or delete it, by writing to [email protected]. We will respond within one month of a verified request.

9. Security

We use reasonable technical and organisational measures to protect the personal data you share with us against loss, misuse, and unauthorised access. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Children’s privacy

This site and our services are directed at adults considering investment migration and are not intended for, or knowingly directed at, children under 16. We do not knowingly collect personal data from children.

11. Changes to this policy

We may update this policy from time to time, for example if we add a new form, tool, or third-party service. We will update the "Last updated" date above when we do. Material changes will be reflected here; we encourage you to check this page periodically.

12. Contact us

Questions about this policy, or requests relating to your personal data, can be sent to [email protected], by phone at +1 604 945 7456, or by post to NIMARIA Immigration Solutions Ltd., 1601–1239 West Georgia St., Vancouver, BC, V6E 4R8, Canada. You can also use our contact form.