Privacy policy

Who this policy covers

This policy describes how Carpenter & Carleton handles information submitted through Carpenter & Carleton’s website. GSK Productions Inc. builds and manages this website and processes its payments on Carpenter & Carleton’s behalf (see “Payments” below); Carpenter & Carleton remains the practice you are engaging for immigration guidance and the party responsible for your immigration file.

Information we collect

Our public forms collect only what is needed to respond to you:

• Contact and enquiry forms: name, email, phone number (if provided), your message, and a separate marketing-consent checkbox (unticked by default and never bundled with consent to be contacted about your enquiry).
• Booking: your name, email, phone (if provided), preferred consultation type, chosen date/time and timezone, meeting format (video, phone or WhatsApp), and any note you add.
• Payment (when applicable):handled entirely by Stripe — see “Payments” below.
• Automated spam-prevention signals: basic technical data (such as request timing and, if Cloudflare Turnstile is active, a Turnstile verification token) used only to filter automated submissions, not to profile visitors.

Do not send passports, bank statements, immigration portal passwords or other sensitive documents through this form.

What we do with it

Form and booking submissions trigger an email response to you and an internal notification to our team — that is their only current purpose. If you have separately ticked the marketing-consent checkbox, we may also send you occasional updates; you can withdraw that consent at any time by contacting us.

Cookies and tracking

This site does not currently run any analytics or advertising tracking, and sets no tracking cookies of its own. The only browser storage it uses is a small local flag that remembers whether you closed the WhatsApp chat prompt during your visit — it stays on your device only, is never sent to us, and carries no personal information.

If Cloudflare Turnstile spam protection is active on a form, Cloudflare may set a cookie on its own domain solely to verify you are not a bot. If we later enable consent-managed analytics (e.g. Google Analytics or PostHog), this section will be updated first and a consent option will be shown before any tracking cookie is set.

Who we share information with

We use a small number of service providers to operate this site, each only for the purpose named:

• Stripe— processes consultation fee payments (see “Payments” below).
• Resend — delivers transactional emails (booking confirmations, form receipts, internal notifications).
• Cal.com — schedules and manages consultation bookings, where configured.

We do not sell personal information, and we do not share it with any other third party except where required by law.

Data retention

This site does not currently maintain its own client database — form and booking submissions trigger email notifications and are not otherwise stored by the site beyond what is technically necessary to prevent duplicate charges and abuse (cleared automatically, not a permanent record). Information contained in resulting emails is retained according to our normal business email-retention practice.

Your rights

Consistent with Canadian privacy law (PIPEDA), you may ask us what personal information we hold about you, request a correction, or withdraw marketing consent at any time. Contact us at info@carpentercarleton.ca for any of these requests.

Children

This site is not directed at children, and we do not knowingly collect information from children.