Effective: October 13, 2026 Last Updated: October 13, 2026
1. Who We Are
McKinsley-White is the professional collaboration of two Regulated Canadian Immigration Consultants:
Sean G. McKinsley, RCIC CICC College ID R529731 Founder, Canada Immigration and Visa Services Co-Counsel with Kimberly J. White
Kimberly J. White, RCIC CICC College ID R712483 Founder, Kimberly White Immigration Consultants Co-Counsel with Sean G. McKinsley
McKinsley-White is used as a professional brand through which Sean G. McKinsley and Kimberly J. White collaborate in providing Canadian immigration and citizenship consulting services.
Unless expressly stated in a client-specific agreement, the McKinsley-White name does not itself identify a separate incorporated entity.
2. Privacy Officer
The Privacy Officer for the McKinsley-White website and general privacy inquiries is:
Sean G. McKinsley, RCIC Privacy Officer McKinsley-White Calgary, Alberta, Canada Email: info@civs.ca
Questions, access requests, correction requests and privacy complaints may be directed to the Privacy Officer.
3. Our Privacy Commitments
We are committed to handling personal information responsibly, transparently and only for reasonable professional and business purposes.
Our privacy practices are intended to comply with applicable Canadian privacy requirements, including:
- Alberta’s Personal Information Protection Act (PIPA);
- the federal Personal Information Protection and Electronic Documents Act (PIPEDA) where it applies;
- applicable requirements governing electronic communications, including Canada’s Anti-Spam Legislation (CASL); and
- the professional confidentiality obligations applicable to Regulated Canadian Immigration Consultants.
Where more than one privacy requirement applies, we will comply with the applicable obligations governing the particular information or activity.
4. Professional Confidentiality
Information obtained from a client or former client in the course of a professional relationship is subject to the confidentiality obligations applicable to Regulated Canadian Immigration Consultants.
Client information is not disclosed except where:
- the client has authorized the disclosure;
- disclosure is required or authorized by law;
- disclosure is required by a court, tribunal or other body with lawful authority;
- disclosure is required by the College of Immigration and Citizenship Consultants in the lawful exercise of its regulatory authority;
- disclosure is reasonably necessary to an authorized person assisting in the delivery of professional services;
- disclosure is otherwise permitted by the professional rules governing the RCIC; or
- another lawful exception applies.
Only the information reasonably necessary for the permitted purpose will be disclosed.
5. Personal Information We May Collect
Depending on how an individual interacts with us, we may collect information such as:
Contact and Identification Information
- name;
- email address;
- telephone number;
- city, province/state or country;
- preferred method of contact; and
- other information voluntarily provided in an inquiry.
Appointment Information
When a consultation is booked, we may collect:
- name;
- email address;
- telephone number;
- appointment date and time;
- selected practitioner;
- time zone;
- basic reason for requesting the consultation; and
- information required for the applicable Consultation Agreement.
Professional-Service Information
If an individual becomes a client, additional information may be required to assess or represent the client’s immigration or citizenship matter.
Depending on the matter, this may include sensitive personal information concerning immigration history, identity, family, education, employment, travel, finances, legal history and other information necessary for professional services.
Sensitive client evidence should be provided only through an approved client process and not through a general public website inquiry form unless specifically requested through a secure authorized channel.
Transaction Information
Where a payment is made through a third-party payment processor, we may receive transaction information such as:
- name;
- amount paid;
- payment date;
- transaction identifier;
- payment status; and
- limited billing information.
We do not intend to collect or store full payment-card numbers on the McKinsley-White WordPress website.
Payment-card information is handled by the applicable payment processor.
Website and Technical Information
Our website and service providers may automatically collect limited technical information such as:
- Internet Protocol address;
- browser and device type;
- operating system;
- referring page;
- pages visited;
- date and time of access;
- general geographic information derived from an IP address; and
- security and diagnostic information.
Cookies or similar technologies may also be used as described below.
6. Why We Collect and Use Personal Information
We may collect, use and disclose personal information for reasonable purposes including:
- responding to inquiries;
- arranging and administering consultations;
- entering into Consultation Agreements or Retainer / Service Agreements;
- determining whether we are able to provide professional services;
- conducting appropriate conflict and professional-responsibility checks;
- providing immigration and citizenship consulting services;
- communicating with clients and prospective clients;
- maintaining professional and business records;
- processing payments;
- issuing invoices and receipts;
- administering appointments;
- complying with professional, regulatory, tax, accounting and legal obligations;
- protecting against fraud, abuse and security threats;
- maintaining and improving website functionality;
- investigating technical or privacy incidents;
- establishing, exercising or defending legal rights;
- responding to lawful regulatory or government requirements; and
- sending marketing communications where permitted by law.
We will not collect, use or disclose personal information for a purpose that a reasonable person would consider inappropriate in the circumstances.
7. Consent
Where consent is required, we will seek consent appropriate to the nature and sensitivity of the information and the purpose for which it is being handled.
Consent may be express or implied where permitted by law.
Providing personal information voluntarily for an identified purpose may constitute consent for reasonable uses necessary to fulfill that purpose.
Individuals may withdraw or modify consent, subject to legal, professional, regulatory and contractual restrictions and reasonable notice.
Withdrawal of consent may affect our ability to provide a service where the information is reasonably necessary for that service.
8. Limiting Collection
We seek to collect only the personal information reasonably necessary for identified purposes.
The public website should not be used to transmit passports, immigration application packages, medical information, financial evidence, police records or other highly sensitive client documentation unless an authorized secure process has specifically been provided for that purpose.
9. Bookings and Payments
Consultation scheduling may be provided through Google Calendar or related Google appointment-scheduling services.
Payments may be processed through Stripe or another approved payment processor.
When an individual uses those services, personal information is also handled by the relevant third-party provider in accordance with its own terms and privacy practices.
McKinsley-White does not require the WordPress website itself to store full credit- or debit-card numbers.
10. Service Providers
We may use service providers to perform functions on our behalf, including:
- website hosting and infrastructure;
- email and productivity services;
- appointment scheduling;
- payment processing;
- electronic signatures;
- accounting and bookkeeping;
- secure document or file management;
- IT support and cybersecurity;
- analytics, where enabled; and
- other administrative or professional support services.
Service providers are given access only to information reasonably necessary for the services they perform and are expected to handle that information in accordance with applicable contractual and legal requirements.
Professional client information remains subject to the confidentiality requirements applicable to the RCIC responsible for the matter.
11. Processing Outside Canada
Some technology and payment service providers used by McKinsley-White may process, store or permit access to personal information outside Canada.
In particular, information handled through certain Google and Stripe services may be processed or accessible in the United States as part of the provider’s service infrastructure.
Where personal information is transferred to or processed in another country, it may be subject to the laws of that jurisdiction and may be accessible to courts, law-enforcement agencies, national-security authorities or other governmental authorities in accordance with local law.
We remain responsible for personal information under our control and use contractual, administrative and technical measures appropriate to the circumstances when engaging service providers.
Information about our practices concerning service providers outside Canada may be requested from the Privacy Officer at info@civs.ca.
If the countries used by our active providers materially change, this policy will be updated as appropriate.
12. Disclosure of Personal Information
We do not sell personal information.
Personal information may be disclosed where reasonably necessary to:
- Sean G. McKinsley or Kimberly J. White in connection with a jointly handled matter;
- authorized employees, contractors or professional assistants;
- translators, interpreters or other professionals engaged as necessary;
- service providers supporting our operations;
- government departments or immigration authorities where authorized in connection with a client’s matter;
- the College of Immigration and Citizenship Consultants where lawfully required;
- courts, tribunals, law-enforcement authorities or other bodies where disclosure is legally required or authorized;
- insurers, professional advisers or legal counsel where reasonably necessary; or
- another person where the individual has provided consent.
We limit disclosures to the information reasonably necessary for the applicable purpose.
13. Cookies and Similar Technologies
The website may use cookies and similar technologies that are necessary for:
- basic website operation;
- security;
- session management;
- appointment functionality;
- user preferences; and
- technical diagnostics.
If optional analytics, advertising or other non-essential cookies are introduced, appropriate notice and choice mechanisms should be implemented before those technologies are activated where required.
Users may also control cookies through their browser settings, although disabling certain cookies may affect website functionality.
14. Marketing Communications
We may send commercial electronic messages only where permitted by applicable Canadian law.
Where consent is required, we will obtain the appropriate consent.
Commercial electronic messages sent by us will include required identification information and an unsubscribe mechanism where applicable.
An unsubscribe request will be processed in accordance with applicable legal requirements.
Unsubscribing from marketing communications does not prevent us from sending non-marketing communications that are necessary to administer an existing consultation, retainer, transaction or client matter.
15. Accuracy
We make reasonable efforts to ensure that personal information used to make a decision affecting an individual is accurate and sufficiently complete for the purpose for which it is used.
Individuals may request correction of inaccurate or incomplete personal information.
16. Retention and Destruction
Personal information is retained only for as long as reasonably necessary for the purposes for which it was collected and for applicable legal, professional, regulatory, tax, accounting, insurance and business requirements.
Professional client files may require longer retention because of regulatory, evidentiary and professional obligations.
When personal information is no longer reasonably required, we will take reasonable steps to securely destroy it, delete it or render it anonymous, subject to any continuing legal or professional obligation requiring retention.
17. Security Safeguards
We use reasonable administrative, technical and physical safeguards appropriate to the sensitivity of the information.
Measures may include:
- access controls;
- password protection;
- multi-factor authentication where available;
- encrypted connections;
- role-based access;
- secure configuration of systems;
- backups;
- malware and security controls;
- confidentiality obligations;
- restricted access to client information; and
- procedures for responding to suspected privacy and security incidents.
No Internet transmission or electronic storage system can be guaranteed to be completely secure.
18. Privacy Breaches
If we become aware of a loss of, unauthorized access to, or unauthorized disclosure of personal information, we will assess the incident and take reasonable steps to contain and investigate it.
We will notify the appropriate privacy regulator and affected individuals where notification is required by applicable law.
We will also take reasonable remedial measures to reduce the risk of further harm.
19. Access to Personal Information
Subject to applicable exceptions, individuals may request:
- confirmation of whether we hold personal information about them;
- access to their personal information;
- information about how their personal information has been used or disclosed; and
- correction of inaccurate or incomplete personal information.
Requests should be made in writing to:
Sean G. McKinsley, Privacy Officer Email: info@civs.ca
We may need to verify identity before responding to a request.
Requests will be handled within applicable statutory timelines.
Access may be limited where a legal exception applies, including where disclosure would reveal another person’s personal information, confidential information that cannot lawfully be disclosed, privileged information or information otherwise protected from disclosure by law.
20. Withdrawal of Consent
An individual may request to withdraw consent for future collection, use or disclosure of personal information, subject to legal, contractual, regulatory or professional restrictions.
We will explain any material consequences where they may not be obvious.
Certain information may need to continue to be retained or used despite withdrawal of consent where required or permitted by law or professional obligations.
21. Children and Dependants
Canadian immigration matters frequently involve children and other dependants.
Where personal information concerning a minor is required for an immigration or citizenship matter, it will be handled as part of the relevant professional engagement and in accordance with applicable law, professional obligations and appropriate authority from a parent, guardian or other authorized person where required.
The general website is not designed to solicit personal information directly from children for marketing purposes.
22. External Links
The website may contain links to government websites, the College of Immigration and Citizenship Consultants, publication retailers and other third-party resources.
Those external websites operate under their own privacy practices.
A link does not transfer responsibility for the privacy practices or security of an external website to McKinsley-White.
23. Privacy Questions and Complaints
Questions or complaints concerning our handling of personal information should first be directed to:
Sean G. McKinsley, RCIC Privacy Officer McKinsley-White Calgary, Alberta, Canada Email: info@civs.ca
We will investigate privacy concerns and respond appropriately.
Individuals may also have the right to contact the Office of the Information and Privacy Commissioner of Alberta or, where federal privacy legislation applies, the Office of the Privacy Commissioner of Canada.
24. Changes to This Policy
Privacy practices, technology providers and legal requirements may change.
We may amend this Privacy Policy from time to time.
The current version will be posted on the website together with its effective or last-updated date.
Where a change materially affects how previously collected personal information will be used or disclosed, additional notice or consent will be obtained where required.
25. Governing Principle
This Privacy Policy is intended to describe our general privacy practices.
It does not reduce any right or protection provided by applicable law, nor does it reduce the professional confidentiality obligations owed by an RCIC to a client or former client.
Where a mandatory legal or professional requirement provides greater protection than this policy, the mandatory requirement prevails.