Privacy policy

1. Who is responsible for your data

Immigration Voyages Sarl, immigration and travel consultancy, Carrefour BM, Makepe, Douala, Cameroon · NIU P039618292658N.
We are the data controller within the meaning of Cameroonian Law No. 2024/017 of 23 December 2024 on the protection of personal data, and of the General Data Protection Regulation (GDPR) for people located in the European Union.
Contact for any question or request: contact@immigration-voyages.com or (+237) 621 100 723.

We have appointed neither a data protection officer nor a representative in the European Union (Articles 27 and 37 GDPR): our services are aimed first at Cameroon, and the processing of data of people located in the Union remains occasional. For any GDPR question, write to the address above: the controller answers you in person.

2. What we collect, why, and on what basis

Each situation below says three things: what we take, what we do with it, and what allows us to — the legal basis, within the meaning of Article 6 GDPR: your request or a contract between us (Art. 6(1)(b)), your consent (Art. 6(1)(a)), a legal obligation (Art. 6(1)(c)), or our legitimate interest in running and protecting the site (Art. 6(1)(f)).

Fields marked with a star are necessary: without them we cannot call you back, open your access or build your file. The others are optional, and leaving them empty costs you nothing.

If you fill in the profile evaluation form

• Your first name, your age, your WhatsApp number and, if you give it, your e-mail — to call you back within two working hours.
• Your situation: marital status, children, spouse and their qualifications or tests, family in Canada.
• Your background: qualifications and credential assessments, language tests and results by band, work experience.
• Your past applications: a visa application already filed, its outcome and, if refused, the reason you give us. It is the most useful piece of the form, and one of the most sensitive: it serves only to prepare your file.

On receipt, an automatic reading works out your eligibility points and spots your strengths and obstacles to prepare the adviser's call. It rules nobody out: it is a memo for the human who calls you back, never a decision. Within the meaning of the GDPR, this reading is profiling (Article 4(4)): you may object to it by writing to us, and an adviser will then read your request without it. Basis: your request — pre-contractual steps (Art. 6(1)(b)).

If you ask for a quote, a call-back from a calculator, or write to us

Your name or first name, your phone number, your e-mail, the score you had just obtained, your message — only to answer you. A message sent on WhatsApp is kept in our WhatsApp conversation, at Meta, under their rules. Basis: your request (Art. 6(1)(b)).

If you create a TCF Prep account

• Your e-mail address — to identify you and give you access to your topics.
• Your password — encrypted. We never see it and cannot read it.
• Your results and progress — scores, answers, history, to show them back to you.
• Your written answers — to mark them and return them with comments.
• Your speaking recordings — so you can listen back, and for human marking if you asked for it.
• A device identifier — to limit account sharing to two devices. It is not an advertising cookie and tells us nothing about your browsing.

Basis: the contract between us — the free trial, then the access you bought (Art. 6(1)(b)).

If you use the IELTS Prep simulator

It is the same account as TCF Prep, with a separate access. We add:

• Your Listening and Reading results — score out of 40, indicative band, NCLC equivalence and paper duration, to show them back to you and follow your progress from one device to another.
• A device identifier — separate from the TCF Prep one, with the same two-device limit.

What we do not take of our own accord: your written answers and your speaking recordings stay on your device. They disappear if you clear your browser data — that is the trade-off of this choice, and we would rather tell you.

Two actions send them out, and both come from you: asking for the AI marking of a piece of writing — the text then goes to the provider described in point 3, and we keep none of it; and the “Send to the trainer” button, which places the recordings you selected in our private space so the trainer can listen to them and mark you. Those are indeed held by us — in a space never publicly accessible — and deleted when your access ends. As long as you do not click, nothing leaves.

The audio recordings for the listening papers are stored in our private space at Supabase (see point 5) and served through temporary addresses: a file only opens from within the simulator, never from a guessed address.

If you buy a pack at the site's payment desk

• Your order: a reference, your e-mail, the phone number that pays, the product, the amount.
• Your payment: the operator (Orange Money or MTN Mobile Money), the transaction number you declare, and the amount actually received.

The payment happens in your Orange Money or MTN app: we see neither your PIN nor your balance, we only receive the confirmation. This data serves to open your access, reconcile payments and keep our accounts. Basis: the contract (Art. 6(1)(b)), then the legal obligation to keep accounting records (Art. 6(1)(c)).

If you become a supported client

To build your file, we hold the documents you entrust to us: civil status, passport number, qualifications, work experience, IRCC file numbers. We keep only digital copies: once your documents are scanned, the paper originals stay in your hands.

The firm may send you a personal link, valid for 60 days, to “Your file in IRCC format”. There you write what IRCC's forms ask for: your identity, ten years of addresses, activities and trips, your family (parents, brothers and sisters, including deceased), your spouse and children, your past applications — and you upload your documents: passports, birth certificates, identity cards, marriage certificate, identity photos, diplomas, certificates. They go into our private space; the reading of a document's first page, which checks that it is legible, happens in your browser, sending nothing. Your answers are saved as you go so you can come back later.

You write about other people there — your spouse, your parents, your brothers and sisters, your children. This information comes from you, not from them (what the GDPR calls indirect collection, Article 14): we use what concerns them only for your file, and we count on you to inform them. Basis: the support contract (Art. 6(1)(b)); for your relatives, our legitimate interest in building the file you entrust to us (Art. 6(1)(f)).

Some documents in an immigration file are sensitive within the meaning of Articles 9 and 10 GDPR: a police certificate, a medical examination, sometimes a belief or a membership that appears in a document. We process them only on your instructions, for your immigration application, and with your explicit consent (Art. 9(2)(a)) — which you may withdraw, knowing that the file can then no longer be filed as it is.

If you ask a question anonymously

In the Questions & answers section, you can post under an identifier (for example IV-4K7P2) instead of your name. That identifier is yours, it does not change, and you can use it as many times as you like.

What other visitors see: the identifier, the question and the answer. Never your name, never your e-mail address.

What the firm sees: the account that posted. We can therefore link an identifier to the person who received it. That is what lets us keep out fake profiles and scammers, and answer a particular situation seriously. We never reveal that link, neither publicly nor to another member.

If you would rather no link exist between you and your question, do not ask it here: write to us directly, or ask in person.

If you subscribe to the newsletter or the draw alerts

Your e-mail address, the date you ticked the box, and an unsubscribe token specific to each address. Nothing else. Basis: your consent (Art. 6(1)(a)), which you withdraw with one click.

If you use our free tools

The eligibility test, the score calculator, the document check-list, the reference-letter checker, the file consistency check, the PDF compressor and the procedure tracker compute everything in your browser. Nothing is sent or stored with us, unless you click a contact button yourself.

The letter checker reads your Word, PDF files and photos on your device; the compressor lightens your PDFs on your device: the document is never uploaded.

What you type is erased as soon as you refresh the page, and disappears anyway when you close the tab. Your answers follow you from one tool to the next — so you do not retype everything, but they do not survive a refresh. That is deliberate: on a shared phone or computer, nobody should find what the previous person typed. One exception: the evaluation form keeps a draft on your device so you can come back to it later; it is erased as soon as you send.

What the site records by itself

• Audience measurement: the page viewed, the channel you came through, the referring site if any, and a randomly drawn visit number that vanishes when you close the tab. No cookie, no IP address, no profile: it tells us which pages are useful, not who read them. Page views are also counted by Cloudflare Web Analytics, without cookie or profile — it gives us the country of origin of visits and the real display speed of the site.
• The error log: when you are signed in and a Prep screen breaks, we note your account, the page, the error message and the browser type — to repair before others hit the same failure. Erased after 30 days.
• The anti-bot check at sign-in, described in point 8.

Basis: our legitimate interest in running and protecting the site (Art. 6(1)(f)). You may object to this processing on grounds relating to your particular situation (Art. 21): write to us.

3. Automatic calculations and artificial intelligence

Our calculators (eligibility, CRS score, costs) run in your browser and give an estimate, never an official verdict. The automatic reading of the evaluation form helps the adviser who calls you back; it ranks and excludes nobody. No decision about you is made without a human: we make no decision based solely on automated processing that would produce legal effects concerning you or similarly significantly affect you (Article 22 GDPR).

When you ask for an automatic marking of your writing, the text you wrote and the task statement are sent to Anthropic (United States), the model provider, which produces the band and the comments. We say it clearly because many sites do not.

• Only the text of your piece leaves — neither your name nor your e-mail.
• It is neither published, nor resold, nor used to train models.
• We do not keep the piece: the marking appears on screen and leaves with you.
• You trigger the sending by clicking the AI marking. If you prefer, use only the model answer or the human marking: nothing leaves.

4. How long we keep your data

5. Who has access, and where your data goes

• The firm's administrators, and nobody else — plus the trainer, for the recordings you send them only. The site's other accounts (blog readers, students) see nothing but their own data.
• Our technical providers, who process the data on our behalf, under contract, and never use it for themselves:

Your data therefore leaves Cameroon. It is hosted in the European Union, where data protection is governed by the GDPR. For providers established in the United States, the transfer from the Union relies on the standard contractual clauses adopted by the European Commission or, where the provider is certified under it, on the EU–US Data Privacy Framework. Each is bound by a processing contract (Article 28) that forbids it from using your data for itself or passing it on. You may ask us for a copy of these safeguards. We transfer nothing else, to nobody else.

We never sell, rent or exchange any data for advertising or commercial purposes.

6. The newsletter and the draw alerts

Receiving our news — Express Entry draws, rule changes, advice — or an alert at each draw is a separate choice. The box is never ticked in advance, and we record the date you ticked it. Every mailing carries an unsubscribe link, and you can also write to us. Declining the newsletter or the alerts changes nothing to your access.

7. Your rights

At any time you can ask us:

• to see the data we hold about you, and to receive a copy (right of access, Art. 15);
• to correct it if it is wrong or incomplete (rectification, Art. 16);
• to delete it, including your account — you can also do it yourself, just below (erasure, Art. 17);
• to restrict its use while something is checked or disputed (restriction, Art. 18);
• to take it away in a machine-readable format (portability, Art. 20);
• to object to a use based on our legitimate interest, and to any commercial mailing (objection, Art. 21);
• to withdraw a consent — the newsletter, the alerts, the AI marking — without affecting what was done before (Art. 7(3));
• not to be subject to a fully automated decision (Art. 22) — which we do not make.

One address for all of this: contact@immigration-voyages.com. It is free of charge. We may ask you to prove your identity before answering — so as not to hand your data to someone else. We answer within one month; for a complex request that period may be extended by two months, and we would tell you (Art. 12(3)). Deletion is final: we will not be able to restore your answers or your history.

If you believe we have not respected your rights, you may complain to the personal data protection authority established by Cameroonian Law No. 2024/017 of 23 December 2024 and, if you are located in the European Union, to your country's authority (the CNIL in France).

8. Security

• The site is entirely on HTTPS.
• Passwords are encrypted; nobody at the firm can read yours.
• Your voice recordings and your documents are in a private space, never publicly accessible.
• Access to your data is denied by default and only opened to the team's accounts.
• The site is protected by a strict content policy: it runs no script from anywhere other than its own pages and the providers named above.

An anti-bot check at sign-in

To stop bots from trying passwords en masse or guessing which addresses have an account, every sign-in, sign-up and reset request goes through an anti-bot check by hCaptcha. It is discreet: in the vast majority of cases you see nothing, and a small check is only offered if a doubt remains. It uses no advertising cookie and serves only to tell a human from an automated program. For that, hCaptcha analyses technical signals from your browser (IP address, browser header, technical fingerprint) — the details are described in its privacy policy.

If an incident affected your data

No system is infallible. If a breach of your data occurred, we would notify the competent authority within the time the law sets (72 hours under the GDPR), and we would warn you without delay, telling you what happened and what to do.

9. What stays on your device

We use no advertising cookie and no tracker. What the site stores on your device, in your browser's storage:

• your answers to the free tools, for the life of the tab;
• the draft of the evaluation form, until you send it;
• the Prep device identifier, your display preferences, and the last e-mail you typed so you do not retype it;
• the pages already visited, so the site opens even without network if you installed it on your home screen.

Clearing your browser data erases all of this. hCaptcha may set its own technical cookies, described in its policy.

Why there is no cookie banner: the European rule (the ePrivacy Directive) only requires consent for cookies and trackers that are not strictly necessary for the service. We set none — no advertising, no cookie-based audience measurement. Should that ever change, the banner would appear before the first cookie, not after.

10. Minors

Our services are for adults. Information about children only reaches us within a parent's immigration file, and only for that file.

11. Changes

If this policy changes in an important way, we will say so on this page and tell you at your next sign-in. The update date is always shown below.