Privacy Policy
Effective Date: 4/15/2026
Last Updated: 4/15/2026
Website: crsscoring.com
Operator: Lourenco Couto Costa
Contact: privacy@crsscoring.com
1. Who We Are and Who This Policy Applies To
CRS Scoring ("we," "us," or "our") operates crsscoring.com, a tool that helps individuals calculate their Comprehensive Ranking System (CRS) score for Canada's Express Entry immigration program. This Privacy Policy applies to all visitors and users of crsscoring.com, regardless of where you are located, including residents of Canada, the European Economic Area (EEA), the United Kingdom, the United States, and all other jurisdictions.
2. What Information We Collect
2.1 Information You Provide Directly
When you use our CRS score calculator or subscribe to our email list, we may collect:
- Email address — when you opt in to receive draw alerts or score updates
- CRS score — the calculated score produced by our tool
- Score breakdown data — the individual profile inputs used to generate your CRS score, which may include:
- Age
- Level of education (and Canadian equivalency)
- Official language test scores (IELTS, CELPIP, TEF Canada, or TCF Canada)
- Canadian work experience (years)
- Foreign work experience (years)
- Whether you have a valid Canadian job offer
- Whether you have a provincial nomination
- Spouse or common-law partner information (if applicable)
2.2 Information Collected Automatically
When you visit our website, we automatically collect:
- IP address and approximate geographic location
- Browser type and version
- Device type and operating system
- Pages visited and time spent on site
- Referring URL
- Cookie identifiers (see Section 9 for full cookie information)
2.3 Information We Do Not Collect
We do not collect your passport number, Social Insurance Number, date of birth, home address, or any government-issued identification numbers.
3. How We Use Your Information
We use your information for the following purposes:
| Purpose | Legal Basis (GDPR) | Legal Basis (CASL) |
|---|---|---|
| Delivering your CRS score calculation | Legitimate interest / Contract performance | Not applicable (no message sent) |
| Sending Express Entry draw alert emails | Consent | Express consent |
| Sending CRS score updates or immigration news | Consent | Express consent |
| Sharing your profile data with licensed immigration professionals (see Section 4) | Explicit consent | Express consent (obtained at signup) |
| Improving our calculator and website | Legitimate interest | Not applicable |
| Complying with legal obligations | Legal obligation | Legal obligation |
| Analytics and site performance | Legitimate interest / Consent (where required) | Not applicable |
4. Sharing Your Information With Third Parties — Including Lead Sharing
This section is important. Please read it carefully.
4.1 Lead Sharing With Immigration Professionals
If you have provided your explicit consent at the time of email signup (by checking the clearly labeled lead-sharing checkbox), we may share the following data with licensed immigration attorneys and Regulated Canadian Immigration Consultants (RCICs):
- Your email address
- Your CRS score
- Your score breakdown data (the profile inputs you entered)
Purpose: To connect you with qualified immigration professionals who may be able to improve your profile, provide legal advice, or assist with your Express Entry application.
Who receives your data: Only licensed professionals — specifically, attorneys licensed to practice immigration law in a Canadian province or territory, and/or RCICs registered and in good standing with the College of Immigration and Citizenship Consultants (CICC).
Your choice is real: This lead-sharing is entirely opt-in. You can use the CRS calculator and receive draw alert emails without ever consenting to lead sharing. If you did not check the lead-sharing consent box, your data is never sold or shared for this purpose.
You can withdraw consent at any time by emailing privacy@crsscoring.com or using the unsubscribe link in any email we send you.
4.2 Service Providers
We share your data with the following categories of service providers who assist us in operating our website:
- Database and hosting: Supabase (data may be stored on servers in the United States or other jurisdictions)
- Email delivery: [INSERT EMAIL PROVIDER — e.g., Resend, SendGrid, Mailchimp]
- Analytics: [INSERT ANALYTICS PROVIDER — e.g., Google Analytics, Plausible, PostHog]
- Payment processing (if applicable): [INSERT PAYMENT PROVIDER]
All service providers are bound by data processing agreements and are prohibited from using your data for their own purposes.
4.3 Legal Disclosures
We may disclose your information if required to do so by law, court order, or government authority, or if we believe disclosure is necessary to protect our rights, prevent fraud, or respond to an emergency involving public safety.
4.4 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you via email and/or a prominent notice on our website before your data becomes subject to a different privacy policy.
4.5 We Do Not Sell Data Without Consent
We do not sell, rent, or trade your personal information to any third party without your explicit, prior consent as described in Section 4.1 above.
5. Your Rights
5.1 Rights Under GDPR (EEA and UK Residents)
If you are located in the European Economic Area or the United Kingdom, you have the following rights:
- Right of Access: You may request a copy of all personal data we hold about you.
- Right to Rectification: You may ask us to correct inaccurate or incomplete data.
- Right to Erasure ("Right to Be Forgotten"): You may ask us to delete your personal data, subject to certain legal exceptions.
- Right to Restrict Processing: You may ask us to pause processing your data in certain circumstances.
- Right to Data Portability: You may request your data in a structured, machine-readable format.
- Right to Object: You may object to processing based on legitimate interests, including profiling.
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
- Right to Lodge a Complaint: You have the right to complain to your national data protection authority (e.g., the ICO in the UK, or the supervisory authority in your EU member state).
5.2 Rights Under Canadian Privacy Law (PIPEDA / Bill C-27)
Canadian residents have the right to:
- Access their personal information held by us
- Correct inaccurate personal information
- Withdraw consent at any time (subject to legal or contractual restrictions)
- Challenge our compliance with these privacy principles
5.3 Rights Under US State Privacy Laws
Residents of certain US states (including California under CCPA/CPRA, Virginia, Colorado, and others) may have additional rights, including the right to opt out of the sale of personal information and the right to know what data is collected. We honor these rights on request.
5.4 How to Exercise Your Rights
Submit requests to: privacy@crsscoring.com
We will respond to verified requests within 30 days (or 45 days for complex requests). We do not charge a fee for reasonable requests.
6. Data Retention
| Data Type | Retention Period |
|---|---|
| Email address (draw alerts only) | Until you unsubscribe or request deletion |
| Email address (lead sharing consent given) | Until you withdraw consent or request deletion |
| CRS score and profile data | Until you unsubscribe, withdraw consent, or request deletion |
| Anonymous analytics data | Up to 26 months |
| Server logs (IP address, etc.) | 90 days |
We do not retain your personal data longer than necessary for the purposes described in this policy.
7. Data Security
We implement reasonable and appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or alteration. These include:
- Encrypted data transmission (HTTPS/TLS)
- Secure, access-controlled database storage via Supabase
- Restricted employee access to personal data
- Regular review of data handling practices
No method of internet transmission is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
8. International Data Transfers
Our website and services are operated from Canada. If you are located in the EEA, UK, or another jurisdiction with data transfer restrictions, please note that your data may be transferred to and processed in Canada and/or the United States (where our service providers, including Supabase, operate). Where required by law, we ensure appropriate safeguards are in place for such transfers (such as Standard Contractual Clauses for EEA transfers).
9. Cookies and Tracking
9.1 What Are Cookies
Cookies are small text files stored on your device that help us operate the website and understand how it is used.
9.2 Types of Cookies We Use
| Cookie Type | Purpose | Consent Required |
|---|---|---|
| Strictly Necessary | Session management, security, form functionality | No — essential to site operation |
| Analytics/Performance | Understanding site usage (e.g., pages visited, traffic sources) | Yes — you will be asked |
| Marketing/Tracking | Retargeting ads, conversion tracking | Yes — you will be asked |
9.3 Your Cookie Choices
When you first visit our site, you will be presented with a cookie consent banner. You may accept all cookies, reject non-essential cookies, or customize your preferences. You can change your choices at any time via the "Cookie Preferences" link in our site footer.
You may also control cookies via your browser settings. Note that disabling certain cookies may affect site functionality.
10. Children's Privacy
Our website is intended for adults (18 years of age or older) who are considering immigration to Canada. We do not knowingly collect personal information from anyone under the age of 18. If you believe a minor has submitted personal information through our site, please contact us at privacy@crsscoring.com and we will delete it promptly.
11. Links to Third-Party Websites
Our website may contain links to third-party websites, including official Canadian government immigration resources (e.g., IRCC). We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by:
- Posting the updated policy on this page with a revised "Last Updated" date, and
- Sending an email notification to subscribers (for significant changes affecting how we use your data)
Your continued use of our website after changes are posted constitutes your acceptance of the updated policy.
13. Contact Us
For any privacy-related questions, requests, or complaints:
Email: privacy@crsscoring.com
Website: crsscoring.com
Operator: Lourenco Couto Costa
Mailing Address: 2909 Washington Rd, Unit 12-200, Parlin, NJ - 08859
If you are an EEA resident and are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.
This Privacy Policy was last reviewed by the site operator on 4/15/2026.