Privacy

When you request a free fit call, we collect the information you type into the enquiry form:

• Your first and last name.
• Your email address.
• Your province or time zone, and your target application cycle.
• Your current stage and the service you are interested in.
• A free-text description of your biggest current challenge (limited to 1,000 characters).
• An optional relevant deadline and an optional note on how you heard about us.
• A record that you accepted this Privacy Policy, and the date and time of that acceptance.

To limit automated abuse, our server also stores a one-way cryptographic hash derived from your email address and network address. These hashes are used only to count recent submissions and cannot be reversed into the original values.

We do not ask for, and ask you not to send, government identification, dates of birth, health information, academic transcripts, payment card details, complete application files, or referee information. If you send such information anyway, we will delete it and ask you to resend without it.

During a coaching engagement, you may choose to share your own draft application content. That material is used only to coach you on your own work.

• To reply to your enquiry and arrange a fit call.
• To understand your stage and challenge well enough to say whether a service is likely to help.
• To deliver a coaching engagement you have asked for.
• To protect the enquiry form from spam and automated abuse.
• To keep records we may need for tax, accounting, or dispute-resolution purposes.

We do not sell personal information, and we do not use enquiry information for advertising or profiling.

We rely on your express consent, given by ticking the consent box before submitting the enquiry form, to collect and use the information described above for the purposes described above. Where we continue to hold records after an engagement ends, we do so to meet legal, accounting, and record-keeping obligations.

You may withdraw your consent at any time by emailing info@consulmd.ca. Withdrawing consent may mean we can no longer provide coaching to you. Withdrawal does not apply retroactively to information we are required to keep.

{{COUNSEL: confirm applicable statutes and the exact consent wording — federal private-sector privacy legislation and any substantially similar provincial legislation applicable to residents you serve. Confirm whether a designated privacy officer must be named and, if so, complete {{PRIVACY_OFFICER_CONTACT}}.}}

We use a small number of third-party providers to operate this website and communicate with you. Each has access only to what its function requires:

• A website hosting and application platform, which serves this site and runs the enquiry form.
• A managed database service, which stores enquiry records.
• A transactional email service, which sends your confirmation email and our replies.
• A video-meeting service used to hold fit calls and coaching sessions.
• {{COUNSEL/OPS: confirm this list, add any accounting, scheduling, or payment processor actually in use, and name each provider if disclosure by name is required.}}

We do not authorize these providers to use your information for their own marketing purposes.

Some of our service providers process or store information outside Canada, including in the United States. Where that is the case, your information may be accessible to foreign courts, law enforcement, and regulatory authorities under the laws of those jurisdictions.

{{OPS: confirm the storage region configured for the database and email provider, and state it here plainly. COUNSEL: confirm the cross-border transfer disclosure required for the provinces served.}}

Enquiry records are retained for {{RETENTION_PERIOD — currently configured as 24 months}} from the date of submission, after which they are scheduled for deletion. Spam-control hashes are short-lived and used only to count recent submissions.

You can ask us to delete your enquiry or coaching records at any time by emailing info@consulmd.ca from the address you used. We will confirm the request, delete what we are not required to keep, and tell you what remains and why.

Deletion is currently carried out on request by a person, not by an automated schedule. We do not claim automatic deletion, and we will not describe it as automatic until such a process is implemented and tested.

We take the following measures. They reduce risk; no service can promise that information is completely secure.

• Information sent through this website travels over an encrypted connection.
• Enquiry records are stored in a database that is not readable by the public, and access is restricted to accounts we control.
• Form submissions are validated and sanitized on the server, not only in the browser.
• Submission rates are limited, and application logs exclude the contents of form submissions.
• We minimize what we collect, which limits what could be exposed.

We hold no security certification or independent audit attestation, and we make no such claim. If we ever obtain one, we will name the standard and the auditor here.

{{COUNSEL: confirm the breach-notification commitment and reporting timeline to state here.}}

Subject to applicable law, you may ask us to:

• Confirm whether we hold information about you, and give you access to it.
• Correct information that is inaccurate or incomplete.
• Delete information we are not required to keep.
• Explain how your information has been used and to whom it has been disclosed.
• Withdraw your consent to further use.

Email info@consulmd.ca with your request. We reply to enquiries within five business days. We may need to verify that the request comes from you before acting on it.

If you are not satisfied with our response, you may contact the privacy regulator with jurisdiction over your province or the federal privacy commissioner. {{COUNSEL: confirm which regulators to name and whether contact details must be listed.}}

This site uses only the cookies and local storage needed for the site to function. We do not run advertising trackers, social-media pixels, cross-site profiling tools, or third-party analytics products such as Google Analytics.

Our hosting platform records privacy-aware, aggregate visit measurements so we can see how many people reach each page. These measurements are counted in aggregate: they do not build a profile of you, do not follow you to other websites, and are not used for advertising. We do not collect or store your full IP address for analytics. Where a network address is needed to limit spam on our enquiry form, it is converted to an irreversible SHA-256 hash on our server, kept only for the throttling window, and never linked to your enquiry.

{{OPS/COUNSEL: if any additional analytics tool is enabled later, name it here, describe what it records, state whether the data leaves Canada, and confirm whether a consent banner is required before it loads. Keep this section matched to the analytics settings that are actually enabled.}}

These services are intended for prospective medical-school applicants, who are ordinarily adults. This website is not directed at children.

If you are under the age of majority in your province, please do not submit the enquiry form without the involvement of a parent or legal guardian. If we learn that we have collected information from a minor without appropriate consent, we will delete it. {{COUNSEL: confirm the age threshold and consent mechanism to state here.}}

This policy takes effect on the effective date shown at the top of this page. When we make a material change, we will update that date and add an entry to the change log below. If a change materially affects how we use information you have already given us, we will contact you at the email address you provided.

Questions about this policy: info@consulmd.ca. See also our Terms of service.