SuperVisaDirect, operated by Super Visa Direct Insurance Services, collects the minimum personal information needed to quote, arrange and service insurance. This policy explains what we collect, why, who receives it, where it is accessed and your rights. It follows the ten fair information principles of PIPEDA, Canada’s federal private-sector privacy law. Effective 17 October 2026.
What personal information do we collect?
We collect your contact details, the parent’s identity and date of birth, trip details and, for plans that cover pre-existing conditions, the parent’s answers to the insurer’s health questionnaire. Health answers are sensitive and are handled with additional care. We do not collect information we do not need to quote or issue a policy.
| Category | Examples | Sensitivity |
|---|---|---|
| Host contact | Name, email, phone, Canadian address | Standard |
| Parent identity | Name as on passport, date of birth, country of residence | Standard |
| Trip details | Arrival date, province of stay, coverage amount, deductible | Standard |
| Health questionnaire | Conditions, medications, treatment dates, as asked by the insurer | Sensitive |
| Payment | None. Payment occurs on the insurer’s checkout; we never see card numbers | Not collected |
| Service history | Emails, call notes, start-date changes, claims correspondence | Standard |
| Website use | Pages visited, device type, approximate region, via analytics cookies | Low |
Why do we collect it, and on what basis?
We collect personal information to produce a quote, submit an application to the insurer you choose, service the policy, support claims and meet our legal obligations as a licensed agency. We identify these purposes at the point of collection, as PIPEDA’s “identifying purposes” principle requires.
Specific purposes:
- Quoting: date of birth, arrival date and province set the premium.
- Issuing: the insurer requires identity, trip and, where applicable, health details to issue the policy.
- Servicing: start-date changes, renewals and refund requests.
- Claims support: helping you assemble documents and follow up with the insurer.
- Compliance: record-keeping required by FSRA and our insurer contracts.
- Site improvement: aggregated analytics, never tied to a named person.
How do you give consent?
By entering details into the quote tool, you consent to our collecting and using them to quote. By proceeding to an insurer’s application, you consent to our sending that information to the insurer and to the insurer’s own privacy policy. We ask for express consent before collecting health questionnaire answers.
You may withdraw consent at any time by emailing [email protected]. Withdrawal may mean we can no longer service your policy, and it does not affect information already sent to an insurer or required to be retained by law.
Who receives your information?
The insurer whose plan you choose receives everything needed to issue the policy. It becomes the data controller for the policy under its own privacy policy. Our managing general agency receives life insurance applications. No one else receives identifiable information, except as the law requires.
| Recipient | What they receive | Why |
|---|---|---|
| The issuing insurer | Identity, trip, health answers, host contact | To issue, service and pay claims on the policy |
| Our MGA (life products only) | Life insurance applications | To process life and critical illness applications |
| Cloud and email providers | Encrypted files and messages | Hosting our systems |
| Regulators, courts | What the law compels | Legal obligation |
We never sell personal information and never pass it to marketers or lead-generation companies.
Is your information accessed outside Canada?
Yes, in two ways. Our cloud providers host data in Canada and the United States. Our licensed advisor works remotely, at times from outside Canada, so your file may be accessed from abroad. Information accessed outside Canada may be subject to the laws of that country.
Safeguards we apply:
- Each advisor signs a confidentiality agreement that applies wherever they work.
- Access requires multi-factor authentication and is logged.
- Files are encrypted in transit and at rest; no file is stored on a personal device.
- Health questionnaire answers are entered directly into the insurer’s system where possible.
How do we protect it?
We protect personal information with safeguards appropriate to its sensitivity, as PIPEDA’s safeguards principle requires. Health answers get the highest level. Only a licensed advisor who needs a file can open it. We review access rights quarterly and remove access immediately when anyone with access leaves.
How long do we keep it?
We keep quote data that does not lead to a purchase for 12 months, then delete it. Policy files are kept for 7 years after the policy ends, to meet FSRA record-keeping expectations and to support late claims or disputes. Call recordings are kept for 2 years. Analytics data is aggregated and holds no names.
What are your rights?
You can ask for access to your personal information, ask us to correct it, withdraw consent and challenge our compliance. We respond to access requests within 30 days after verifying your identity. If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner of Canada.
To exercise any right, email [email protected] or write to the privacy officer at the address below.
What happens if there is a breach?
If a breach of security safeguards creates a real risk of significant harm to you, we will notify you as soon as feasible and report it to the Privacy Commissioner, as PIPEDA’s breach rules require. We keep a record of every breach for two years, whether or not it met that threshold.
What cookies do we use?
We use strictly necessary cookies to run the quote tool and analytics cookies to measure which pages are used. Analytics data is aggregated and not used to identify you. We do not use advertising or profiling cookies at launch. If we add any, we will update this policy and ask for consent first.
You can block cookies in your browser. The quote tool may not function with necessary cookies blocked.
Which residents do we serve?
SuperVisaDirect serves Ontario residents, with other provinces planned for 2028. We do not serve Quebec residents and do not collect information from Quebec residents for quoting. If you are in Quebec, please do not enter personal details.
Who is the privacy officer?
The privacy officer is accountable for this policy and for our compliance with PIPEDA. Contact: [email protected], or Privacy Officer, Super Visa Direct Insurance Services, at the Ontario mailing address shown in the footer. We work online and by phone; there is no walk-in office.
We may update this policy. The review date at the top shows the last change. Material changes will be announced on this page before they take effect. See also our terms of use.
Questions people ask
Who sees my parent's health questionnaire answers?
Only the insurer whose plan you choose, and the licensed advisor who assists with the application. Health answers are sensitive personal information. They are entered on the insurer's own application form, stored in the insurer's system, and kept in our file only as needed to service the policy and support a claim.
Is my data stored outside Canada?
Our systems are hosted by Canadian and US cloud providers, and our licensed advisor works remotely, including at times from outside Canada. Data accessed from abroad remains subject to Canadian law and our contractual safeguards, but may also be subject to the laws of the country where it is accessed. You may contact our privacy officer with questions.
Do you sell or share my information with marketers?
No. We never sell personal information and never share it with third-party marketers or lead-generation companies. We use analytics cookies to understand how the site is used. We do not use advertising or profiling cookies at launch; if that changes, this policy will be updated and consent requested.
How do I get a copy of what you hold about me?
Email [email protected]. We verify your identity, then provide a copy of your personal information within 30 days, as PIPEDA requires. You can also ask us to correct inaccurate information or withdraw consent, subject to the legal and contractual limits explained on this page.