Effective 29 August 2026
Website visits
Hosting and security systems may process technical information needed to deliver and protect the website, such as an IP address, request time, requested page, browser information, and error records.
Guided-form answers and PDFs
Interview answers are used to prepare the selected form. Where a form service supports multilingual guidance, the original response should remain distinguishable from any translated or normalized value used for the official form. Completed PDFs are intended to be generated for the user to review and download rather than retained as a permanent YourLegalAid.ca copy unless the product expressly says otherwise.
Device drafts
Anonymous drafts are encrypted before being saved in the browser on that device. Clearing browser storage or using another device may make those drafts unavailable.
Signed-in cloud drafts
Where cross-device drafts are enabled, the service stores an encrypted answer payload, form and definition version, progress, revision number, and timestamps. Owner checks are applied to every request. Inactive cloud drafts are intended to expire after 90 days, and users can request immediate deletion through the product.
Contact information
Contact-form names, email addresses, organization names, and messages are encrypted before storage. The service also keeps the selected topic, product, submission time, status, and a one-way request fingerprint used to limit spam. Contact records expire after 180 days. They are visible through the protected administrator inbox. FormSubmit also processes each completed enquiry to deliver an email notification and may retain that delivery copy for up to 30 days.
Accounts, product access, and purchases
Google is the current sign-in provider. YourLegalAid.ca requires a Google account with a verified email address and stores the account and session information needed to keep users signed in and connect eligible cloud drafts and product access to the correct account. The service does not receive a user's Google password.
Signing in does not start a payment or subscription. Payment is only requested when a user chooses a paid product. The service stores the records needed for product entitlements, pilot access, orders, and eligible cross-device records. It does not store a reusable payment card number. A connected payment provider processes payment details under its own privacy terms.
External services
Links to Tribunals Ontario, Immigration, Refugees and Citizenship Canada, and other external sources are governed by those organizations' own privacy practices. YourLegalAid.ca does not control their websites.
Questions and changes
Material changes will be reflected on this page with a revised effective date. Use the Contact page to submit a privacy question.