Who we are

Our website address is htts://cnasiteupdates.wpengine.com 

Your privacy is important to us. It is CNA Immigration Pty Ltd’s policy to respect your privacy regarding any information we may collect from you across our website, https://cnaimmigration.com, and other sites we own and operate. You are free to refuse our request for your personal information, with the understanding that we may be unable to provide you with some of your desired services.

Your continued use of our website will be regarded as acceptance of our practices around privacy and personal information. If you have any questions about how we handle user data and personal information, feel free to contact us.

This website is controlled by CNA Immigration Pty Ltd. The Client Portal is controlled by CNA Immigration Pty Ltd and on their instructions the data is processed by Migration Manager Pty Ltd (as the Data Processor), which is located in Queensland, Australia. This overview is about the security and privacy that CNA Immigration provides as the processor of the data you enter into our Website and Client Portal.

What personal data we collect and why we collect this information

We only ask for personal information when we truly need it to provide a service to you. We collect it by fair and lawful means, with your knowledge and consent. We also let you know why we’re collecting it and how it will be used.

We only retain collected information for as long as necessary to provide you with your requested service. What data we store, we’ll protect within commercially acceptable means to prevent loss and theft, as well as unauthorised access, disclosure, copying, use or modification.

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

We may also collect information about the browsers and device you use to access our website. We collect this information through our use of Google Analytics. 

The Client Portal collects data and documents that you enter in to the various fields and pages. This data includes sensitive personal information that is entered by you for the purpose of being transferred to CNA Immigration Pty Ltd.


If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you have an account and you log in to this site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded content from other websites

Content on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Our website may link to external sites that are not operated by us. Please be aware that we have no control over the content and practices of these sites, and cannot accept responsibility or liability for their respective privacy policies.


We use data from analytics to measure and understand how our website is used.  We analyse data about your visits to our website to optimise our page design. We may also use data about the ads you interact with to help us understand the effectiveness of our marketing campaigns. We use a variety of tools to do this, including Google Analytics. 

How long we retain your data

If you submit your personal information to CNA Immigration Pty Ltd,  your enquiry and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

What rights you have over your data

If you are a client of CNA Immigration or have submitted your personal information to our company, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes. If you would like your data deleted please contact CNA Immigration Pty Ltd who are your Data Controllers.

Your data and personal information will be treated in accordance with the Migration Agents Code of Professional Conduct. 

How we protect your data

Redundant backups of encrypted data stored in the Client Portal are stored in multiple locations in Australia to prevent the remote possibility of data loss. These backups include geo-replication of the data to a separate Azure data centre located in Australia. All back up are deleted automatically after 90 days.

How and where is my personal data stored?

We encrypt the personal data and files that you enter into the Document Portal (and the Web Questionnaires) using the AES-256 standard, which is the same encryption standard used by banks to secure customer data. Encryption for storage is applied at the time the data and files are saved or submitted.

The Portal uses Azure for data storage using exclusively its data centres in Australia. Azure stores data over several large-scale data centres. According to Azure, they use military grade perimeter control berms, video surveillance, and professional security staff to keep their data centres physically secure. You can find more information about Azure’s security on their website.

How is my personal data transferred?

When you enter information into the Client Portal (including a web questionnaire) your data and files are sent between the Client Portal, the Client Portal servers and CNA Immigration Pty Ltd’s processing software over an encrypted and secure channel using 256-bit SSL (Secure Sockets Layer) encryption, the standard for secure Internet network connections.

Once your data is transmitted, your data is stored by CNA Immigration Pty Ltd and authorised staff at CNA Immigration Pty Ltd will be able to view the data you have provided via their Migration Manager desktop software.

Your information, including Personal Data, may be transferred to — and maintained on — computers and servers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from your jurisdiction. If you are located outside Australia and choose to provide information to us, please note that we transfer the data, including Personal Data, to Australia and process it there.

What data breach procedures we have in place

Redundant backups of encrypted data stored in the Client Portal are stored in multiple locations in Australia to prevent the remote possibility of data loss. These backups include geo-replication of the data to a separate Azure data centre located in Australia. All back up are deleted automatically after 90 days.

Disclosure of Data and Compliance with Laws and Law Enforcement

Other than stated above, unless required by law, we do not share your data with any third party other than CNA Immigration Pty Ltd. In compliance with the law of Australia, CNA Immigration Pty Ltd will cooperate with law enforcement agencies of Australia when it receives a valid legal request, which may require us to provide a copy of your encrypted data to those authorities. 

How do I delete my personal data?

If you would like your data deleted please contact CNA Immigration Pty Ltd who are your Data Controllers. Please contact us by email at: [email protected] 

Policy Changes

We may change this Policy at any time and from time to time. All updates and amendments are effective immediately upon notice, which we may give by any means, including, but not limited to, by posting a revised version of this Policy or other notice on the Website. We encourage you to review this Policy often to stay informed of changes that may affect you, as your continued use of the Website signifies your continuing consent to be bound by this Policy.


If you have any questions or comments please contact us by email at: [email protected]