1. Who we are
The data controller is [ADMIN CONFIGURATION REQUIRED — legal entity name], [ADMIN CONFIGURATION REQUIRED — registered address].
2. Information we collect
Account information (name, email, phone, city), booking information, payment metadata, communications, reviews, support requests, uploaded documents and application-related information you choose to provide.
3. Visa application information
Passport, travel, employment, education, family, financial and immigration-history information may be provided for a specific consultation. We collect only what is needed for the service you request, explain who can access it, and delete it in line with our retention schedule.
4. Automatically collected information
Device and usage data, approximate location where you allow it, and cookie data described in the Cookie Policy. Analytics events are limited to product usage such as searches, city selection, profile views and booking steps; sensitive application data is not sent to analytics tools.
5. Why we use it
To operate your account, run discovery and search, enable booking and payment, connect you with the consultant you choose, provide support, prevent fraud, meet legal obligations, and — only with your separate consent — send marketing.
6. Who we share it with
The consultant you select (only the information needed for that request), our payment provider, hosting, email, SMS, analytics and maps providers, and legal or regulatory authorities where required by law. We do not sell personal information.
7. Document access
Uploaded documents are stored in private storage. You can access your own documents; an authorised consultant can access documents shared with them for a service you requested; administrators have limited role-based access for operational and legal reasons. Documents are never publicly accessible.
8. Retention
We keep information only as long as needed for the purpose it was collected, plus any period required for accounting, fraud prevention, dispute resolution or law. See the Data Processing & Retention Notice.
9. Your rights
From Dashboard → Privacy & Legal you can access, correct, export or delete your data, review the policy versions you accepted, and withdraw marketing consent.
10. Children
The platform is not intended for children. Minimum age and consent requirements: [ADMIN CONFIGURATION REQUIRED].
11. Contact and grievance
Privacy contact: [ADMIN CONFIGURATION REQUIRED]. Grievance contact: [ADMIN CONFIGURATION REQUIRED].
Must be reviewed by qualified privacy counsel before production launch.