Privacy Policy
Introduction
This Privacy Policy (the “Policy”) describes how we collect, use, store and protect your personal data when you use our Service (the software platform for managing visa and migration cases).
We process personal data in a transparent, lawful and secure manner, in line with applicable data protection law (including, where relevant, the GDPR and national legislation).
By using the Service, you confirm that you have read and understood this Policy.
Data controller
The data controller (the entity that determines the purposes and means of processing your personal data) is the operator of the Service (the “Operator”).
For questions about this Policy or your personal data, you can contact us at sea.math1@gmail.com.
Data we collect
We may collect and process the following categories of data:
- Account data: email address, name, password (stored in hashed form), and other details you provide when registering or updating your account.
- Case and application data: information you enter or upload in the Service about visa or migration cases (including names, dates, document references, notes). This may include data about applicants or other individuals that you have a legal basis to process.
- Technical and usage data: IP address, browser type, device information, log data, and how you use the Service (e.g. pages visited, actions performed), where necessary for operation, security or analytics.
- Communication data: messages and contact details when you get in touch with us for support or enquiries.
You are responsible for ensuring that you have a valid legal basis (e.g. consent or legitimate interest) for providing us with any personal data relating to other individuals (e.g. applicants).
Purposes and legal basis
We process your data for the following purposes and on the following legal bases:
- Provision of the Service: to create and manage your account, store your cases and documents, and provide the functionality you use — contract (performance of the agreement with you).
- Security and integrity: to protect the Service against abuse, fraud and technical failures — legitimate interest (ensuring security and availability).
- Support and communication: to respond to your requests and send important service-related messages — contract and, where applicable, legitimate interest.
- Legal and regulatory: to comply with applicable laws and defend our rights — legal obligation or legitimate interest.
Where we rely on legitimate interest, we have balanced our interests against your rights and only process data where necessary. You may have the right to object in certain cases (see “Your rights” below).
Who we share data with
We may share your data with:
- Service providers: hosting, infrastructure, email delivery and other technical providers that process data on our instructions and under appropriate agreements.
- Authorities: where required by law or to protect our rights.
We do not sell your personal data to third parties. We do not share your data with third parties for their own marketing purposes.
Retention
We retain your data only for as long as necessary for the purposes set out in this Policy.
- Account and case data: for the duration of your use of the Service and, after termination, for a limited period necessary for backups, disputes and legal obligations (typically up to a few years, unless a longer period is required by law).
- Logs and technical data: for a limited period (e.g. several months to one year) for security and troubleshooting.
- Support and communications: for as long as needed to resolve your request and for a reasonable period thereafter for record-keeping.
After the retention period, we delete or anonymise the data so that it can no longer identify you.
Your rights
Depending on applicable law, you may have the right to:
- Access: obtain confirmation as to whether we process your data and a copy of your data.
- Rectification: have inaccurate personal data corrected.
- Erasure: request deletion of your data in certain circumstances.
- Restriction: request that we limit processing in certain situations.
- Portability: receive your data in a structured, machine-readable format where processing is based on contract or consent.
- Object: object to processing based on legitimate interest, including profiling.
- Withdraw consent: where processing is based on consent, withdraw it at any time (without affecting the lawfulness of processing before withdrawal).
- Complain: lodge a complaint with a supervisory authority (e.g. in your country of residence or where the Operator is established).
To exercise these rights, contact us at sea.math1@gmail.com. We will respond within the time limits set by applicable law.
Changes to this policy
We may update this Policy from time to time. We will post the updated version on this page and, where required by law, we will notify you of significant changes.
Continued use of the Service after the updated Policy is published constitutes your acceptance of the changes. We encourage you to review this Policy periodically.
Contact
For any questions about this Privacy Policy or your personal data, please contact us at sea.math1@gmail.com.
For the terms governing use of the Service, see our Terms of Service.