What does this policy cover?
This policy describes how we (referred to as "we" or "us") will make use of your data when you interact with us through our websites and all of the webpages, subdomains and subparts of the platform (our "Platform").
It also describes your data protection rights, including the right to object to some of the processing that we carry out. More information about your rights, and how to exercise them, is set out in the “What rights do I have?” below. If you are under the age of 18 you are not permitted to create a profile on our Platform. If an adult creates a profile on your behalf, it is the adult who enters into this policy and agrees to its terms.
Summary of how we use your data
What information do we collect?
We collect and process personal data about you when you interact with our Platform or if you interact with us in person.
Collecting information for visa applications or e-Visa requests
When you apply for a visa or request an e-Visa, we may collect additional information from you to determine your identity, your eligibility to apply for and get a visa or e-Visa. The supply of your information is voluntary, but if you do not supply mandatory information required in any visa application or e-Visa request, they may not be accepted. Information requested in connection with your visa application or e-Visa request will be set out at the relevant section of the Platform and may include (by way of example only):
What information do we receive from third parties?
Sometimes, we receive information about you from third parties.
How do we use this information, and what is the legal basis for this use?
We process this personal data for the following purposes:
Withdrawing consent or otherwise objecting to direct marketing
Where we rely on your consent, you will always be able to withdraw that consent, although we may have other legal grounds for processing your data for other purposes, such as those set out above. In some cases, we are able to send you direct marketing without your consent, where we rely on our legitimate interests. You have the right to opt-out of direct marketing. You can do this by contacting us at email@example.com
Who will we share this data with, where and when?
We will keep your data generally confidential but we may share your data in the following instances:
What rights do I have?
You have the right to ask us for a copy of your personal data; to correct, delete or restrict (stop any active) processing of your personal data; and to obtain the personal data you provide to us for a contract or with your consent in a structured, machine-readable format. In some cases where you have requested that your personal data is deleted, we may still have to keep this data on our Platform as the removal of such data will impact other data. In such cases, you can request that such data is anonymized.
In addition, you can object to the processing of your personal data in some circumstances in particular, where we don’t have to process the data to meet a contractual or other legal requirement, or where we are using the data for direct marketing.
These rights may be limited, for example, if fulfilling your request would reveal personal data about another person, or if you ask us to delete information which we are required by law to keep or where we have compelling legitimate interests in keeping.
To exercise any of these rights, you can get in touch with us using the details set out below.
The provision of certain information is mandatory for the provision of certain services: if the relevant data is not provided, then we might not be able to provide you with certain services. All other provision of your information is optional. However, note that failure to provide the optional data means that we will not be able to send you communications about the goods and services that may be of interest to you, nor personalise the way that our content is presented to you.
How do I get in touch with you?
We hope that we can satisfy queries you may have about the way we process your data. If you have any concerns about how we process your data, or would like to opt-out of direct marketing, you can get in touch by emailing us at firstname.lastname@example.org
How long will you retain my data?
In the event that you wish to deactivate your account, a red flag appears on our database and, whilst people cannot use the personal information, it stays on the system for a period of one year for administration purposes before being deleted. We will only keep your content for as long as is reasonably required for the purpose(s) for which it was submitted.
Where we process personal data for marketing purposes or with your consent, we process the data until you ask us to stop and for a reasonable period after this (to allow us to implement your requests). We also keep a record of the fact that you have asked us not to send you direct marketing or to process your data indefinitely so that we can respect your request in future.
In respect of children's data, parents and guardians give us their consent to collect and use the data of minors by providing their details.