At Visago.pk, we take your privacy seriously. This Privacy Policy describes how we collect, use, disclose, and safeguard personal data when you use our visa consultancy and related travel services, including our website, client portal, and communications channels.

1) Scope & Who We Are

Visago.pk is a private visa consultancy and travel assistance firm. We are not a government department and are not affiliated with any embassy or consulate. We act as an independent service provider to help you prepare and submit applications. When we process your data, we do so as a “data controller” for our own services. Where we process data strictly on behalf of a partner (e.g., a payment gateway), we act as a “data processor.”

2) Key Definitions

• Personal Data: Information that identifies or can reasonably identify an individual.
• Processing: Any operation performed on personal data (collection, storage, use, disclosure, etc.).
• Controller / Processor: Entity that determines purposes/means of processing vs. processes on behalf of another entity.

3) Data We Collect

• Identity & Contact: Name, DOB, gender, nationality, passport number, IDs, email, phone, address.
• Travel & Application: Destination, itinerary, travel dates, visa category/subcategory, applicant type, supporting documents (photos, bank statements, employment letters, etc.).
• Account & Usage: Login data, preferences, support tickets, device info, IP address, browser/OS, logs, cookies.
• Payment & Billing: Transaction references, invoices/challans, amounts, status (processed via secure third-party gateways; we do not store full card details).
• Sensitive Data (limited, where required): Some jurisdictions/embassies require sensitive documents (e.g., financial, family status). We process such data strictly for the visa purpose and only when you provide it or authorize us.

4) Sources of Data

• Directly from you: Forms, uploads, email/WhatsApp, calls.
• Automatically: Cookies, analytics, security logs.
• Third parties (as applicable): Payment processors, courier partners, travel partners, KYC/verification vendors, public records.

5) Purposes & Legal Bases

6) Disclosures to Third Parties

We do not sell your personal data. We may share it with:

• Embassies/Consulates & Government Authorities: To submit and process applications.
• Payment Processors & Financial Institutions: To process authorized payments and prevent fraud.
• Operational Vendors: Couriers, printing, IT/cloud hosting, analytics, customer support tools.
• Professional Advisors & Legal Authorities: Where required by law or to protect rights and safety.

7) Security Practices

• Transport-layer security (TLS/SSL) and encryption at rest for selected systems.
• Restricted, role-based access; least-privilege principles.
• Multi-factor authentication for admin access where feasible.
• Network and application monitoring, logging, and backups.
• Employee confidentiality obligations and periodic training.

8) Retention Schedule

We may retain data longer if required by law or to establish/defend legal claims. When no longer needed, data is securely deleted or anonymized.

9) Cookies & Tracking

• Strictly necessary: Authentication, security, session continuity.
• Performance/Analytics: Usage metrics to improve features.
• Preferences: Language, layout, saved filters.
• Marketing (optional): Only with your consent where required.

You may manage cookies in your browser. Non-essential cookies are used with consent where required by law.

10) International Transfers

Given the nature of visa processing, your data may be transferred to or accessed from other countries. Where applicable (e.g., EEA/UK), we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) or other lawful mechanisms.

11) Your Rights & Choices

• Access, correction, and deletion (subject to legal obligations).
• Restriction or objection to certain processing.
• Portability of data you provided to us (where applicable).
• Marketing preferences: opt-in/opt-out anytime.

To exercise rights, email privacy@visago.pk or support@visago.pk with your name, contact, and request details. We may ask for verification. We strive to respond within 30 days (or the timeframe required by your jurisdiction).

12) Children’s Data

Our services are intended for adults. We do not knowingly collect data from minors without appropriate consent. If you believe a minor has provided personal data, contact us to remove it.

13) Changes to This Policy

We may update this Privacy Policy to reflect operational, legal, or regulatory changes. Material changes will be highlighted on this page with a revised “Last Updated” date.

14) Contact & DPO

15) Region-Specific Notices

EEA/UK: Where EU/UK data protection laws apply, you may have additional rights under the GDPR/UK GDPR (e.g., to lodge a complaint with your supervisory authority). California: Where the CCPA/CPRA applies, you may have rights to access, delete, or opt-out of “sharing” for cross-context behavioral advertising. We honor such requests in accordance with applicable law. For all regions, we will apply local law where it provides stronger protections.