GDPR & Your Data Rights — PrecisionVisa

1. Our GDPR Commitments

• We process personal data lawfully, fairly, and transparently (GDPR Article 5).
• We collect only the data needed to prepare and submit your visa application (data minimisation).
• Our servers and primary database are located within the European Union.
• We apply a documented lawful basis under GDPR Article 6 (and Article 9 for special category data) to every processing activity.
• We never sell your personal data to third parties.

2. Lawful Bases We Rely On

Depending on the activity, we process your data under one or more of the following:

• Contract (Art. 6(1)(b)): to prepare, lodge, and manage your visa application.
• Legal obligation (Art. 6(1)(c)): to meet immigration, tax, and accounting requirements.
• Legitimate interest (Art. 6(1)(f)): to prevent fraud and improve our service, balanced against your rights.
• Consent (Art. 6(1)(a)): for marketing communications and optional analytics cookies — you may withdraw consent at any time.
• Explicit consent (Art. 9(2)(a)): where visa documentation contains special category data (for example, health information).

3. Your Rights

Under GDPR Articles 12–22, you have the right to:

• Access — obtain a copy of the personal data we hold about you.
• Rectification — correct inaccurate or incomplete data.
• Erasure — request deletion of your data, subject to legal retention obligations.
• Restriction — limit how we process your data in certain circumstances.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interest or direct marketing.
• Withdraw consent — at any time, where processing is based on consent, without affecting prior lawful processing.
• Complain — lodge a complaint with your national Data Protection Authority.

We respond to all requests within one month, as required by GDPR.

4. How to Exercise Your Rights

Email us at hello@precisionvisa.com with the subject line "GDPR Request" and tell us which right you wish to exercise. We may need to verify your identity before acting on your request — this protects your data from unauthorised disclosure.

5. Data Breaches

If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and, where required, inform you directly without undue delay (GDPR Articles 33–34).

6. International Transfers

Where your application must be sent to authorities outside the EEA (for example, a consulate in your destination country), we rely on appropriate safeguards such as European Commission Standard Contractual Clauses, adequacy decisions, or your explicit consent for that specific transfer.

7. Contact

For any GDPR question or request:
Email: hello@precisionvisa.com
Postal address: 22 Hanover Street, Edinburgh, UK