Global Privacy Notice for Immigrationist LLC

Last Updated: 13 August 2025

This Privacy Notice explains how Imigrationist LLC Belgrade ("Immigrationist", "we," "us," or "our") collects, uses, shares, and protects your personal data when you visit or use our website immigrationist.io (the "Site") or engage our services.

We are committed to safeguarding your privacy in accordance with applicable data protection laws in the jurisdictions we serve, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 in the United Kingdom, the Digital Personal Data Protection Act, 2023 (DPDPA) in India, and the Personal Information Protection Law (PIPL) in China.

This notice is a global document. Depending on your country of residence, different rules may apply to you as detailed below. By using the Site or our services, you acknowledge that you have read and understood this Privacy Notice.

For accessibility formats (e.g., audio, large print, braille), contact us using the details below.

About Us

We are Immigrationist, a company registered in Serbia, with registration number 22100696. Our registered office is at Jurija Gagarina 231, Belgrade, Serbia. We provide immigration and relocation services, including visa applications and consultations.

Personal Data We Collect

We collect personal data to operate the Site and provide our services:

• Data You Provide: Name, email address, phone number, or other information submitted via forms or inquiries.
• Immigration-Related Data: Passport details, visa information, financial records, employment history, nationality, biometric data, or other documents if you engage our services. This may include "special category data" (under UK GDPR) or "sensitive personal information" (under PIPL and DPDPA).
• Usage Data: IP address, browser type, device information, pages visited, and time spent on the Site, collected automatically.
• Cookies: Data collected via cookies or similar technologies to enhance functionality and analyse usage.

How We Use Your Personal Data & Our Legal Basis

Our legal basis for processing your data varies by jurisdiction.

For Users in the United Kingdom (under UK GDPR)

We use your personal data for the following purposes and legal bases under UK GDPR:

• To Operate the Site: To process inquiries or provide information (based on our legitimate interests, Article 6(1)(f)).
• To Provide Services: To handle immigration-related requests (based on contractual necessity, Article 6(1)(b)).
• To Send Marketing: To share updates or promotions (based on your explicit consent, Article 6(1)(a)).
• To Improve the Site: To analyse usage to enhance functionality (based on our legitimate interests, Article 6(1)(f)).
• To Comply with Law: To meet legal obligations, such as record-keeping (based on legal obligation, Article 6(1)(c)).

For special category data (e.g., nationality, biometric data), we rely on your explicit consent (Article 9(2)(a)) or reasons of substantial public interest (Article 9(2)(g)). We will obtain your explicit consent through a clear, affirmative action (such as an unticked checkbox) that is separate from other terms.

For Users in India (under DPDPA)

As a "Data Fiduciary" under India's DPDPA, we process your personal data based on the following principles:

• Lawful Purpose with Consent: Our primary legal basis for processing your personal data is your "free, specific, informed, unconditional and unambiguous" consent, given through a clear affirmative action. Before seeking your consent, we will provide you with a clear notice detailing the personal data to be collected and the specific purpose of processing.
• Legitimate Uses: In limited circumstances, we may process data without consent for certain "legitimate uses" as defined under the DPDPA, such as for the performance of any function under Indian law or to comply with a court order. We do not rely on the broad "legitimate interests" basis available under UK GDPR for processing data from India.

For Users in China (under PIPL)

For users in China, we process your personal information based on the following principles under PIPL:

• Consent: Our primary legal basis for processing your personal information is your consent. We do not rely on "legitimate interests" as a basis for processing data from China.
• Separate Consent: We will obtain your separate, explicit consent for certain processing activities, including:
  • Processing "sensitive personal information" (e.g., biometric data, religious beliefs, medical health, financial accounts).
  • Sharing your personal information with third parties.
  • Transferring your personal information outside of China.

Sharing Your Personal Data

We may share your personal data with:

• Service Providers: Trusted vendors (e.g., IT or analytics providers) acting as data processors under compliant agreements.
• Immigration Authorities: UK Home Office, embassies, or other government bodies as required for your application.
• Legal Compliance: Regulators or law enforcement, if required by law.

We do not sell your personal data.

International Data Transfers

As a Serbian company, we transfer personal data internationally. The safeguards we use depend on the origin of the data.

• Data from the UK: For transfers from the UK to Serbia (a country without a UK adequacy decision), we use the UK's International Data Transfer Agreement (IDTA) or the UK Addendum to EU SCCs. Crucially, we also conduct a mandatory Transfer Risk Assessment (TRA) for each transfer to ensure the laws in Serbia do not undermine the protection of your data.
• Data from India: India's DPDPA permits data transfers to all countries by default, except for those restricted by the Indian Central Government on a "blacklist". We will monitor this list to ensure compliance and will not transfer data to any restricted country.
• Data from China: For transfers from China to Serbia, we will use a mechanism compliant with PIPL, such as executing the Standard Contract issued by the Cyberspace Administration of China (CAC). We will also obtain your separate consent before making the transfer.

Your Data Protection Rights

You have rights over your personal data, which may vary by location.

• Rights for UK Residents (UK GDPR): You have the right to access, rectify, erase, restrict, or object to the processing of your data, as well as the right to data portability and to withdraw consent.
• Rights for Indian Residents (DPDPA): You have the right to obtain information, seek correction and erasure, have grievances redressed, and nominate another person to exercise your rights in the event of your death or incapacity.
• Rights for Chinese Residents (PIPL): You have rights to access, correct, and delete your data, as well as to restrict or refuse processing and withdraw consent.

To exercise any of these rights, please email our Data Protection Officer at mv@immigrationist.io. We will respond within the legally required timeframe.

AI and Data Protection

We use Artificial Intelligence (AI) to assist with preparing visa applications. However, our process includes meaningful human review by a qualified immigration expert who assesses the AI-assisted output against current immigration rules before finalisation. This ensures we do not engage in solely automated decision-making that produces legal or similarly significant effects on you.

Data Security & Retention

We use appropriate technical and organisational measures, such as encryption and access controls, to protect your personal data. We keep personal data only as long as necessary: inquiry data for 12 months, and client immigration records for 6 years post-case completion for legal purposes, after which it is securely deleted.

Children's Data

We may process data of children (under 18) for family visa applications. We will obtain verifiable parental/guardian consent before processing. In line with India's DPDPA, we will not engage in any processing of children's data that is detrimental to their well-being, including tracking, behavioural monitoring, or targeted advertising.

Cookies and Tracking Technologies

Our Site uses cookies. For users in the UK and EU, we will not place any non-essential (e.g., analytics, marketing) cookies on your device without your clear, affirmative consent. You can manage your preferences through our cookie consent banner. For more details, please see our separate Cookie Policy.

Changes and Complaints

We may update this Privacy Notice. Please check the "Last Updated" date. If you are unhappy with our data practices, please contact us at info@immigrationist.io. You also have the right to lodge a complaint with your local data protection authority, such as the UK's Information Commissioner's Office (ICO).