Privacy
How this website handles personal data.
Published: 19 September 2026. Last updated: 8 October 2026
This website sets no cookies and runs no analytics. What follows says exactly what it does collect, and who to write to.
Who we are
This website is operated by IMIGRACIONIST DOO NOVI SAD, a company registered in the Republic of Serbia, company number 22100696, tax number (PIB) 114989334, registered office Dr Ilije Đuričića 2A, sprat 1, 21000 Novi Sad, Serbia. For personal data processed through this website we are the data controller. You can reach us at info@immigrationist.io.
What this notice covers
Only this website. The software at app.immigrationist.io is not covered by it: there your firm is the controller and we act as your processor, handling personal data only on your documented instructions under your contract and the data processing agreement we supply before you upload anything. Our security and data protection page sets out that position and what we can send your COLP or DPO.
What this website collects
This website sets no cookies and runs no analytics, tracking pixels, advertising tags, A/B testing tools or chat widgets. It has no accounts, no sign-up and no forms. The personal data that exists is what you choose to send us, and the technical records our hosting provider keeps of each request — your IP address, browser type, the page requested and the time of the request — which are used to keep the site running and to investigate abuse. Our hosting provider gives us aggregated visitor statistics that do not identify individuals. We do not build a profile of you and we do not sell data.
Requests that reach other services
The typeface used on this site is served from our own domain, so loading a page does not contact Google or any other font service. Our booking links open Calendly in a new tab on its own site, where its own cookies and privacy notices apply; it is not embedded in our pages, so nothing loads from it while you are on our domain.
Why we process it
We process website data for the operation and security of the site, and to answer enquiries about the product. Our basis is our legitimate interest in running a business and in responding to people who contact us, balanced against your rights — the data is minimal and the purpose is narrow. Where consent is the right basis, we will ask for it and tell you how to withdraw it.
Who we share it with
We have signed a data processing agreement with every processor in the table below. They act only on our instructions, may not use the data for their own purposes (including training AI models), and must protect it with appropriate technical and organisational measures. Where we process data for a law firm or adviser, these providers are our sub-processors, and the firm's data processing agreement with us lists them.
Payments
Payments are processed by Lemon Squeezy, under its own terms. We never receive or store full card details.
Lemon Squeezy shares with us the details we need to add credits to the right account and keep our records: the buyer's name, email address, firm name, country, VAT number if given, and the order details. We use them to perform our contract with the firm and to meet our accounting and tax obligations, and we keep them for as long as those obligations require.
Lemon Squeezy shares with us the details we need to add credits to the right account and keep our records: the buyer's name, email address, firm name, country, VAT number if given, and the order details. We use them to perform our contract with the firm and to meet our accounting and tax obligations, and we keep them for as long as those obligations require.
Where it is processed, and transfers
This website is hosted on Lovable and served through a content delivery network with points of presence worldwide. Our DNS is provided by DreamHost. The website itself holds no client matter data: it is a marketing site with no accounts and no forms. Data belonging to our customers' matters is processed by the following providers, on separate infrastructure:
Transfers to the United Kingdom and the EEA rely on adequacy. Transfers to the United States rely on the standard contractual clauses in our data processing agreements with those providers, supported by a transfer risk assessment. You can ask us for a copy of the relevant safeguards at info@immigrationist.io.
| Provider | Purpose | Where the data is processed |
|---|---|---|
| Vercel Inc. (USA) | Application hosting | United Kingdom (London) |
| Neon (USA) | Database | United Kingdom (London) |
| Modal Labs Inc. (USA) | Data processing | United Kingdom; network routing via Ireland |
| Mindee SAS (France) | Reading text from uploaded documents | Mainly United States |
| OpenAI, Anthropic, Google (USA) | AI models | United States |
| Clerk Inc. (USA) | Sign-in and invitation emails | United States |
| Google (Workspace) | Email support and service emails | EU and United States |
How long we keep it
We keep enquiry emails for 24 months from our last contact with you, then delete them. If you become a customer, the correspondence moves into your customer record and is kept under that record's retention period. Our hosting provider keeps web server access logs, which include IP addresses, for up to 30 days. We do not retain separate copies. Nothing on this website is retained for marketing analysis.
Your rights
Under UK and EU data protection law you can ask to access personal data we hold about you, to have it corrected or deleted, to restrict or object to our processing of it, and to receive data you gave us under a contract or consent in a usable format. You can withdraw a consent at any time. Write to us at the address above and we will handle the request without charge unless it is manifestly unfounded or excessive.
Complaining
If you are unhappy with how we have handled your data, you can complain to a supervisory authority: the Information Commissioner's Office in the UK, the data protection authority of the EU or EEA state where you live, or the Commissioner for Information of Public Importance and Personal Data Protection in the Republic of Serbia.
Security
We use encryption in transit and at rest, limit access to named personnel who need it, and keep staff under written confidentiality obligations. This website itself carries no client or matter data.
Children
This website is not directed at children under 18 and we do not knowingly collect their personal data.
UK representative
IMIGRACIONIST DOO NOVI SAD has appointed Broadway International Law Limited, 2nd Floor, 229 The Broadway, London SW19 1SD, as its UK representative under Article 27 of the UK GDPR. You may contact the representative about our processing of personal data at m.vesnic@broadwaylaw.co.uk.
People we contact about Immigrationist
If you work at a law firm or an immigration advice practice, we may contact you about Immigrationist. We obtain your name, work email address and your firm's details from public professional registers — the Law Society's Find a Solicitor directory and the Immigration Advice Authority's register — and from your firm's own website.
We use them to send you a small number of emails about the product. Our basis is our legitimate interest in telling regulated practitioners about a tool relevant to their work. We send no more than four emails, and we stop as soon as you ask.
You can object at any time by replying "no" to any of our emails or by writing to info@immigrationist.io. If you do, we keep only your name, email address and firm on a suppression list, so that we do not contact you again. Otherwise we keep our record of contact for 24 months after the last email and then delete it.
We use them to send you a small number of emails about the product. Our basis is our legitimate interest in telling regulated practitioners about a tool relevant to their work. We send no more than four emails, and we stop as soon as you ask.
You can object at any time by replying "no" to any of our emails or by writing to info@immigrationist.io. If you do, we keep only your name, email address and firm on a suppression list, so that we do not contact you again. Otherwise we keep our record of contact for 24 months after the last email and then delete it.
Changes to this notice
We may update this notice as our processing changes. The current version is always the one published at this address, and the date below shows when it last changed.
