Privacy Policy

1. Data Controller

The data controller responsible for your personal data is OraVisa, a visa consultancy registered and operating in the Emirate of Dubai, United Arab Emirates. Our registered office is located at Aspin Commercial Tower, Level 31, Sheikh Zayed Road, Dubai, United Arab Emirates.

For any questions regarding your personal data or this privacy policy, you may contact us at:

• Email: info@oravisa.com
• Phone: +971 58 579 6564
• Post: Aspin Commercial Tower, Level 31, Sheikh Zayed Road, Dubai, United Arab Emirates

2. Personal Data We Collect

We collect personal data that is necessary to provide our visa consultancy services. The types of data we collect depend on the services you request and how you interact with us. This may include the following categories:

2.1 Identity and Contact Information

• Full name (as it appears on your passport)
• Date of birth, gender, and nationality
• Passport number, issue date, expiry date, and place of issue
• UAE residence visa details and Emirates ID number
• Email address, phone number, and WhatsApp contact number
• Residential and business address in the UAE

2.2 Travel and Application Data

• Travel itinerary, destination country, and purpose of travel
• Previous visa application history and travel history
• Photographs for visa applications
• Employment details, salary certificates, and bank statements (where required by embassies)
• Hotel bookings, flight itineraries, and travel insurance documents
• Cover letters or invitation letters submitted as part of applications

2.3 Financial Data

• Bank statements submitted for visa applications (as required by consulates)
• Payment records related to our service fees

We do not store credit or debit card numbers. All payment processing is handled by secure third-party payment providers.

2.4 Technical and Usage Data

• IP address, browser type and version, and device type
• Pages visited on our website, referral source, and time spent on pages
• Cookies and similar tracking technologies (see our Cookie Policy for details)

3. How We Use Your Personal Data

We process your personal data for the following purposes:

• Service delivery: To prepare, review, and submit visa applications on your behalf to embassies, consulates, and visa application centres.
• Communication: To respond to your enquiries, provide application updates, send appointment confirmations, and deliver your visa documents.
• Document management: To organise and store application documents for the duration of the application process and any required retention period.
• Payment processing: To issue invoices, process payments, and maintain financial records as required by UAE law.
• Legal compliance: To comply with our obligations under UAE federal law, including record-keeping and reporting obligations.
• Service improvement: To analyse website usage patterns, improve our services, and enhance the user experience on our website.
• Marketing (with consent): To send promotional emails about our services, seasonal offers, and travel-related content. You may opt out at any time.

4. Legal Basis for Processing

In accordance with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021, as amended, referred to as the "UAE PDPL"), we process your personal data on the following legal bases:

• Performance of a contract: Processing is necessary to fulfil our obligations under the service agreement you enter into with us when you engage our visa consultancy services.
• Consent: Where we rely on your consent (for example, for marketing communications), you have the right to withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Legal obligation: Processing is necessary to comply with applicable UAE laws, regulations, and government directives.
• Legitimate interest: Processing is necessary for our legitimate business interests, such as improving our services, preventing fraud, and ensuring the security of our systems, provided such interests do not override your rights and freedoms.

5. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable UAE law. Our general retention practices are as follows:

• Active application data: Retained for the duration of the visa application process and up to 12 months after the application is completed, to assist with any follow-up or reapplication requests.
• Client records: Retained for up to 5 years from the date of the last service provided, in accordance with UAE commercial record-keeping requirements.
• Financial records: Retained for the period required by UAE tax and commercial laws.
• Marketing data: Retained until you withdraw consent or request deletion, whichever occurs first.
• Website analytics data: Retained in anonymised or aggregated form for up to 26 months.

When personal data is no longer required, we securely delete or anonymise it so that it can no longer be associated with you.

6. Sharing Your Data with Third Parties

We do not sell, rent, or trade your personal data. We may share your data with the following categories of third parties, solely to the extent necessary to provide our services:

• Embassies and consulates: Your application data is submitted directly to the relevant embassy, consulate, or visa application centre (such as VFS Global, TLS Contact, or BLS International) as required by the visa application process.
• Payment processors: Secure third-party payment gateways process your payments. We do not have access to your full card details.
• Technology providers: We use third-party tools for website hosting, analytics (Google Analytics), communication (WhatsApp Business), and email services. These providers process data on our behalf under appropriate data processing agreements.
• Professional advisers: We may share data with our legal, accounting, or insurance advisers where necessary for our business operations.
• Government authorities: We may disclose data where required by law, court order, or governmental regulation.

7. International Data Transfers

By the nature of our services, your personal data may be transferred to countries outside the United Arab Emirates when we submit visa applications on your behalf to foreign embassies and consulates. Additionally, some of the third-party service providers we use (such as Google and Microsoft) may store data on servers located outside the UAE.

Where your data is transferred outside the UAE, we take reasonable steps to ensure that it is treated securely and in accordance with this privacy policy and the requirements of the UAE PDPL. This includes using providers who maintain appropriate security certifications and data processing agreements. By engaging our services, you acknowledge and consent to these necessary international transfers of your data.

8. Your Rights Under UAE Data Protection Law

Under the UAE PDPL, you have the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may request that we correct any inaccurate or incomplete personal data.
• Right to erasure: You may request that we delete your personal data, subject to our legal retention obligations.
• Right to restrict processing: You may request that we limit how we use your data in certain circumstances.
• Right to data portability: You may request that we provide your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You may object to the processing of your data for direct marketing purposes.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time.

To exercise any of these rights, please contact us at info@oravisa.com. We will respond to your request within 30 days. We may request proof of identity before processing your request to protect your data from unauthorised access.

If you believe that we have not adequately addressed your data protection concerns, you have the right to lodge a complaint with the UAE Data Office or the relevant regulatory authority.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using SSL/TLS protocols
• Secure storage of physical and digital documents
• Access controls limiting data access to authorised personnel only
• Regular review of our data protection practices and security procedures
• Secure deletion of data that is no longer required

While we take every reasonable precaution to protect your data, no method of transmission or storage is completely secure. We cannot guarantee absolute security but are committed to promptly addressing any data breach in accordance with applicable UAE law.

10. Children's Privacy

Our website and services are not directed at children under the age of 18. We do not knowingly collect personal data from children without the consent of a parent or legal guardian. Where a visa application is submitted for a minor, the application is completed and authorised by the minor's parent or legal guardian, and the personal data of the minor is processed on that basis.

In accordance with UAE Federal Decree-Law No. 26 of 2025 on Child Digital Safety (effective 1 January 2026), we confirm that our digital services are designed for adult users and are not intended for use by minors without parental supervision. We do not knowingly target, profile, or serve advertising to individuals under 18 years of age.

If we become aware that we have collected personal data from a child under 18 without valid parental consent, we will take reasonable steps to delete that data promptly. If you believe that a child's data has been provided to us without appropriate consent, please contact us at info@oravisa.com.

11. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyse site usage. For detailed information about the cookies we use, their purposes, and how to manage your cookie preferences, please refer to our Cookie Policy.

12. Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you by email or through a prominent notice on our website.

We encourage you to review this privacy policy periodically to stay informed about how we are protecting your data. Your continued use of our website and services after any changes to this policy constitutes your acceptance of the updated terms.

13. Contact Us

If you have any questions, concerns, or requests regarding this privacy policy or how we handle your personal data, please contact us using the details below:

• OraVisa
• Aspin Commercial Tower, Level 31, Sheikh Zayed Road
• Dubai, United Arab Emirates
• Email: info@oravisa.com
• Phone: +971 58 579 6564
• Website: oravisa.com