Privacy policy

What we collect

• Identifying information — name, date of birth, nationality, passport number.
• Contact details — email, mobile, postal address.
• Travel details — itinerary, accommodation, sponsor details.
• Documents — passport scans, photos, financial proof, supporting letters.
• Payment information — handled by our PCI-compliant payment partners; we never store full card numbers.
• Technical data — IP address, device type, usage analytics, and recordings of how you use our website (see Session recording below).

Why we collect it

• To prepare and submit your entry application to the destination authority.
• To process payments and issue receipts.
• To communicate with you about your application status.
• To meet legal record-keeping obligations.
• To improve the service and to help you if you get stuck on our website.

Who we share with

• The destination authority — required to process your application.
• Your assigned reviewer at govr.me.
• Sub-processors — our PCI-compliant payment partners (card and crypto processing), Cloudflare (storage and CDN), Resend (email), Microsoft (Clarity session recording).
• Where local partners are involved (Concierge tier), the licensed local agency you select.

We never sell your data, and we never share it with marketers or unrelated third parties.

Session recording

We use Microsoft Clarity to record how visitors use our website: pages viewed, clicks, scrolling and mouse movement. We use these recordings to fix problems and to help customers who get stuck. Clarity does not record what you type into form fields, and we hide passport numbers, dates of birth and document previews from it. Authorised staff can view the recordings for an application while helping with it. Clarity keeps recordings for up to 30 days, unless we save one to fix a problem. See Microsoft's privacy statement.

How long we keep it

Documents (passport scans, photos, supporting evidence) are deleted 90 days after your entry is delivered, or earlier on request. Application records and payment ledgers are retained for 7 years to meet financial / tax record-keeping obligations.

Security

PCI-DSS Level 1 for payment data. TLS 1.3 in transit. AES-256 for documents at rest. Role-based access controls and least-privilege admin access. Independent security review annually.

Your rights (GDPR / similar)

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion ("right to be forgotten") subject to legal retention obligations.
• Restrict or object to processing.
• Receive your data in a portable format.
• Withdraw consent at any time.

To exercise any of these, write to contact@govr.me with "Privacy request" in the subject line.

Cookies

See our cookie policy for the full list of cookies we set and how to manage them.

Contact

govr.me — Data Protection Officer
contact@govr.me