Privacy Policy

01 What we collect

We collect information when you contact us, fill in a form on our website, or purchase a service. Depending on the service, this may include:

Personal identification

• Full legal name, date of birth, nationality
• Email address and phone number
• Residential and correspondence address
• Passport copies and national ID documents
• UAE Emirates ID (where applicable and in your possession)
• Photographs (passport-sized, where required by government process)

Supporting documents for visa and business applications

• Educational certificates and professional qualifications
• Employment letters, salary certificates, or trade license copies
• Bank statements and financial records (where required by the relevant authority)
• Medical fitness records (submitted to government health centres as part of the application process)
• Family documents (birth certificates, marriage certificates) for dependent or family visa applications

Payment information

• Payment is processed through our authorised payment processor. We do not store full card numbers on our systems. We retain only the transaction reference, amount, and status necessary for your service record and for VAT compliance.

Technical data

• IP address, browser type, pages visited, and session duration — collected automatically via analytics tools. See section 6 (Cookies) for detail.

We collect only what is necessary for the service you have requested or for legal compliance. We will tell you clearly when a field is required versus optional.

02 How we use it

We use the information we collect for the following purposes:

• Service delivery. To process and submit your visa, residency, or business license application to the relevant UAE government authority, and to manage your case through to completion.
• Communication. To send you updates on your application status, respond to your enquiries, and provide post-service support. We will contact you by the channel you used to reach us (WhatsApp, email, or phone), unless you request otherwise.
• UAE government submission requirements. Certain authorities require specific personal data fields to be included in online submissions. We submit only what each authority requires and nothing beyond that.
• Fraud prevention and identity verification. To verify the authenticity of documents you provide and to protect against fraudulent applications, which may result in legal consequences under UAE law.
• Billing and VAT compliance. To issue tax invoices and maintain financial records as required by the UAE Federal Tax Authority under Federal Decree-Law No. 8 of 2017 on VAT.
• Legal compliance. To comply with applicable UAE laws and regulatory obligations, including responding to lawful requests from government authorities.
• Service improvement. Aggregated, anonymised analytics data helps us understand how people use the website so we can improve it. This data does not identify you personally.

We do not use your personal data for automated decision-making that produces legal or similarly significant effects without human review.

03 Who we share it with

We share your information only where necessary to deliver the service you have engaged us for, or where required by UAE law. We do not sell your data to third parties for marketing purposes — ever.

UAE government and regulatory authorities

Depending on your service, your personal and documentary data will be submitted to the relevant authority. This includes but is not limited to:

• General Directorate of Residency and Foreigners Affairs (GDRFA), Dubai
• Federal Authority for Identity, Citizenship, Customs and Ports Security (ICA)
• AMER Service Centres
• Relevant freezone authorities (for example: IFZA, Meydan, DMCC, RAKEZ, AFZA, SPC)
• Ministry of Human Resources and Emiratisation (MOHRE) for employment-related permits
• Department of Economic Development (DED) for mainland license applications
• Federal Tax Authority (FTA) where VAT filings relate to your service

Payment processors

Payments are handled by our authorised payment processor. That processor is subject to its own privacy and security standards. We will identify the current payment processor on the checkout page. We do not share your card data with any other party.

Service providers acting on our behalf

We may use third-party software providers (such as a CRM or cloud storage service) to manage your case records. These providers are contractually bound to process your data only on our instructions and not for their own purposes.

Legal requirements

We will disclose personal data if required to do so by a court order, regulatory authority, or other lawful process under UAE or applicable law. We will notify you of such a request where permitted to do so.

04 How long we keep it

We retain your personal data for as long as is necessary to deliver the service and for any period required by UAE law.

• Active service records. We will hold your complete file for the duration of your service and for a reasonable post-completion period in case you need to reference your case or request a copy of a submitted document.
• UAE record-keeping requirement. Under UAE commercial laws and VAT regulations, financial and transactional records must be retained for a minimum of seven years from the date of the transaction. We apply this seven-year retention period to all service records associated with a completed transaction.
• Enquiry data only. If you contacted us but did not proceed with a service, we will retain only your contact details and the nature of your enquiry for up to 12 months, after which they are deleted.
• Analytics data. Anonymised and aggregated analytics data does not have a set deletion schedule as it cannot be linked back to an individual.

When retention periods expire, data is deleted or anonymised. If you request deletion before the end of a retention period and no legal hold applies, we will delete it and confirm this to you in writing.

05 Your rights

Under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) you have the following rights in respect of your personal data:

• Access. You can request a copy of the personal data we hold about you. We will respond within a reasonable period and in any event within 30 days of your request.
• Correction. If any data we hold is inaccurate or incomplete, you can ask us to correct it. Where the data was also submitted to a government authority, we will advise you on the applicable correction process with that authority.
• Deletion. You can request that we delete your personal data. We will do so unless we are subject to a legal obligation to retain it (for example, the seven-year financial record-keeping requirement described in section 4). Where we cannot delete in full, we will tell you what we are retaining and why.
• Withdrawal of consent. Where we process your data on the basis of your consent (for example, for optional marketing messages), you can withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before withdrawal, and it does not affect processing carried out on a different legal basis (such as contractual necessity or legal obligation).
• Objection to processing. You can object to processing carried out in our legitimate interests where you have grounds relating to your particular situation. We will consider your objection and cease processing unless we have compelling legitimate grounds that override your interests.
• Complaint to the UAE Data Office. If you believe we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with the UAE Data Office at dataoffice.gov.ae.

To exercise any of these rights, write to us at privacy@visask.com. We will verify your identity before processing the request to protect against unauthorised access to your data.

06 Cookies

Our website uses cookies — small text files placed on your device — to make the site function and to help us understand how it is used.

Essential cookies

These are necessary for the website to work. They enable functions such as session management, remembering items in a service enquiry flow, and maintaining security. The site cannot function without them and they cannot be turned off.

Analytics cookies

We use analytics tools (currently Google Analytics) to collect aggregated, anonymised data about pages visited, session duration, and traffic sources. This data helps us understand which pages are useful and where the experience can be improved. No personally identifiable information is included in these reports.

Your opt-out options

• You can opt out of analytics cookies by selecting the option in our cookie consent banner when you first visit the site.
• You can adjust cookie settings in your browser at any time. Note that disabling cookies may affect the function of some parts of the site.
• For Google Analytics specifically, you can install the Google Analytics Opt-out Browser Add-on.

We do not use advertising cookies or share cookie data with advertising networks.

07 Data security

We take the security of your personal data seriously. The measures we have in place include:

• Encryption in transit. All data transmitted between your browser and our servers is encrypted using TLS (Transport Layer Security). Look for the padlock icon in your browser address bar.
• Access controls. Access to your personal data within our systems is restricted to team members who need it to process your service. Access is granted on a role basis and reviewed regularly.
• ISO-aligned information security policies. Our internal data handling procedures are aligned with internationally recognised information security standards.
• Storage. Your data is stored on cloud infrastructure with reputable providers operating appropriate security controls and data centre protections.

No transmission over the internet or electronic storage system is 100% secure. If you believe your data has been compromised, write to us immediately at privacy@visask.com and we will investigate and respond promptly.

08 Children's data

Visask's services are not directed at, and we do not knowingly collect personal data from, individuals under the age of 18 in their own right.

There is one specific exception: applications for dependent visas and newborn registration, where a parent or legal guardian applies on behalf of a child. In those cases, the child's personal data (name, date of birth, passport details) is collected and submitted to the relevant UAE authority as part of the adult applicant's service. The adult applicant is responsible for ensuring they have the legal authority to submit that data on the child's behalf.

If you believe we have inadvertently collected personal data from a minor without appropriate authority, please contact us at privacy@visask.com and we will delete it promptly.

09 Updates to this policy

We will update this Privacy Policy from time to time to reflect changes in the services we offer, the way we process data, or changes in applicable law.

When we update it, we will:

• Post the revised version on this page.
• Update the "Last updated" date at the top of the page.
• Where a change materially affects how we use your data, we will notify active clients by email before the change takes effect.

We encourage you to review this page periodically. Continued use of our services after a policy update constitutes acceptance of the revised terms.

10 Contact for privacy questions

For any question, request, or complaint relating to this Privacy Policy or the personal data we hold about you, contact us using the details below.

Email

privacy@visask.com

Operating entity

Easyco Corporate Services Provider

Office address

Al Ameri Tower, 19th Floor
Barsha Heights, Dubai
United Arab Emirates

Office hours

Monday to Saturday, 09:00 – 18:00 GST

We will acknowledge your request within 2 business days and aim to resolve it within 30 days. If the matter is complex, we will notify you within the 30-day window and give you a revised timeline.