Privacy policy

Last updated: 14 November 2026.

Who we are

The controller of your personal data is [To confirm: full legal name of the company, e.g. "... S.à r.l."], trading as Visarole, registered in Luxembourg under RCS number [To confirm: RCS number], with its registered office at [To confirm: registered address in Luxembourg]. We also have an office in Germany at [To confirm: German office address].

You can reach us about anything in this policy at contact@visarole.com. [To confirm: whether a Data Protection Officer has been appointed; if not, delete this sentence. If yes, DPO name/contact.]

What this policy covers

This policy explains how we handle personal data when you visit our website, send us a message through the contact form, book a call through our booking page, and become a client. It applies wherever you are, including Pakistan, because we are established in the EU and the GDPR applies to our processing.

Data we collect

We collect only what we need to answer you and to advise you properly.

Through the contact form

Through call bookings (Calendly)

When you book a call, Calendly collects your name, email address, the time you choose, your time zone and any answers you give in the booking questions, and passes them to us. Calendly also processes technical data such as your IP address. The video-call link is created through [To confirm: video-conferencing tool, e.g. Google Meet, Zoom or Microsoft Teams].

When you become a client

To deliver a paid package we process the documents and information you give us: transcripts, degrees, CV, passport details, language test results, statements of purpose, financial information relevant to proof of funds, correspondence with universities and visa information. If you include information about your spouse or children for a family route, we process that too; please tell them you are sharing it.

We do not ask for special categories of data (such as health, religion or ethnic origin). If a visa or application process requires such information, we process it only with your explicit consent and only for that purpose.

We do not knowingly collect data from children under 16 without the involvement of a parent or guardian.

Why we use your data and our legal basis

Under the GDPR we need a legal basis for each use of your data.

We do not use your data for automated decision-making or profiling that has legal or similarly significant effects on you.

Who we share your data with

We do not sell your personal data. We share it only with service providers who process it on our behalf under a data processing agreement, and with third parties you ask us to deal with.

When you are a client and ask us to, we send your information to universities, application portals (such as uni-assist, Campus France or Universitaly), translation or attestation services, and other parties involved in your application. Those organisations are independent controllers with their own privacy policies.

We may disclose data where required by law or to protect our legal rights.

International transfers

Some of your data leaves the European Economic Area (EEA).

• Calendly and possibly other providers are based in the United States. Where the provider is certified under the EU-US Data Privacy Framework, the transfer relies on the European Commission's adequacy decision; otherwise we rely on the European Commission's Standard Contractual Clauses. [To confirm: check each US provider's certification status at dataprivacyframework.gov and update.]
• Communications with you in Pakistan. When we email or call you, or send documents back to you, data necessarily travels to Pakistan. These transfers are necessary to perform the contract you asked for (GDPR Article 49(1)(b)) or to take steps at your request before a contract.
• Universities and authorities you apply to may be inside or outside the EEA; we send them your data only on your instruction.

You can ask us for a copy of the safeguards we use.

How long we keep your data

We delete or anonymise data when the retention period ends.

How we protect your data

We use encrypted connections (HTTPS), access controls, strong authentication on our accounts and providers with recognised security standards. Only the founders [To confirm: and any named staff or freelancers] can see client files. No system is completely secure; if a breach is likely to put your rights at risk, we will notify the CNPD and, where required, you.

Your rights

Under the GDPR you have the right to:

• Access the personal data we hold about you and get a copy.
• Rectify data that is wrong or incomplete.
• Erase your data where there is no longer a reason to keep it.
• Restrict our processing in certain circumstances.
• Port data you gave us, in a machine-readable format, where processing is based on consent or contract.
• Object to processing based on legitimate interests, including any direct marketing, at any time.
• Withdraw consent where we rely on consent, without affecting earlier processing.

To use any of these rights, email contact@visarole.com. We will reply within one month, and may ask you to confirm your identity first. Using your rights is free unless a request is clearly unfounded or excessive.

Your right to complain

You can complain to the Luxembourg supervisory authority, the Commission nationale pour la protection des données (CNPD), 15, Boulevard du Jazz, L-4370 Belvaux, Luxembourg, website cnpd.public.lu. [To confirm: verify CNPD address before publishing.] You may also complain to the authority in the EU country where you live or work. We would appreciate the chance to resolve your concern first.

Cookies and similar technologies

Our website uses only the cookies it needs to work, unless you agree to more.

Strictly necessary cookies do not need consent. Any analytics or marketing cookies are set only after you accept them in our cookie banner, and you can change your choice at any time. [To confirm: whether analytics or marketing pixels (e.g. Google Analytics, Meta Pixel) will be used; if none, say so and remove the analytics row. Confirm whether the Calendly widget is embedded or opened as an external link.]

You can also block or delete cookies in your browser settings.

Links to other websites

Our pages link to universities, embassies and official portals. We are not responsible for their privacy practices; please read their policies.

Changes to this policy

We will update this policy when our processing changes and change the date at the top. If a change materially affects how we use data you have already given us, we will tell you directly.

Questions

If anything here is unclear, write to us at contact@visarole.com. If you are considering studying or working in Europe, you can also book a free 30-minute call with one of the founders.