1. Who we are
The data fiduciary is Pro Lifeset Overseas Private Limited (CIN U52291PB2024PTC060508, GSTIN 03AAOCP3999C1Z5), with its registered office at Second Floor, SCO 06, Bhupindra Road, Patiala 147001, Punjab, India. Our Grievance Officer is Narinderpal Singh Chahal (Director), contactable at info@lifesetoverseas.com.
2. Scope
This policy applies to personal data we collect through our website, lead forms, client portal, and direct communications (phone, email, WhatsApp, SMS, in person). It does not apply to third-party websites or services we link to, which have their own policies.
3. Personal data we collect
- Identity and contact data: name, email, phone number, postal address, date of birth.
- Immigration profile: country of interest, education and academic records, work history, language test scores, and travel/visa history.
- Application documents: passport scans, photographs, financial proofs, qualification certificates, visa refusal letters, and CAIPS/GCMS notes you ask us to retrieve.
- Account data: login identifiers and authentication events (we use phone OTP, email magic link, or Google sign-in — we do not store shared passwords).
- Payment data: billing name, invoice details and transaction references. Full card and bank details are entered directly with our payment processors and are not stored on our servers.
- Usage and device data: IP address, browser/device type, pages visited and analytics events.
4. How we collect it
We collect data that you provide directly (lead forms, consultations, portal uploads, payment), data generated as you use the site (cookies and analytics), and data we retrieve on your instruction (for example CAIPS/GCMS notes from the relevant authority).
5. Why we collect it (purposes)
- To assess your eligibility and provide visa and immigration consultancy.
- To prepare, review and lodge visa applications through official channels on your instruction.
- To manage your case, process payments, and issue GST invoices.
- To communicate case status and reminders by email, SMS and WhatsApp.
- To comply with our consultancy-licence record-keeping, tax and other legal obligations.
- To operate, secure and improve our website and services.
6. Legal bases (DPDP Act, 2023)
We process your personal data on one or more of these bases:
- Your consent — given when you submit a form, create an account, or engage us. You may withdraw consent at any time (see Section 11), without affecting processing already carried out.
- Performance of our agreement with you — to deliver the services you have requested.
- Compliance with legal obligations — licence, tax and record-keeping requirements.
- Certain legitimate uses permitted under the DPDP Act, such as responding to your enquiry.
7. Payment data
Online payments are handled by PCI-DSS-compliant processors — Razorpay (INR) and Stripe (international cards). Your card and banking details are captured and processed by these providers under their own privacy policies; we receive only the information needed to reconcile your payment and issue an invoice (such as a transaction ID, the last digits of a card, and billing name). We do not store full card numbers.
8. Who we share it with
We share personal data only as needed to deliver the services, and under appropriate confidentiality and data-processing terms:
- Visa posts and immigration authorities (e.g. IRCC) and their service partners (e.g. VFS Global, AVAC, biometrics and medical panels), via official channels and on your instruction.
- Service providers (data processors): Supabase (database, storage, authentication), Vercel (hosting), MSG91 (SMS/WhatsApp), Resend (email), Razorpay and Stripe (payments), Meilisearch (search), Google Analytics and Microsoft Clarity (analytics), and Sentry (error monitoring).
- Professional advisers, auditors or regulators where required by law.
We do not sell your personal data.
9. International data transfers
Some of our processors store or process data outside India (for example Supabase in Singapore; Vercel, Stripe, Resend and Sentry in the United States and other regions). Where we transfer personal data abroad, we do so in compliance with the DPDP Act and under contractual safeguards with those processors. By using our services you acknowledge these transfers, which are necessary to provide the services you request.
10. Data retention
We retain your personal data for as long as needed to provide the services and to meet our legal, licence and tax obligations — generally for the duration of your case and for the statutory period afterwards (for example, tax records are retained as required under Indian law). When data is no longer required, we delete or anonymise it, unless retention is required by law.
11. Your rights
Subject to the DPDP Act, you have the right to:
- Access — obtain a summary of the personal data we process about you.
- Correction and completion — have inaccurate or incomplete data corrected.
- Erasure — request deletion of your data where it is no longer needed and retention is not legally required.
- Withdraw consent — at any time, for processing based on consent.
- Nominate — appoint another person to exercise your rights in the event of death or incapacity.
- Grievance redressal — raise a complaint with our Grievance Officer (Section 16).
To exercise any right, email info@lifesetoverseas.com. We will respond within the timeframe required by the DPDP Act.
12. Children's data
We do not knowingly process the personal data of a child (under 18) without verifiable consent from a parent or lawful guardian. Where a dependent or minor applicant is involved, the parent or guardian provides and manages that consent.
13. Security
13.1 Measures
- Encryption in transit (TLS) and at rest for data stored with our database/storage provider.
- Role-based access and row-level security so staff see only what their role requires.
- Passwordless authentication (OTP, magic link, Google sign-in) and secret-key controls.
- Logging and error monitoring, with personal data redacted where feasible.
No system is perfectly secure. If a personal-data breach occurs, we will act in accordance with the DPDP Act, including notifying affected persons and the Data Protection Board as required.
14. Cookies and analytics
We use strictly necessary cookies for authentication and security, and analytics tools (Google Analytics 4, Microsoft Clarity, Vercel Analytics) to understand and improve site usage. You can control cookies through your browser settings and any cookie-consent controls we provide; disabling some cookies may affect site functionality.
15. Third-party links
Our website may link to third-party sites (for example official government portals). We are not responsible for their content or privacy practices; please review their policies.
16. Grievance Officer and escalation
If you have a concern about how we handle your personal data, contact our Grievance Officer, Narinderpal Singh Chahal (Director), at info@lifesetoverseas.com or by post at Second Floor, SCO 06, Bhupindra Road, Patiala 147001, Punjab, India. We aim to acknowledge within 48 hours and resolve within the period required by the DPDP Act. If you remain dissatisfied, you may escalate to the Data Protection Board of India.
17. Changes to this policy
We may update this policy from time to time. The “Last updated” date above reflects the current version, and material changes will be notified to active clients by email. Your continued use of our services after changes take effect constitutes acceptance. This policy is read together with our Terms of Service.
