Introduction
Nihaal Consultant ("we", "our", or "us") respects your privacy. This policy explains what information we collect when you interact with this website, how we use it, where it's stored, and the choices you have. We've intentionally designed this site to collect as little personal data as possible.
Information we collect
We collect two categories of information:
Information you provide. When you submit any form on this site — the eligibility calculator, the contact form, or a service-specific inquiry — we collect the data you enter. That typically includes your name, email address, WhatsApp number, country of interest, service of interest, the contents of your message, and (for the eligibility calculator) your answers to assessment questions.
Automatic information. We use a privacy-friendly analytics service (Plausible) that records aggregate page views and event totals. No cookies are set, no individual visitor profiles are built, and the data is not shared with third parties for advertising.
How we use your information
We use the information solely to:
- Respond to your inquiry and provide the consultancy services you requested.
- Assess your eligibility for the visa pathways you're interested in.
- Communicate with you about your case via the channels you provided (email, WhatsApp, phone).
- Maintain accurate records of our engagement.
- Improve the site and our service over time, using aggregate analytics only.
We do not sell your information, share it with marketers, run retargeting pixels, or use it for any purpose other than the ones above.
Third-party processors
A small set of carefully chosen third parties helps us run this site. Each processes only what is necessary for its specific function:
- Vercel — hosts and serves the website. Receives standard web request data (IP address, user agent) as part of normal hosting operations.
- Discord — our internal inbox for inquiries. When you submit a form, the contents are forwarded as a private message in our team's Discord server, where we triage and respond.
- Cloudflare Turnstile — invisible spam protection on our forms. Cloudflare may collect technical signals to determine whether a submission is automated.
- Plausible — privacy-friendly analytics. Cookieless, GDPR-friendly by design, and based in the EU.
Each of these providers has its own privacy policy governing how it handles data. We chose providers that are widely audited and aligned with the privacy posture stated here.
Data retention
Form submissions land in our private Discord server, where they remain until we delete them. We retain inquiry data for as long as needed to serve you, plus a reasonable period thereafter for follow-up and audit. You may request deletion at any time using the contact details below.
Your rights
You have the right to:
- Access the information we hold about you.
- Correct any inaccuracies.
- Delete your information from our systems.
- Object to specific processing activities.
- Withdraw consent at any time where processing is based on consent.
To exercise any of these rights, email [email protected] with your request. We'll respond within 30 days.
Cookies
We do not set any cookies for tracking, advertising, or analytics. Plausible is cookieless by design. No "Accept all cookies" banner is shown because none are set in the first place.
GDPR (EU and UK visitors)
If you are in the European Economic Area or the United Kingdom, the General Data Protection Regulation (and the UK GDPR) applies to our processing of your personal data. Our lawful bases for processing are:
- Consent — when you submit a form, you provide consent for us to contact you about your inquiry.
- Legitimate interests — for site analytics (privacy-friendly, no profiling) and spam protection.
You retain the rights listed under "Your rights" above, plus the right to lodge a complaint with your local supervisory authority.
Children's privacy
Our services are aimed at applicants of legal majority. We do not knowingly collect information from children under 18 without a parent or guardian's involvement. If you believe a child has provided us with personal data, contact us and we'll delete it.
Security
We take reasonable technical and organizational measures to protect your information. No internet transmission is ever completely secure, but we use HTTPS site-wide, server-side validation on every form, and access controls on our Discord workspace.
Updates to this policy
We may update this policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be highlighted on this page for at least 30 days.
Contact
For privacy questions, requests to exercise your rights, or to report a concern, email [email protected].