Introduction
Nihaal Consultant ("we", "our", or "us") respects your privacy. This policy sets out what we collect when you use this website, what we do with it, where it is held, and what choices you have. We built the site to collect as little personal data as we can while still being able to answer your inquiry.
Information we collect
There are two kinds.
The first is information you give us. When you submit any form on this site, whether that is the eligibility calculator, the contact form, or a service-specific inquiry, we receive what you typed. That usually means your name, email address, WhatsApp number, the country and service you are interested in, your message, and, if you used the calculator, your answers to the assessment questions.
The second is collected automatically. We use Plausible, a privacy-friendly analytics service, which records aggregate page views and event totals. It sets no cookies, builds no individual visitor profiles, and shares nothing with advertisers.
How we use your information
We use it to respond to your inquiry and deliver the consultancy services you asked for, to assess your eligibility for the visa pathways you are considering, to communicate with you about your case through the channels you gave us, and to keep accurate records of our engagement. Aggregate analytics also help us improve the site over time.
We do not sell your information, share it with marketers, run retargeting pixels, or use it for anything beyond what is listed above.
Third party processors
A small number of outside services help us run this site, and each one only handles what its specific function requires.
Vercel hosts and serves the website, and receives standard web request data such as your IP address and user agent as part of normal hosting. Discord is our internal inbox: when you submit a form, the contents arrive as a private message in our team's server, where we triage and respond. Cloudflare Turnstile provides invisible spam protection on our forms and may collect technical signals to work out whether a submission is automated. Plausible handles analytics, is cookieless by design, and is based in the EU.
Each provider operates under its own privacy policy. We chose ones that are widely audited and that match the privacy posture described here.
Data retention
Form submissions sit in our private Discord server until we delete them. We keep inquiry data for as long as we need it to serve you, plus a reasonable period afterwards for follow-up and audit. You can ask us to delete it at any point using the contact details below.
Your rights
You have the right to access the information we hold about you, to correct anything inaccurate, to have your information deleted from our systems, to object to specific processing activities, and to withdraw consent at any time where our processing rests on consent.
To exercise any of these, email [email protected] with your request. We respond within 30 days.
Cookies
We set no cookies for tracking, advertising, or analytics. Plausible is cookieless by design. You will not see an "Accept all cookies" banner on this site because there are no cookies to accept.
GDPR (EU and UK visitors)
If you are in the European Economic Area or the United Kingdom, the General Data Protection Regulation and the UK GDPR apply to how we process your personal data. We rely on two lawful bases. Consent covers form submissions, where you agree to be contacted about your inquiry. Legitimate interests covers site analytics, which involve no profiling, and spam protection.
The rights listed under "Your rights" above still apply, and you may also lodge a complaint with your local supervisory authority.
Children's privacy
Our services are aimed at applicants who have reached legal majority. We do not knowingly collect information from children under 18 without a parent or guardian involved. If you believe a child has given us personal data, contact us and we will delete it.
Security
We take reasonable technical and organizational measures to protect your information. No internet transmission is ever completely secure, but the site runs on HTTPS throughout, every form is validated server-side, and access to our Discord workspace is controlled.
Updates to this policy
We may revise this policy to reflect changes in our practices or in the law. The "Last updated" date at the top of this page shows the most recent revision. Where a change is material, we flag it on this page for at least 30 days.
Contact
For privacy questions, to exercise your rights, or to raise a concern, email [email protected].