Privacy Policy

1. Who we are

VisaClockUK ("we", "us", "our") operates visaclock.co.uk — a UK immigration planning tool. We are the data controller for the personal data we collect. Contact us at hello@visaclock.co.uk.

2. What data we collect and why

We collect only what's necessary to provide the service:

• Email address — to manage your account, send sign-in links, and email you about rule changes. Legal basis: contract performance and legitimate interests.
• Visa and immigration details — route, entry date, absences, salary history — entered voluntarily by you to power your countdown and improvement plan. Legal basis: contract performance. This data is stored in your account but never shared with third parties.
• Payment information — processed entirely by Stripe. We never see or store your card details. Stripe's privacy policy applies to payment data.
• Usage data — anonymised analytics (pages visited, features used) to improve the product. No individual-level tracking. Legal basis: legitimate interests.

3. How we use your data

• Delivering the VisaClockUK service and your personalised dashboard
• Sending sign-in links and account-related emails
• Alerting you when UK immigration rules change in ways that affect your timeline
• Improving the product based on anonymised usage patterns

We do not sell your personal data. We do not share individual personal data with any third party for their marketing purposes.

4. Partner communications (opt-in only)

If you explicitly opt in (by ticking a consent checkbox), we may occasionally share carefully selected offers from immigration solicitors, financial services providers, or other relevant partners. This consent is separate from your subscription and can be withdrawn at any time. We will never share your data with partners without your explicit consent.

Aggregated, anonymised insights (e.g. "73% of our users are on Skilled Worker visas in years 3–4") may be shared with partners and researchers. This contains no personal data and cannot identify any individual.

5. Data sharing

We share data only with:

• Supabase — our database provider. Data stored in the EU. Supabase Privacy Policy
• Stripe — payment processing. Stripe Privacy Policy
• Resend — transactional email. Resend Privacy Policy
• Netlify — hosting. Netlify Privacy Policy

All third-party processors are GDPR-compliant. We do not transfer your data outside the UK/EU without appropriate safeguards.

6. Your rights under UK GDPR

You have the right to:

• Access — request a copy of all data we hold about you
• Rectification — correct inaccurate data
• Erasure — request deletion of your account and all associated data
• Restriction — limit how we process your data
• Portability — receive your data in a machine-readable format
• Object — object to processing based on legitimate interests
• Withdraw consent — for any consent-based processing (e.g. partner communications)

To exercise any right, email hello@visaclock.co.uk. We will respond within 30 days. You also have the right to complain to the ICO (ico.org.uk).

7. Data retention

We retain your data for as long as your account is active. If you cancel your subscription, we retain your email for 12 months in case you wish to reactivate, then delete it. Visa profile data is deleted immediately on account deletion request. Anonymised usage data may be retained indefinitely.

8. Cookies

We use minimal cookies: session management (necessary, no consent required) and Stripe's fraud-prevention cookies (necessary for payment processing). We do not use advertising or tracking cookies.

9. Changes to this policy

We may update this policy. Material changes will be notified by email. Continued use of the service after notification constitutes acceptance.

10. Contact

Data controller: VisaClockUK · hello@visaclock.co.uk · visaclock.co.uk