Privacy & Data Protection

Privacy Policy

Last updated: December 11, 2025

POPIA Compliant

Visaflow is fully compliant with the Protection of Personal Information Act 4 of 2013 (POPIA) of South Africa. We are committed to protecting your personal information and processing it lawfully, fairly, and in a transparent manner.

1. Information We Collect

In accordance with POPIA, we collect personal information that is necessary and relevant for providing our immigration case management services. This includes:

  • Account Information: Name, email address, phone number, and professional credentials
  • Client Data: Contact details, passport information, immigration status, and case-related documents
  • Usage Data: How you interact with our platform, including pages visited and features used
  • Technical Data: IP address, browser type, device information, and cookies

2. Purpose of Processing

We process your personal information for the following purposes:

  • To provide and maintain our immigration case management services
  • To communicate with you about your account, cases, and platform updates
  • To comply with legal obligations, including immigration law requirements
  • To improve our services and develop new features
  • To ensure the security and integrity of our platform

3. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:

  • End-to-end encryption for data in transit and at rest
  • Role-based access controls and granular permission systems
  • Regular security audits and vulnerability assessments
  • Secure data centers with physical security measures
  • Employee training on data protection best practices

4. Your Rights Under POPIA

As a data subject, you have the following rights under the Protection of Personal Information Act:

  • Right to Access: You may request access to your personal information
  • Right to Correction: You may request correction of inaccurate or incomplete information
  • Right to Deletion: You may request deletion of your personal information, subject to legal retention requirements
  • Right to Object: You may object to the processing of your personal information
  • Right to Withdraw Consent: You may withdraw consent at any time
  • Right to Lodge a Complaint: You may lodge a complaint with the Information Regulator

5. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Immigration case records may be retained for extended periods in accordance with regulatory requirements.

6. Third-Party Sharing

We do not sell your personal information. We may share data with trusted third parties only when necessary to provide our services, comply with legal obligations, or with your explicit consent. All third parties are bound by data protection agreements.

7. International Data Transfers

If personal information is transferred outside South Africa, we ensure that appropriate safeguards are in place in accordance with POPIA requirements, including ensuring the recipient country has adequate data protection laws or binding contractual obligations.

8. Information Officer

For any queries regarding this Privacy Policy or to exercise your rights, please contact our Information Officer:

Email: velora@vocaltech.ai

Address: Johannesburg, South Africa

9. Updates to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.