Privacy Policy

  • Who We Are We are Nuvora Ltd ("we", "us", or "our"), a company registered in England and Wales. We operate as a private immigration practice specializing in UK visa and citizenship services.

    For the purposes of the General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we are the Data Controller. This means we are responsible for deciding how and why we hold and use your personal data.

    • Registered Office: 27 Beckingham Road, Guildford, United Kingdom.

    • Email: contact@nuvora.org.uk

    • Phone: +44 (0)1483 224134

    • Regulatory Body: We are regulated by the Immigration Advice Authority (IAA).

  • To provide effective immigration advice and representation, we must collect comprehensive personal information. This falls into two categories:

    A. Personal Identification & Contact Data

    • Identity Data: Full names, maiden names, date of birth, gender, marital status, and passport/national identity card details.

    • Contact Data: Current residential address, address history (up to 10 years), email addresses, and telephone numbers.

    • Family Data: Details of your spouse, partner, children, parents, and grandparents (where relevant for ancestry or dependent claims).

    B. Sensitive & Special Category Data Under Article 9 of the UK GDPR, immigration cases often require us to process "Special Category Data." We collect this only when strictly necessary for your application:

    • Biometric Data: Fingerprints and facial photographs (as part of the Home Office application process).

    • Health Data: Medical records (e.g., TB test certificates, proof of disability for exemptions, or compassionate grounds).

    • Criminal History: Details of any criminal convictions, cautions, civil judgments, or immigration offences (required for the "Good Character" assessment).

    • Financial Data: Bank statements, payslips, P60s, tax returns, and employment contracts to prove financial eligibility.

  • We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

    • Performance of a Contract: To carry out the services you have hired us for—specifically, assessing your eligibility, drafting your legal representations, and submitting your application to the Home Office (UKVI).

    • Legal Obligation: To comply with our regulatory duties under the Immigration Advice Authority (IAA) codes of conduct, including anti-money laundering (AML) checks and conflict of interest checks.

    • Legitimate Interests: To effectively manage our business, keep our records updated, and recover debts due to us.

    We do not sell your data to third parties. We only share your data with:

    • The Home Office (UKVI): For the purpose of your visa application.

    • Third-Party Interpreters/Translators: If required for your case (with your consent).

    • Our Regulator (IAA): For audit and compliance monitoring purposes.

  • We will only retain your personal data for as long as strictly necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

    Our Retention Policy: In accordance with the Immigration Advice Authority (IAA) Code of Standards, we are required to retain your client file for a period of six (6) years from the date your case is closed.

    • After this 6-year period has elapsed, your file and all associated personal data will be securely destroyed or anonymised.

    • We may retain basic contact information indefinitely for conflict-of-interest checking purposes, unless you specifically request its deletion (where legal).

  • Under the UK GDPR, you have specific rights regarding your personal data:

    • Right of Access: You have the right to request a copy of the personal data we hold about you (commonly known as a "Data Subject Access Request").

    • Right to Rectification: You can ask us to correct any incomplete or inaccurate data we hold about you.

    • Right to Erasure ("Right to be Forgotten"): You can ask us to delete your data where there is no good reason for us continuing to process it. Note: We may not always be able to comply with your request of erasure for specific legal reasons (e.g., the mandatory 6-year file retention rule required by our regulator).

    • Right to Restrict Processing: You can ask us to suspend the processing of your personal data in certain scenarios.

    • Right to Data Portability: You can request the transfer of your data to you or to a third party.

    To exercise any of these rights, please contact us at contact@nuvora.org.uk. We try to respond to all legitimate requests within one month.