LEGAL

Privacy Policy

Draft — last updated placeholder. Review with a qualified lawyer before this site goes live.

Because Stamp operates from Malta (EU), this policy needs to satisfy GDPR before real use — including a genuine lawful basis for processing, real retention periods, and a working process for data deletion requests. This draft sets the structure; the specifics need legal review.

1. What we collect

To process a visa application, we collect personal details (name, contact information, nationality), identity documents (passport, photos), and supporting documents relevant to your visa type (academic records, employment letters, financial statements, and in some cases health-related information for medical visas).

2. Why we collect it

Solely to prepare and submit your visa application on your behalf, and to communicate with you about its status. We do not sell personal data, and we do not use your documents for any purpose beyond your application.

3. Who we share it with

Only the specific school, employer, or authority relevant to your own application — never a broader list, and never without your application requiring it. We do not share your data with advertisers or unrelated third parties.

4. How long we keep it

We retain application data for as long as needed to complete your application and to meet any legal retention requirements afterward. [Placeholder — exact retention period to be finalized and stated here.]

5. Your rights

Under GDPR, you can request a copy of the data we hold on you, ask us to correct it, or request its deletion where it's no longer legally required. Contact privacy@stamp.example to exercise any of these.

6. Security

Documents and personal data are stored with access limited to authorized staff reviewing your specific application. We do not store payment card details on this website at all — payment happens off-platform by bank transfer.

7. Cookies

[Placeholder — list actual cookies/analytics tools once added, with their purpose and retention.]