Privacy policy

Last updated 28/12/2025.

1. Privacy notice

This Privacy Policy explains how I-Migrator Ltd (doing business as I-Migrator) ("we", "us", or "our") collects, uses, stores, and shares your personal information when you use our services ("Services"), including when you:

Visit our website at https://i-migrator.com, or any website of ours that links to this Privacy Policy;
Use the I-Migrator platform, including eligibility checkers, document tools, and communication with legal professionals;
Engage with us in other related ways, including sales, marketing, or events.

I-Migrator is a technology platform that provides immigration application assistance tools. Immigration advice is provided exclusively by our SRA-regulated solicitor, Dhruti Thakrar (SRA ID: 158293). We process personal data, including special category data, in connection with immigration applications.

Data Controller: I-Migrator Ltd (Company No. 15993353), Aston House, Cornwall Avenue, London N3 1LF, United Kingdom.

2. What information do we collect?

2.1 Information You Provide to Us

We collect personal information that you voluntarily provide when you register, use our Services, or contact us. This includes:

Identity and Contact Data:

Full name, date of birth, nationality
Email address, phone number, postal address
Username and password
Passport information and travel document details
Photographs and identity document scans

Immigration Application Data:

Immigration history (previous visas, refusals, overstays)
Employment history and employer details
Educational qualifications and certificates
Financial information (bank statements, salary details)
Family member details (names, dates of birth, relationships)
Accommodation details

Payment Data:

Payment card details (processed securely by Stripe)
Billing address
Transaction history

2.2 Special Category Data

Immigration applications often require us to process special category personal data under Article 9 of UK GDPR. This may include:

Racial or ethnic origin: Nationality, country of birth, ethnicity
Health data: Medical conditions relevant to visa applications (e.g., TB test results, vaccination records, disability information for reasonable adjustments)
Religious or philosophical beliefs: Where relevant to your application (e.g., minister of religion visas)
Biometric data: Passport photographs, facial images from identity documents
Criminal conviction data: Where required for immigration applications

We only collect special category data that is necessary for your immigration application.

2.3 Information Collected Automatically

When you use our Services, we automatically collect:

Device information: IP address, browser type, operating system, device identifiers
Usage data: Pages viewed, features used, time spent, clickstream data
Location data: Country and approximate location based on IP address
Cookies and similar technologies: See our Cookie Policy for details

2.4 Information from Third Parties

We may receive information from:

Social media platforms: If you register using Facebook, Google, or other social login
Identity verification providers: To verify your identity documents
Our SRA-regulated solicitor: In connection with your immigration advice

3. How do we process your information

3.1 Purposes and Legal Bases

We process your personal information for the following purposes, relying on the legal bases indicated:

Purpose	Legal Basis (UK GDPR)
To create and manage your account	Performance of contract (Article 6(1)(b))
To provide our Platform Services (eligibility tools, document checklists, application assistance)	Performance of contract (Article 6(1)(b))
To facilitate immigration advice from our SRA-regulated solicitor	Performance of contract (Article 6(1)(b))
To process payments	Performance of contract (Article 6(1)(b))
To communicate with you about your application or account	Performance of contract (Article 6(1)(b))
To send marketing communications	Consent (Article 6(1)(a)) — you can withdraw at any time
To improve our Services and develop new features	Legitimate interests (Article 6(1)(f)) — improving our platform
To train and improve our AI systems	Legitimate interests (Article 6(1)(f)) — with safeguards; see Section 4
To detect and prevent fraud	Legitimate interests (Article 6(1)(f)) — protecting our business and users
To comply with legal obligations (e.g., tax, regulatory requirements)	Legal obligation (Article 6(1)(c))
To establish, exercise, or defend legal claims	Legitimate interests (Article 6(1)(f))

3.2 Legal Basis for Special Category Data

Where we process special category data, we rely on the following additional legal bases under Article 9 of UK GDPR:

Type of Special Category Data	Article 9 Legal Basis
Nationality, ethnic origin, health data, religious beliefs (for immigration applications)	Explicit consent (Article 9(2)(a)) — you provide this when submitting your application
Data necessary for legal claims or proceedings	Legal claims (Article 9(2)(f)) — establishment, exercise, or defence of legal claims
Criminal conviction data (where required)	Legal obligation or legal claims under Schedule 1 DPA 2018

You can withdraw your consent at any time by contacting us at legal@i-migrator.com. Withdrawal of consent does not affect the lawfulness of processing before withdrawal. However, withdrawing consent may mean we cannot continue to provide certain Services to you.

4. AI and Automated Decision-Making

4.1 How We Use AI

Our platform uses artificial intelligence and automated processing to provide:

Eligibility checkers: Automated assessments of potential visa eligibility based on information you provide
Document guidance: Automated recommendations for documents required for your application
Application assistance: Automated help completing application forms
Content generation: AI-assisted drafting of supporting statements and letters

4.2 Automated Decision-Making Disclosures

Under Article 22 of UK GDPR, you have specific rights regarding automated decision-making. We want to be clear about how our AI works:

Nature of processing: Our AI tools analyse the information you provide against immigration rules and requirements to generate guidance and recommendations.

Logic involved: Our eligibility checkers compare your circumstances (age, nationality, qualifications, finances, etc.) against published immigration route requirements to estimate whether you may qualify. The AI identifies matching criteria and flags potential issues.

Significance and consequences: AI-generated assessments are for guidance only. They do not determine your actual eligibility, which is decided solely by UK Visas and Immigration. AI outputs may contain errors and should not be relied upon without review by our SRA-regulated solicitor.

Human oversight: All AI-generated content that may affect your immigration application can be reviewed by our SRA-regulated solicitor before you act on it.

4.3 Your Rights Regarding Automated Processing

You have the right to:

Request human review of any automated assessment
Express your point of view regarding automated outputs
Contest automated decisions and request explanation
Opt out of certain automated processing (though this may limit functionality)

To exercise these rights, contact us at legal@i-migrator.com.

4.4 AI Training

We use anonymised and aggregated data to improve our AI systems. Where we use personal data for AI training, we do so based on legitimate interests with appropriate safeguards, including data minimisation and security measures. You can object to this processing by contacting us.

5. When and with whom do we share your personal information

We share your personal information with the following categories of recipients:

5.1 Our SRA-Regulated Solicitor

Immigration advice is provided by Dhruti Thakrar (SRA ID: 158293). We share your information with our solicitor as necessary to provide you with immigration advice and application support. The solicitor is independently regulated by the SRA and is subject to professional duties of confidentiality.

5.2 Government Authorities

Where you instruct us to submit an immigration application on your behalf, we share your information with:

UK Visas and Immigration (UKVI)
The Home Office
Other relevant government departments or embassies

5.3 Service Providers

We use third-party service providers who process data on our behalf:

Provider Category	Purpose	Example Providers
Payment processing	Processing payments securely	Stripe (Privacy Policy)
Cloud hosting	Storing and processing data	AWS, Google Cloud
Analytics	Understanding how our Services are used	Google Analytics
Communication	Sending emails and notifications	Email service providers
Identity verification	Verifying identity documents	Identity verification providers
AI services	Powering our AI features	AI/ML service providers

All service providers are bound by data processing agreements and are only permitted to process your data for specified purposes.

5.4 Professional Advisers

We may share information with our lawyers, accountants, and insurers where necessary for professional advice or insurance purposes.

5.5 Law Enforcement and Regulators

We may disclose information where required by law, court order, or regulatory authority, including:

The Information Commissioner's Office (ICO)
The Solicitors Regulation Authority (SRA)
The Immigration Advisers Authority (IAA)
Law enforcement agencies

5.6 Business Transfers

If we sell, merge, or transfer our business, your information may be transferred to the new owner. We will notify you of any such transfer and any choices you may have.

5.7 With Your Consent

We may share your information with other parties where you have given specific consent.

6. Do we use cookies and other tracking technologies

In Short: We may use cookies and other tracking technologies to collect and store your information.

We may use cookies and similar tracking technologies (like web beacons and pixels) to gather information when you interact with our Services. Some online tracking technologies help us maintain the security of our Services and your account, prevent crashes, fix bugs, save your preferences, and assist with basic site functions.

We also permit third parties and service providers to use online tracking technologies on our Services for analytics and advertising, including to:

Help manage and display advertisements
Tailor advertisements to your interests
Send abandoned shopping cart reminders (depending on your communication preferences)

The third parties and service providers use their technology to provide advertising about products and services tailored to your interests, which may appear either on our Services or on other websites.

Specific information about how we use such technologies and how you can refuse certain cookies is set out in our Cookie Notice.

Google Analytics

We may share your information with Google Analytics to track and analyse the use of the Services. The Google Analytics Advertising Features that we may use include: Google Analytics Demographics and Interests Reporting.

To opt out of being tracked by Google Analytics across the Services, visit https://tools.google.com/dlpage/gaoptout. You can opt out of Google Analytics Advertising Features through Ads Settings and Ad Settings for mobile apps. Other opt-out means include:

For more information on the privacy practices of Google, please visit the Google Privacy & Terms page.

7. How do we handle your social logins?

In Short: If you choose to register or log in to our Services using a social media account, we may have access to certain information about you.

Our Services offer you the ability to register and log in using your third-party social media account details (like your Facebook or X logins). Where you choose to do this, we will receive certain profile information about you from your social media provider. The profile information we receive may vary depending on the social media provider concerned, but will often include:

Your name
Email address
Friends list
Profile picture
Other information you choose to make public on such a social media platform

We will use the information we receive only for the purposes that are described in this Privacy Notice or that are otherwise made clear to you on the relevant Services. Please note that we do not control, and are not responsible for, other uses of your personal information by your third-party social media provider. We recommend that you review their privacy notice to understand how they collect, use, and share your personal information, and how you can set your privacy preferences on their sites and apps.

8. How long do we keep your information?

In Short: We keep your information for as long as necessary to fulfil the purposes outlined in this Privacy Notice unless otherwise required by law.

We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). No purpose in this notice will require us to keep your personal information for longer than seventy-two (72) months past the termination of the user's account.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymise such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

9. How do we keep your information safe?

In Short: We aim to protect your personal information through a system of organisational and technical security measures.

We have implemented appropriate and reasonable technical and organisational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorised third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information.

Although we will do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.

10. Do we collect information from minors?

In Short: We do not knowingly collect data from or market to children under 18 years of age.

We do not knowingly collect, solicit data from, or market to children under 18 years of age, nor do we knowingly sell such personal information. By using the Services, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent’s use of the Services.

If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you become aware of any data we may have collected from children under age 18, please contact us at legal@i-migrator.com.

11. What are your privacy rights?

In Short: Depending on your state of residence in the US or in some regions, such as the European Economic Area (EEA), United Kingdom (UK), Switzerland, and Canada, you have rights that allow you greater access to and control over your personal information. You may review, change, or terminate your account at any time, depending on your country, province, or state of residence.

In some regions (like the EEA, UK, Switzerland, and Canada), you have certain rights under applicable data protection laws. These may include the right (i) to request access and obtain a copy of your personal information, (ii) to request rectification or erasure; (iii) to restrict the processing of your personal information; (iv) if applicable, to data portability; and (v) not to be subject to automated decision-making. In certain circumstances, you may also have the right to object to the processing of your personal information.

You can make such a request by contacting us by using the contact details provided in the section 'HOW CAN YOU CONTACT US ABOUT THIS NOTICE?' below. We will consider and act upon any request in accordance with applicable data protection laws.

If you are located in the EEA or UK and you believe we are unlawfully processing your personal information, you also have the right to complain to your Member State data protection authority or UK data protection authority.

If you are located in Switzerland, you may contact the Federal Data Protection and Information Commissioner.

11.1 Withdrawing your consent:

If we are relying on your consent to process your personal information, which may be express and/or implied consent depending on the applicable law, you have the right to withdraw your consent at any time. You can withdraw your consent at any time by contacting us by using the contact details provided in the section 'HOW CAN YOU CONTACT US ABOUT THIS NOTICE?' below.

However, please note that this will not affect the lawfulness of the processing before its withdrawal nor, when applicable law allows, will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.

11.2 Account Information

If you would at any time like to review or change the information in your account or terminate your account, you can:

Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our legal terms and/or comply with applicable legal requirements.

11.3 Cookies and similar technologies:

Most Web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove cookies and to reject cookies. If you choose to remove cookies or reject cookies, this could affect certain features or services of our Services. For further information, please see our Cookie Notice.

If you have questions or comments about your privacy rights, you may email us at legal@i-migrator.com.

12. Controls for Do-Not-Track features

In Short: Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track ('DNT') feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognising and implementing DNT signals has been finalised. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online.

If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this Privacy Notice.

California law requires us to let you know how we respond to web browser DNT signals. Because there currently is not an industry or legal standard for recognising or honouring DNT signals, we do not respond to them at this time.

13. Do we make updates to this notice?

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this Privacy Notice from time to time. The updated version will be indicated by an updated 'Revised' date at the top of this Privacy Notice. If we make material changes to this Privacy Notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification.

We encourage you to review this Privacy Notice frequently to be informed of how we are protecting your information.

14. How can you contact us about this notice?

If you have questions or comments about this notice, you may contact our Data Protection Officer (DPO) by email at legal@i-migrator.com, or contact us by post at:

I-Migrator Ltd
Data Protection Officer
Aston House
Cornwall Avenue
London N3 1LF
United Kingdom

15. How can you review, update, or delete the data we collect from you?

You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable UK law.

To request to review, update, or delete your personal information, please visit: www.i-migrator/accounts.