Privacy Policy

The data fiduciary is Pro Lifeset Overseas Pvt Ltd (operating the SureshotVisa brand). Our Grievance Officer is Narinderpal Singh Chahal (Director), reachable at info@sureshotvisa.com.

This policy applies to personal data collected through our website, lead forms, client portal, and direct communications (phone, email, WhatsApp, in person). It does not cover third-party websites or services that operate under their own separate policies.

• Identity and contact data: name, email, phone, postal address, date of birth.
• Immigration profile: country of interest, education records, work history, language-test scores, travel and visa history.
• Application documents: passport scans, photographs, financial proofs, qualification certificates, visa refusal letters, CAIPS/GCMS notes.
• Account data: login identifiers and authentication events (phone OTP, email magic link, Google sign-in). Passwords are not stored.
• Payment data: billing name, invoice details and transaction references. Full card and bank details go directly to our payment processor.
• Usage and device data: IP address, browser/device type, pages visited and analytics events.

We collect data through direct provision (forms, consultations, portal uploads, payments), data generated while you use the site (cookies, analytics), and data retrieved on your instruction (e.g. CAIPS/GCMS notes obtained from immigration authorities).

• Assess eligibility and provide visa/immigration consultancy.
• Prepare, review and lodge visa applications through official channels.
• Manage cases, process payments and issue GST invoices.
• Communicate case status and reminders via email and WhatsApp.
• Comply with consultancy-licence record-keeping, tax and other legal obligations.
• Operate, secure and improve our website and services.

We process personal data on the following bases:

• Your consent, given when you submit forms, create an account or engage our services. Consent may be withdrawn at any time.
• Performance of our contractual agreement to deliver the services you request.
• Compliance with legal obligations (licence, tax, record-keeping).
• Legitimate uses permitted under the DPDP Act, such as responding to enquiries.

Online payments are processed by Razorpay, a PCI-DSS-compliant payment provider, which also supports international cards. Card and banking details are captured by the processor under its own policies. We receive only the transaction ID, the last few card digits and the billing name. We do not receive, store or process full card numbers on our servers.

We share personal data only to deliver our services, under confidentiality and data-processing terms, with:

• Visa posts and immigration authorities (e.g. IRCC) and service partners such as VFS Global, AVAC, biometrics panels and medical panels.
• Service providers (data processors): Supabase (database, storage, authentication), Vercel (hosting and site analytics), Razorpay (payments), Resend (transactional email), and our WhatsApp Business / CRM chat widget (Meta) for messaging.
• Professional advisers, auditors or regulators where required by law.

We do not sell personal data.

Some processors store or process data outside India:

• Supabase (Singapore).
• Vercel and Resend (United States and other regions).

These transfers comply with the DPDP Act and are protected by contractual safeguards. You acknowledge that such transfers are necessary to provide the services you request.

We retain data for as long as needed to provide our services and to meet legal, licence and tax obligations — generally for the duration of your case and the statutory periods afterwards (e.g. tax records as required under Indian law). Data is deleted or anonymised when no longer required, unless retention is legally mandated.

Under the DPDP Act, you have the right to:

• Access: obtain a summary of the personal data we process.
• Correction and completion: have inaccurate or incomplete data corrected.
• Erasure: request deletion where the data is no longer needed and retention is not legally required.
• Withdraw consent: at any time, for consent-based processing.
• Nominate: appoint another person to exercise your rights in case of death or incapacity.
• Grievance redressal: raise complaints with our Grievance Officer.

To exercise your rights, email info@sureshotvisa.com. We respond within the timeframes set by the DPDP Act.

We do not knowingly process the personal data of children (under 18) without verifiable parental or lawful-guardian consent. For dependent or minor applicants, the parent/guardian provides and manages consent.

Measures

• Encryption in transit (TLS) and at rest for data held by our storage providers.
• Role-based access and row-level security, so staff see only the data their role requires.
• Passwordless authentication (OTP, magic link, Google sign-in) and secret-key controls.
• Logging and error monitoring with personal data redacted where feasible.

No system is perfectly secure. If a personal-data breach occurs, we will comply with the DPDP Act, including notifying affected persons and the Data Protection Board as required.

We use strictly necessary cookies for authentication and security, and privacy-respecting analytics (Vercel Analytics) to understand site usage and improve our services. You can manage cookies through your browser settings; disabling some cookies may affect site functionality.

Our website may link to third-party sites (e.g. government portals). We are not responsible for their content or privacy practices; please review their policies independently.

For any data-handling concerns, contact:

Narinderpal Singh Chahal (Director)
Email: info@sureshotvisa.com
Mail: Second Floor, SCO 06, Bhupindra Rd, Patiala, Punjab 147001

We aim to acknowledge within 48 hours. Resolution follows DPDP Act requirements. Unresolved complaints may be escalated to the Data Protection Board of India.

We may update this policy from time to time. The "Last updated" date reflects the current version. Material changes are notified to active clients by email. Continued use of our services after changes constitutes acceptance. This policy is read together with our Terms of Service.