Skip to main content
Skip to content
XIPHIAS Immigration

Home / Privacy Policy

Privacyالخصوصية

Privacy Policy

Effective: 09 Oct 2025

  • What personal data we collect and why.
  • How to control cookies and marketing preferences.
  • Your rights under GDPR / CPRA / DPDP.
  • How to contact us or lodge a complaint.
GDPR / UK GDPRCCPA / CPRAIndia DPDP

Use these links to change your preferences at any time.

Who we are

This Privacy Policy explains how we collect, use, disclose, and safeguard personal data when you use our website and services.

Controller
XIPHIAS Immigration Private Limited, Bengaluru, Karnataka, India
Data Protection Officer
Not applicable. Contact our Privacy Team at [email protected].
India: Grievance Officer
[email protected] (we aim to respond within statutory timelines)

What we collect & why we collect it

We collect the following categories of data for the purposes described below.

Data categoryPurposeLegal basis / CPRARetentionRecipients
Account & contactCreate/manage your account; respond to enquiries.Contract; legitimate interests (service operations).For as long as you have an account + 24 months.Hosting, CRM, support vendors.
Usage & deviceAnalytics; improve performance and UX.Consent (cookies/SDKs) where required; legitimate interests.12–24 months aggregated.Analytics providers, A/B testing tools.
Marketing preferencesSend newsletters and offers; measure effectiveness.Consent (opt-in); right to withdraw at any time.Until you unsubscribe + 24 months logs.Email service providers; advertising partners.
Support & chat transcriptsTroubleshoot issues; quality assurance.Legitimate interests; contract.Up to 36 months unless required longer.Customer support platforms.

Cookies & tracking

We use essential cookies to make the site work and optional cookies/SDKs for analytics and advertising. You can change your preferences any time via Cookies Policy.

  • Essential: security, load balancing, session management.
  • Analytics: page views, feature usage, performance.
  • Advertising: measurement, frequency capping, personalization.

Your privacy rights

EU/UK (GDPR)

Access, rectify, erase, restrict, object, and data portability; lodge a complaint with a supervisory authority.

California (CCPA/CPRA)

Right to know/delete/correct, opt-out of sale/share, and limit use of sensitive personal information.

India (DPDP)

Withdraw consent, access/correct/erase, grievance redressal; nominate an alternate contact for rights requests.

To exercise your rights, email [email protected]. We may request additional information to verify your identity and will respond within applicable timelines.

International data transfers

Where we transfer personal data across borders, we implement safeguards such as Standard Contractual Clauses, adequacy decisions, or other lawful mechanisms. You can request a copy of relevant safeguards by contacting us.

How we secure your data

  • Encryption in transit; restricted access on a need-to-know basis.
  • Vendor due diligence and contractual controls.
  • Organizational measures: policies, training, and incident response.

No method of transmission or storage is 100% secure. We will notify users and/or regulators where required by law in the event of a breach.

Children’s privacy

Our services are not directed to children. If you believe a child provided personal data, contact us so we can take appropriate action. Where parental consent is required, we will not process a child’s data without verifiable consent.

Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you by email and/or a prominent notice on our site. The date at the top indicates when this policy was last updated.

Version history

  • v1.0 — 09 Oct 2025: Initial publication.

Contact us

General privacy enquiries

Email: [email protected]
Address: XIPHIAS Immigration Private Limited, Bengaluru, Karnataka, India

India grievance officer

Email: [email protected]
We aim to acknowledge queries promptly and resolve them within statutory timelines.

This page is provided for informational purposes and does not constitute legal advice. Consult counsel to tailor it to your operations, vendors, and jurisdictions.

In detail

Further provisions carried forward

What we collect

We may collect the following information

  • Name and Job title
  • Contact information including email address
  • Demographic information such as Postal codes, preferences and interests
  • Other information relevant to customer surveys and/or offers

What we do with the information we gather

We require this information to understand your needs and provide you with a better service, and in particular for the following reasons

  • Internal record keeping.
  • We may use the information to improve our products and services.
  • We may periodically send promotional emails about new products, special offers or other information which we think you may find interesting using the email address which you have provided.
  • From time to time, we may also use your information to contact you for market research purposes. We may contact you by email, phone, fax or mail. We may use the information to customise the website according to your interests.

Security

We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.

Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.

Controlling your personal information

You may choose to restrict the collection or use of your personal information in the following ways

  • Whenever you are asked to fill in a form on the website, look for the box that you can click to indicate that you do not want the information to be used by anybody for direct marketing purposes

We will not sell, distribute or lease your personal information to third parties unless we have your permission or are required by law to do so. We may use your personal information to send you promotional information about third parties which we think you may find interesting if you tell us that you wish this to happen.

If you believe that any information we are holding on you is incorrect or incomplete, please write to or email us as soon as possible, at the above address. We will promptly correct any information found to be incorrect.

XIPHIAS Immigration is committed to respecting the privacy of individuals and recognizes the need of people with whom we do business and employees for the appropriate management and protection of any Personal Information that you agree to provide to us. Our Privacy Management Plan includes guidelines on the collection, storage, use and retention of your Personal Information as follows:

Collection

The organization collects personal information about individuals (clients, suppliers, employees, etc) in order to better manage it’s business. The organization will make all reasonable efforts to fully inform such individuals about the planned use/disclosure. The organization will limit the collection and use of personal information to that required for valid business purposes or to comply with legislation.

Cookie/Tracking Technology

The Site may use cookie and tracking technology depending on the features offered. Cookie and tracking technology are useful for gathering information such as browser type and operating system, tracking the number of visitors to the Site, and understanding how visitors use the Site. Cookies can also help customize the Site for visitors. Personal information cannot be collected via cookies and other tracking technology, however, if you previously provided personally identifiable information, cookies may be tied to such information. Aggregate cookie and tracking information may be shared with third parties.

Accuracy

The organization will make every reasonable effort to ensure that the personal information it collects and uses is accurate and complete. Individuals providing personal information will have the opportunity to review and correct their personal information, and on written request by an individual to whom the information relates, the organization will modify the information as required.

Opt-out procedure

At any time you will have the right to opt-out from any program you agreed to opt-in to at this Web site. Any opt-in e-mail that you receive from this Web site shall contain a link through which you may opt-out. Your request shall imply that we shall not send commercial e-mails that would be considered as unsolicited.

You furthermore have the right of access to your personal data and the right to request correction of incorrect, incomplete or irrelevant data. Please contact us by e-mail if you want to review, remove or adapt certain data.

You understand that information transmitted over public networks may be accessed by third parties, and XIPHIAS Immigration will not be liable for any such unauthorized disclosure. Further, you understand that XIPHIAS Immigration may, at its discretion, use third-party service providers to administer Web servers and to store such information on back-up disks, and that a service provider may without XIPHIAS Immigration's knowledge permit an unauthorized third party to do so on its behalf.

Storage

The organization will store personal information using hard copy and/or electronic means in such a way as to prevent unauthorized collection, access, use, disclosure or disposal of the personal information.

Retention

The organization will establish a retention period for all personal information collected. This period may be related to legislation other than PIPEDA (Employment Standards for example).

Disclosure

The organization will not disclose personal information unnecessarily to employees or any third party, unless the effected individual consents.

Access

The organization promotes individual’s right of access to personal information about themselves. The employer will provide access to information upon request. Access will be provided according to established procedures.

Note

Access to a record may be subject to the payment of any fee required according to organization policy. In addition to the care that XIPHIAS Immigration takes directly, we are also working with all of our partner organizations that may at some point handle personal information gathered by us in the course of their relationship with and service to us.

Each third party partner has agreed to meet our standards of privacy, confidentiality and security. All Employees and third party staff who in any way handle or manage Personal Information have acknowledged and agreed to adhere to our Privacy Code and the procedures that support that code.

for further information contact

Chief Privacy Officer