Privacy Policy

At BlueVisa, protecting your personal data is a top priority. This privacy policy explains how we collect, use, store and protect your information when you use our services.

By using our website and services, you accept the practices described in this policy.

1. Data controller

The controller of your personal data is:

2. Data we collect

We collect the following categories of data:

2.1 Identification data

• First and last name
• Email address
• Phone number
• Postal address
• Nationality
• Date of birth

2.2 Application file data

• Passport copy
• Proof of income and assets
• Professional documents
• Police clearance certificates
• Medical certificates
• Identity photos

2.3 Browsing data

• IP address
• Browser type
• Pages viewed
• Visit duration
• Cookies (see dedicated section)

2.4 Payment data

Payments are made by bank transfer. We only keep the transfer references (date, amount, bank reference) needed for accounting purposes and to confirm your payment.

3. Purposes of processing

Your data is collected for the following purposes:

• Performance of the contract: Building and managing your visa/permit application file
• Customer relationship management: Communication, support, billing
• Legal obligations: Retention of accounting documents, responding to authorities
• Service improvement: Usage analysis, anonymised statistics
• Marketing: Newsletters and offers (with your consent)

4. Legal basis for processing

The processing of your data is based on:

• Performance of the contract: Necessary to provide our services
• Your consent: For marketing communications
• Legitimate interest: Improving our services, preventing fraud
• Legal obligation: Retention of accounting documents

5. Recipients of the data

Your data may be shared with:

• Competent authorities of the destination country: immigration authorities and administrations, free zones, company registries, tax administrations and public bodies of Mauritius (in particular the Economic Development Board and the Passport and Immigration Office), the United Arab Emirates, Paraguay or any other country we offer, to the extent required to process your application
• Local agencies and partners: partner agencies that handle all or part of your file under the BlueVisa brand, accounting firms, lawyers, notaries, registered agents, translators, real estate agents, insurers and banks, in the destination country or in the country where they are established (in particular Mauritius, the United Arab Emirates, Paraguay and the United States), limited to the data required for their involvement
• Technical service providers: hosting (secure servers), email delivery, audience measurement tools, customer relationship management
• Affiliates: when you subscribed with an affiliate code, the affiliate concerned only sees the progress status of your subscription, without access to your file
• Judicial or administrative authorities: where required by law or to defend our rights

We never sell your personal data to third parties.

6. International data transfers

BlueVisa is established in Mauritius, where your data is processed. As part of our services, your data and that of your family members are transmitted to the competent authorities and partners of the destination country you have chosen and of the countries where those partners are established (in particular Mauritius, the United Arab Emirates, Paraguay and the United States). Some of these countries do not offer a level of data protection recognised as equivalent to that of the European Union.

These transfers are necessary for the performance of the contract entered into at your request and for the procedures you entrust to us; they are limited to the data strictly required by each party involved, which undertakes to use it solely for the purposes of its assignment. You expressly accept them when subscribing to our services.

Our technical service providers (hosting, email delivery, audience measurement) may be located in the European Union or in countries offering an adequate level of protection, or covered by appropriate safeguards.

7. Data retention

Your data is retained for the following periods:

• Application file data: 10 years after the end of the service (the validity period of the permits)
• Accounting data: 10 years (legal obligation)
• Browsing data: 13 months
• Prospecting data: 3 years after the last contact

At the end of these periods, your data is deleted or anonymised.

8. Your rights

In accordance with the Data Protection Act 2017 of the Republic of Mauritius and, where applicable, the General Data Protection Regulation (GDPR) for residents of the European Union, you have the following rights:

• Right of access: Obtain a copy of your data
• Right to rectification: Correct inaccurate data
• Right to erasure: Request the deletion of your data
• Right to restriction: Restrict the processing of your data
• Right to portability: Receive your data in a structured format
• Right to object: Object to the processing of your data
• Right to withdraw your consent: At any time for processing based on consent

To exercise these rights, contact us at: contact@bluevisa.com

You may also lodge a complaint with the Data Protection Office of the Republic of Mauritius or, if you reside in the European Union, with the data protection authority of your country of residence (in France: the CNIL).

9. Cookies

9.1 What is a cookie?

A cookie is a small text file placed on your device when you visit our website.

9.2 Types of cookies used

• Essential cookies: Required for the website to function (authentication, security)
• Analytics cookies: Help us understand how you use our website (anonymised statistics)
• Preference cookies: Remember your choices (language, display settings)

9.3 Managing cookies

You can manage your cookie preferences in your browser settings. Note that disabling certain cookies may affect your experience on our website.

10. Data security

We implement appropriate technical and organizational measures to protect your data:

• Encryption of data in transit (HTTPS/TLS)
• Secure document storage
• Restricted access to data (need-to-know principle)
• Secure authentication
• Regular backups
• Access monitoring and auditing

11. Terms of use

The terms of use of the Platform are set out in our Terms of Use. By using the Platform, you accept these Terms of Use in full.

12. Changes to this policy

We may amend this privacy policy at any time. Changes take effect as soon as they are published on this page. We encourage you to review this page regularly.

13. Contact

For any question about this policy or your personal data, please contact us: