Privacy policy
This policy explains what personal data this website collects, why, where it goes and what you can ask us to do with it. It is written for visitors in the UAE and for international visitors, including those in the European Union and the United Kingdom.
Draft prepared 4 September 2026 — pending legal review. Items marked “[Founder to confirm]” or “[Legal review]” will be completed before this policy is treated as final.
1. Who is responsible for your data
The website immigration-uae.com (“the site”) is operated by Cosmos Immigration (“we”, “us”), a private immigration and business services firm with offices in Dubai and Abu Dhabi. Cosmos Immigration decides why and how personal data collected through the site is processed and is therefore the controller of that data.
Contact for anything in this policy: info@immigration-uae.com, or by post to either office listed in section 14. [Founder to confirm the legal entity name and licence number to print here.]
2. What we collect
2.1 Information you give us through the enquiry forms
| Field | Why we ask for it |
|---|---|
| Full name | So a consultant can address you and match your enquiry to later correspondence. |
| Email address | To send your reference number and acknowledgement, and to reply. |
| WhatsApp or phone number (optional) | To reply by call or message if you prefer that channel. |
| Country of nationality and country of residence | Visa and residence rules differ by nationality and by where you currently live. |
| Service of interest | Golden Visa, residence, family visa, visit visa, company setup, investment or other. |
| Your answers to the form’s questions | For example the Golden Visa category you are considering, the type of business activity, or whether you need residence visas for staff. Only the questions relevant to the chosen form are stored. |
| Your message | Free text you choose to write, limited in length. |
| Preferred callback time (callback requests only) | Morning, afternoon or evening. |
| Consent record | The exact consent sentence shown to you and the time you accepted it. |
The forms do not ask for, and you should not send, passport numbers, Emirates ID numbers, document scans, bank details or health information. If you include such information in a free-text message, we treat it under this policy but may delete it from the record and ask you to provide it through a secure channel later, if and when it is needed.
2.2 Information recorded automatically when you submit a form
| Data | Why |
|---|---|
| A hashed form of your IP address | We store a salted one-way hash, not the address itself, to limit abuse and repeated submissions. |
| Browser and device description (user agent) | For security and to diagnose form problems. |
| The page you landed on, the page you were on when you submitted, and the referring site | To understand which content leads to enquiries. |
| Campaign parameters in the address (UTM tags, Google and Meta click identifiers) | To attribute enquiries to the advertising or link that brought you here. |
| Time of submission and a reference number | The reference number is shown to you and used in all correspondence. |
2.3 Information collected by analytics, only with your consent
If you accept analytics, we record page views, use of the eligibility checker and business setup finder (including the outcome category shown to you), clicks on contact buttons and links, and how far you scroll. Analytics events never contain your name, email address, phone number or the text of your enquiry. Until you accept, analytics storage is off and no analytics cookie is set.
2.4 Information you send by email, phone or WhatsApp
If you contact us directly, we hold what you send and our replies. WhatsApp is operated by Meta Platforms under its own terms and privacy policy; if you prefer not to use it, email or phone are available.
3. Why we use it
- To read your enquiry, review the route you are asking about and reply to you.
- To prepare for and conduct a consultation if you ask for one.
- To send your reference number and an acknowledgement, and to keep a record of the consent you gave.
- To protect the site and our systems against spam, automated abuse and repeated submissions.
- To understand, in aggregate, which pages, tools and campaigns lead to enquiries, so that we can improve the content.
- To keep records we are required by law to keep, and to establish or defend legal claims.
We do not sell personal data. We do not use enquiry data to send marketing newsletters unless you separately ask to receive them.
4. Legal bases
4.1 United Arab Emirates
We process personal data in line with Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the “PDPL”). Our processing rests on your consent, which you give when you submit a form and accept the consent sentence shown, and, where consent is not the relevant basis, on the need to take steps you have asked for before entering into a contract, to comply with legal obligations, and to protect our systems and legal rights. [Legal review: confirm the PDPL provisions relied on and the status of the PDPL Executive Regulations at the date of publication.]
4.2 European Union and United Kingdom visitors
If you are in the EU or the UK, the General Data Protection Regulation or the UK GDPR may apply to our processing of your data. Where it does, our legal bases are: your consent (Article 6(1)(a)) for analytics and for the enquiry itself; steps taken at your request before entering into a contract (Article 6(1)(b)) when you ask for a consultation; and our legitimate interests (Article 6(1)(f)) in securing the site and understanding how it is used, balanced against your rights. [Legal review: confirm whether the site is treated as offering services to EU or UK residents under Article 3(2) and whether an EU or UK representative is required.]
5. Where your data is stored
- Lead database. Form submissions are written to a database on the hosting account for this site, with access restricted to the operator. [Founder to confirm the hosting provider and the country in which the server is located.]
- Email. Each submission is emailed to the operator’s enquiry inbox through a transactional email provider, and an acknowledgement is emailed to you. Copies exist in those mailboxes.
- Consultant systems. A consultant who handles your enquiry may keep notes in the operator’s client records. A connection to a customer relationship management system is built into the site but is switched off; if it is switched on, this policy will name the provider.
- Analytics. If you consent, analytics data is processed by the analytics provider named in section 8 on its own infrastructure.
Your data may therefore be stored outside the UAE, and, for EU and UK visitors, outside the EU and the UK. Where a transfer out of the EU or UK takes place, we rely on the safeguards available under the GDPR or UK GDPR for the provider concerned. [Legal review: confirm transfer mechanism per provider.]
6. How long we keep it
- Enquiries that do not lead to an engagement: 24 months from our last contact with you, after which the record is deleted or anonymised. [Founder to confirm.]
- Enquiries that lead to an engagement: retained as part of the client file for the period required by UAE law and the operator’s record-keeping obligations. [Founder to confirm the period.]
- Security logs (hashed IP, rate-limit counters): kept only as long as needed to operate the protection, and no longer than the enquiry record they relate to.
- Analytics: retained according to the retention setting of the analytics tool. [Founder to confirm the setting once the analytics property exists.]
You can ask us to delete your enquiry earlier; see section 9.
9. Your rights
Depending on where you are, the law gives you some or all of the following rights, and we apply them to everyone who asks:
- to be told what personal data we hold about you and to receive a copy;
- to have inaccurate data corrected;
- to have your data deleted, where we have no continuing legal reason to keep it;
- to restrict or object to processing, including any processing based on legitimate interests;
- to receive the data you provided in a portable format;
- to withdraw consent at any time, without affecting processing that took place before withdrawal;
- not to be subject to a decision based solely on automated processing that has legal or similarly significant effects. The tools on this site give informational results only and do not make such decisions.
To exercise a right, email info@immigration-uae.com from the address you used with us, quoting your reference number if you have one. We may ask you to confirm your identity before acting. We reply within the period the applicable law allows.
If you are in the UAE, you may complain to the UAE Data Office. If you are in the EU, you may complain to the supervisory authority in your member state. If you are in the UK, you may complain to the Information Commissioner’s Office. We would ask you to raise the matter with us first so that we can try to resolve it.
10. Security
The site is served over an encrypted connection. Form submissions are validated on the server, protected against automated abuse by a hidden field, timing checks, a request token and rate limits, and written to the database with parameterised queries. IP addresses are stored only as salted hashes. Database credentials and API keys are kept outside the web root and are never published. Access to the lead database and the enquiry inbox is limited to the people who need it.
No system is perfectly secure. If we become aware of a breach affecting your data, we will notify you and the relevant authority as the applicable law requires.
11. Children
The site and its services are intended for adults. Enquiries about sponsoring children are made by the sponsoring parent or guardian. We do not knowingly collect personal data from anyone under 18 through this site, and we will delete such data if we learn of it.
12. Third-party links
Pages link to official UAE government and authority websites and, occasionally, to other external sites. Those sites have their own privacy policies and we are not responsible for them. Links to official sources are provided so that you can check the rule at its origin.
13. Changes to this policy
We will update this policy when our processing changes, for example if analytics is enabled, a customer relationship management connection is switched on, or a provider changes. Each version carries its date. Where a change materially affects you, we will draw attention to it on this page.
14. Contact
Cosmos Immigration · info@immigration-uae.com · +971 4 357 7796
- Dubai: Office 105-25 & 110, Al Fajer Complex, Umm Hurair Road, Oud Metha, Dubai, PO Box 30757, United Arab Emirates
- Abu Dhabi: Office 1402, Abdullah Darwish Building, Salam Street, Al Zahiyah, Abu Dhabi, United Arab Emirates
- Hyderabad: Office 107, 1st Floor, Babukhan Mall, Somajiguda Circle, Opp. South India Shopping Mall, Hyderabad, Telangana 500016, India
Related: Terms of use · Disclaimer · About.
Draft version dated , pending legal review. Immigration UAE is a brand of Cosmos Immigration, a private immigration and business-services consultancy. It is not affiliated with the Government of the UAE, ICP, GDRFA, MOHRE or any UAE government authority.