Privacy Policy

1. Data Controller

LeadVisaFlow ("we") is the data controller for personal data collected through this application. For any questions, contact us at: facilitateurnumerique@gmail.com.

2. Data Collected

We collect the following data:

• Identification data: first name, last name, email address, phone number (optional)
• Immigration case data: visa type, country of origin, personal situation, legal history, previous applications, urgency level, estimated budget
• Account data: email address, password (hashed)
• Technical data: functional cookies necessary for the service

3. Purpose of Processing

Your data is processed for the following purposes:

• Automatic qualification and scoring of your immigration inquiry
• Connecting you with an immigration lawyer
• Managing your user account
• Sending transactional emails (confirmation, case updates)
• Improving our services

4. Legal Basis

Data processing is based on your explicit consent (GDPR Article 6.1.a), collected via the consent checkbox when submitting the form. For account holders, processing is also based on contract performance (GDPR Article 6.1.b).

5. Data Recipients

Your data is only accessible to the lawyer to whom your inquiry is directed and to platform administrators. We do not sell or share your data with third parties for commercial purposes.

6. Data Retention

Your personal data is retained for the duration necessary to process your case, then for a maximum of 3 years after last contact. You may request deletion at any time.

7. Your Rights

Under the GDPR, you have the following rights:

• Right of access: obtain a copy of your personal data
• Right to rectification: correct inaccurate data
• Right to erasure: request deletion of your data
• Right to portability: receive your data in a structured format
• Right to object: object to the processing of your data
• Right to withdraw consent: withdraw your consent at any time

To exercise these rights, contact us at facilitateurnumerique@gmail.com. You may also file a complaint with your local data protection authority.

8. Data Security

We implement appropriate technical and organizational measures to protect your data: encrypted communications (TLS), password hashing, role-based access control (RLS), and secure hosting.

9. International Transfers

Our services are hosted on cloud infrastructure. Any data transfers outside the EU are governed by standard contractual clauses approved by the European Commission.

10. Cookies

We use only strictly necessary cookies for the application to function (authentication, interface preferences). No tracking or advertising cookies are used.