Privacy Notice

1. Who we are (the controller)

The data controller is Visa and Relocation Services Limited, trading as Valoris Global, a company registered in England & Wales under number 08084039, registered office Manor House, 38 High Street South, Stewkley, Leighton Buzzard, LU7 0HR, United Kingdom.

For any privacy matter, or to exercise the rights in section 8, write to office@valorisglobal.uk marking your message "Data protection". Requests reach the director, Christopher John Mills, who is accountable for data protection here. As a small bureau we are not required to appoint a statutory Data Protection Officer.

2. What we collect

• Identity & contact — name, date and place of birth, nationality, passport number and copy, national identity number, address, phone, e-mail.
• Professional & financial — employer or business, commercial registration, role, and the bank statements you supply to evidence means.
• Travel — itineraries, bookings, insurance, and the prior visas and entry/exit stamps visible in your passport.
• Screening — the result of a manual name check against the free, publicly published consolidated sanctions lists, recorded on your file with the date it was made. We do not screen politically-exposed-person lists, adverse media or law-enforcement notices, and we hold no access to them.
• Technical — IP address, timestamps and request details logged for security when you use our forms.

3. Why we use it — and our lawful basis

Purpose	Lawful basis (UK GDPR Art. 6)
Preparing and presenting your visa or mobility file	Art. 6(1)(b) — performance of our contract with you
Reading and checking your documents and standing	Art. 6(1)(b) contract; Art. 6(1)(f) legitimate interests (presenting only accurate files)
Sanctions name check and fraud prevention	Art. 6(1)(f) — legitimate interests (not presenting a sanctioned person to an authority, and protecting the bureau against fraud)
Service messages about your file	Art. 6(1)(b) — contract
Accounting, audit and legal defence records	Art. 6(1)(c) legal obligation; Art. 6(1)(f) legitimate interests
Security logging of form submissions	Art. 6(1)(f) — preventing abuse of our forms

We do not sell your data, we do not use it for advertising, and no decision about you is made by automated means alone — every assessment of a file is made by a person.

4. Special-category and criminal-offence data

Some documents a destination requires may reveal special-category data (for example a medical note) or criminal-offence data (for example a police-record certificate). We request these only where the authority requires them. We rely on your explicit consent (Art. 9(2)(a)) and, for criminal-offence data, on Art. 10 with the legal-claims and substantial-public-interest conditions in Schedule 1 of the Data Protection Act 2018. You may withdraw consent at any time, though we may then be unable to continue your file.

5. Who we share it with

• The competent immigration authority or consulate for your chosen destination — the purpose of the file.
• Processors acting on our instructions — our website/e-mail hosting provider and our transactional e-mail relay, bound by contract to process only as instructed.
• Professional advisers in the destination country (for example a lawyer or accountant) where your file requires it, and with your knowledge.

We never sell or rent your data and disclose it to no one else, except where the law compels us.

6. International transfers

Presenting your file necessarily means sending it outside the United Kingdom, to the authority of the country you wish to visit. For such transfers we rely on:

• Art. 49(1)(b) — the transfer is necessary to perform the contract you asked us to perform; and/or
• your explicit informed consent under Art. 49(1)(a), obtained before any submission, having told you the destination may not offer UK-equivalent protection; and/or
• the UK International Data Transfer Agreement (or UK Addendum) with a service provider, where one is in place.

7. How long we keep it

Record	Retention
Identity and application documents of a submitted file	6 years from the end of the engagement
Enquiries that do not become a file	12 months from last contact
Accounting and invoicing records	6 years (statutory)
Screening results	6 years, held with the file
Security / abuse logs	12 months

At the end of the period the record is deleted, or anonymised where only aggregate statistics are needed.

8. Your rights

You have the right to access your data; to have inaccurate data rectified; to request erasure; to restrict processing; to object to processing based on legitimate interests; to receive your data in a portable form (portability); and to withdraw consent at any time where we rely on it. Withdrawal does not affect the lawfulness of processing carried out beforehand.

Write to office@valorisglobal.uk. We respond within one month, free of charge, and may first ask you to confirm your identity.

9. Security and personal-data breaches

Your file is held on access-controlled systems, transmitted over encrypted connections, and seen only by those who need it to prepare your application. The administration area is password-protected and session-bound. If a breach occurs that is likely to risk your rights, we will notify the Information Commissioner's Office within 72 hours of becoming aware and will tell you without undue delay where the risk to you is high.

10. Cookies

This website sets no advertising and no analytics cookies. The only cookie we set is a strictly necessary session cookie. It keeps an administrator signed in, protects the forms in your secure applicant portal against forged requests, and carries the confirmation shown after you send a form on this site; it carries no tracking identifier. Because it is strictly necessary, no consent banner is required. Our pages load web fonts from a third-party font service (Google Fonts), which receives your IP address when a page loads; you may block that connection without affecting the site.

11. Complaints

If you are unhappy with how we have handled your data, please tell us first — we would rather put it right. You also have the right to complain to the UK supervisory authority:

Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, United Kingdom
Helpline 0303 123 1113 · ico.org.uk/make-a-complaint (opens in a new tab)

12. Changes to this notice

We review this notice periodically. The version and date above change whenever we amend it; material changes affecting an open file are notified to you directly.

Change note — version 2.3, 26 September 2026. Section 3 described the checking of your documents as verification "at source". The bureau reads and checks the documents you supply; it does not contact the bank, registry or government that issued them, and the row now says so. Section 10 said the session cookie only keeps an administrator signed in. It also protects the forms in the applicant portal and carries the confirmation shown after a form is sent; section 10 now says so and names the font service. A contents list and a summary were added. No other wording changed.

Change note — version 2.2, 2 August 2026. Section 2 previously said we screen politically-exposed-person lists, and section 3 gave Art. 6(1)(c) (legal obligation) as a basis for screening. Neither was correct: this bureau makes a manual name check against the free, publicly published consolidated sanctions lists and nothing further, and no statute obliges it to do so. Both entries now describe the check that is actually made, on the basis that actually applies.