What this policy covers
This policy covers the Vizabolt public website at vizabolt.com — the service pages, the guides, and the enquiry forms on them.
- The client portal at app.vizabolt.com is a separate, login-protected system. Information handled inside an active case is governed by the terms of that engagement.
- This policy does not cover other websites we link to, including government and consular sites.
Information you provide
The website has one kind of form: an enquiry form. It appears as the guided enquiry at /start, as the consultation request that opens from "Book a Consultation" buttons, and as short enquiry forms on some guides. Depending on which one you use, it may collect:
Enquiry fields
- Your name and email address
- A phone or WhatsApp number — required on the guided enquiry forms and the short pop-up form, optional on the consultation request
- Your country of residence
- The service or destination you are enquiring about
- For a visit visa: how many people are travelling, the intended travel month and, if you choose, the main purpose of the trip
- For a relocation: your intended timeframe
- Your preferred contact method, if you choose one
- Anything you choose to write in the free-text message field
- Your confirmation that you agree to be contacted
The website does not ask for your nationality, your immigration or visa history (including any previous refusal), health information, your family situation, your income or employment details, or eligibility details such as education or investment amounts. If they matter for your route, an advisor discusses them with you in the consultation, and identity details needed for a case are collected later through the login-protected client portal.
Information collected automatically
When you submit an enquiry, the following is recorded alongside it so we know where the enquiry came from:
- The page path and URL you submitted from
- Campaign parameters (utm_source, utm_medium, utm_campaign, utm_content, utm_term) from the link you arrived through, if it had them
- The time of submission, and which part of the site the enquiry came from
- Your IP address, which our website server passes to the CRM so it can limit repeated or automated submissions. The CRM uses it for that check and does not store it with your enquiry
Our hosting providers also generate standard server and request logs as part of operating the site. Our own application logs are written so that personal fields — names, email addresses, phone numbers, message text and similar — are replaced with a redaction marker before the line is written.
Cookies, tracking and your choices
On your first visit the site asks what you allow. Nothing optional is switched on until you choose it, and you can change your choice at any time with the "Cookie Preferences" link at the bottom of every page. There are three categories:
- Strictly necessary — always on. The pages and enquiry forms themselves, and a record kept in your own browser of how you first arrived (the page you landed on, the referring site and any campaign parameters in the link). That record stays on your device and is sent to us only if you submit an enquiry. Your privacy choice is also remembered in your browser. The site sets no cookies of its own.
- Analytics — off unless you allow it. Vercel Web Analytics and Speed Insights, which report aggregate page views and page speed to Vercel. They do not set cookies.
- Marketing — off unless you allow it. The Meta Pixel, which sets Meta cookies and reports to Meta that a page was viewed, that a WhatsApp chat was opened, or that an enquiry was sent. It is not sent your name, email address, phone number, the answers you give in a form or the contents of your message, and the page address it receives has any query string removed. It does not run on the enquiry forms, the confirmation page or the legal pages at all.
Before you make a choice, and whenever you reject optional tracking, your browser makes no request to Meta or to Vercel’s analytics services. Fonts, images and the site’s own scripts are served from our own domain. If you withdraw marketing consent, the site stops sending events and removes the Meta cookies it can reach; cookies Meta holds on its own domains have to be cleared in your browser or Meta account.
How your information is used
- To respond to your enquiry and contact you about it
- To understand which service fits your situation, and to tell you when one does not
- To prepare and administer your case if you go on to become a client
- To keep an internal record of enquiries and the work done on them
- To understand which parts of the website generate enquiries, using the source and campaign fields above
- If you allow it, to measure site usage (analytics) and advertising (marketing), as described above
We do not sell your information, and we do not share it for anyone else's marketing.
Where your information goes
When you submit an enquiry, your browser sends it to this website only. The website then forwards it from its own server to the Vizabolt CRM, where it becomes a lead record. Your browser never contacts the CRM directly.
- Your browser submits the form to vizabolt.com.
- The website server forwards it to the Vizabolt CRM over an authenticated connection.
- The CRM stores it in its database as an enquiry record for our team to act on.
- The CRM emails a notification containing your enquiry to the Vizabolt team members responsible for new enquiries, so it is answered promptly. A copy of that notification is kept in the CRM with the enquiry.
Service providers
We use the following providers to operate the website and the systems behind it. They process information on our behalf in order to provide their service:
Providers actually used
- Vercel — hosts this website and runs the server-side code that receives enquiries; Vercel Web Analytics and Speed Insights only if you allow analytics
- Railway — hosts the Vizabolt CRM application that enquiries are forwarded to
- Supabase — the PostgreSQL database the CRM stores records in, and the sign-in system for the client portal
- Resend — sends the CRM’s emails, including the internal notification of a new enquiry
- Sentry — receives error reports from the CRM so faults can be fixed; configured not to collect personal data by default
- Cloudflare R2 and Backblaze B2 — store documents that clients upload through the client portal, and their backup; not used for website enquiries
- Meta (Facebook) — advertising measurement, only if you allow marketing; see “Cookies, tracking and your choices”
- WhatsApp (Meta) — only if you choose to message us; opening a chat shares your number with them, as any WhatsApp message does
That list is the complete set of third parties involved in handling website enquiries and the systems behind them. If we add another, this section changes.
Where processing happens
Our hosting and database providers operate infrastructure in multiple countries, so your information may be processed on servers outside the United Arab Emirates.
Security
Measures currently in place on the website side include:
- The site is served over HTTPS, with HTTP Strict Transport Security enabled.
- A Content Security Policy and related security headers are applied to the pages of this site.
- Enquiries are forwarded from our server, not from your browser, so the credential used to authenticate with the CRM is never exposed to the browser.
- Application logs redact personal fields before writing them.
- Enquiry forms carry basic automated-submission protection.
No system can be guaranteed secure, and we do not claim otherwise. This section describes measures taken, not an assurance of outcome.
How long information is kept
Enquiry and case records, and the notification emails about them, are kept for as long as needed to respond to you, to provide the service you engage us for, and to meet operational and legal record-keeping requirements that apply to us.
Requests about your information
You can ask us what enquiry information we hold about you, ask for it to be corrected, or ask us to delete it where we are not required to keep it. Email info@vizabolt.com and tell us enough to identify the enquiry — the email address you used and roughly when you submitted it is usually enough.
If you asked to be contacted and would rather we did not, say so and we will stop.
Children
This website is intended for adults arranging their own applications or those of their family. We do not knowingly collect information directly from children through it. Where a case involves children as applicants, their details are provided by the adult managing the case through the client process, not through this website.
Changes to this policy
This policy is updated when the way the website handles information changes. The date at the top reflects the last substantive change.
Contact
Questions about this policy, or a request relating to your information, can be sent to info@vizabolt.com.