Privacy Policy
This policy explains what Passport Heritage, operated by [⚠️ NOT SET: PLACEHOLDER_LEGAL_ENTITY], collects about you, why, and what you can do about it. Data-protection requests go to [⚠️ NOT SET: PLACEHOLDER_SUPPORT_EMAIL].
What we collect
If you join the mailing list
Your email address, which page or CTA you subscribed from, the country you indicated an interest in, and — if you subscribed after the quiz — the eligibility category your answers produced.
If you take the eligibility quiz
The quiz runs in your browser. Your answers are not sent to us unless you choose to submit your email at the end, in which case we store the resulting eligibility category alongside your address so our follow-up is relevant. We do not store your individual answers.
If you request a service
Your name, email, the service you asked about, the country, and whatever you write in the free-text and family-history fields. Those often contain sensitive family history — ancestors' names, birth dates and places, sometimes living relatives' names. Please only include what is useful, and only about people whose information you are comfortable sharing. If you tick the box asking to be introduced to an immigration professional, we also store that choice and, only because you asked, share your enquiry with the partner we refer you to.
If you buy something
No account is created — there is no login on this site. Guides are delivered as a PDF by email through our external store, which handles payment and acts as merchant of record. We never see or store your card details; the store shares only a purchase confirmation with us.
Automatically
Standard server logs, and analytics about how pages are used. Where analytics or advertising cookies are used, they are set only with your consent in regions that require it.
Why we hold it
- To deliver what you bought and give you access to it (contractual necessity).
- To send you updates you asked for — law changes, new country guides (consent, which you can withdraw at any time).
- To respond to service enquiries you initiated.
- To keep financial and tax records of sales, which we are legally required to retain.
- To understand which pages work, so we can improve them (legitimate interests).
Who we share it with
We do not sell your data in bulk, and we do not share a service enquiry with anyone outside Passport Heritage unless you have explicitly asked us to. We share it only with services we need to operate, or with a partner you have opted into:
- Supabase — database hosting for quiz results, email sign-ups and enquiry forms. We do not create user accounts.
- Our store — payment processing and delivery of purchased guides, acting as merchant of record. It is the controller of your payment data under its own privacy policy.
- Our email provider — to send the updates you subscribed to.
- Our scheduling provider — if your purchase includes a call, to book it.
- A referral partner — only if you tick the opt-in box on a service enquiry asking to be introduced to an immigration professional for full-service handling. We share that specific enquiry with the partner we refer you to, and may receive a referral fee for the introduction. Leaving the box unchecked means this never happens.
- Analytics and advertising platforms — where you have consented, to measure which campaigns lead to purchases.
We may also disclose data where we are legally required to. If the business is ever sold, customer records may transfer with it; you would be told first.
International transfers
Our providers may process data outside your country, including in the United States. Where data leaves the EU or UK, transfers rely on the standard contractual clauses or an equivalent approved mechanism offered by those providers.
How long we keep it
- Mailing list — until you unsubscribe, then we retain a suppression record so we don't email you again.
- Service enquiries — up to two years after our last contact.
- Purchase records — as required for tax and accounting (typically six to seven years). There is no account or access record to hold beyond that, since guides are delivered once by email rather than gated behind a login.
Your rights
Depending on where you live, you may have the right to access a copy of your data, correct it, delete it, object to or restrict how we use it, port it elsewhere, and withdraw consent at any time. Residents of the EU and UK have these rights under the GDPR; California residents have comparable rights under the CCPA, including the right not to be discriminated against for exercising them.
Email [⚠️ NOT SET: PLACEHOLDER_SUPPORT_EMAIL] and we will respond within 30 days. If you are unhappy with how we handled it, you can complain to your local data-protection authority.
Deleting your data here does not affect any guide you have already downloaded, and does not delete your purchase record with our store — contact them separately for that.
Children
This site is not intended for anyone under 16, and we do not knowingly collect their data. If a family case involves a minor, please do not submit their details through the public forms.
Changes
If we change this policy materially we will update the date above and, for changes affecting people on our list, tell you by email.