Privacy Policy

1. Who is responsible for your data

Spain Visa Submit is a service operated by Artem Magomaev in Barcelona, Spain. For privacy questions or requests, contact[email protected].

2. Personal data we collect

Depending on how you use the service, we may collect:

• contact and application information, including your name, email, phone number, preferred language and application details;
• identity, immigration, employment, financial, family and other documents included in the application package you provide;
• correspondence, instructions, authorizations and support messages;
• payment status, billing details, transaction identifiers and refund records;
• technical data such as IP address, browser and device information, access logs, security events and website analytics.

Stripe processes payment-card details directly. We do not receive or store your complete card number or card security code.

We normally receive this data directly from you or from a representative you authorize to act for you.

3. How and why we use personal data

We use personal data to:

• respond to enquiries and assess technical filing readiness;
• create and manage your application, private portal and document intake;
• prepare and complete the technical submission you requested, including uploading your documents to the relevant authority;
• communicate about payment, submission status, official receipts and notifications;
• prevent fraud, abuse and unauthorized access and maintain service security;
• comply with legal, accounting, tax and record-keeping obligations;
• understand website performance and improve the service.

We process data as necessary to take steps at your request and perform our contract, comply with legal obligations and pursue legitimate interests such as service security and improvement. Where applicable law requires consent, we ask for it separately.

Contact and application data, required documents and filing instructions are necessary to provide the service. If you do not provide them, we may be unable to accept or submit the application.

We do not use solely automated decision-making that produces legal or similarly significant effects for you.

4. When we share personal data

We disclose personal data only when necessary for the service or required by law. Recipients may include:

• UGE-CE and other Spanish public authorities or official electronic filing systems relevant to your application;
• Stripe for payment processing, fraud prevention and payment records;
• Railway and its infrastructure providers for private hosting, database and document storage;
• Resend and email infrastructure providers for communications;
• professional advisers, courts, regulators or law-enforcement authorities when legally necessary.

We do not sell personal data. Service providers may process data only for the contracted purpose and subject to appropriate obligations.

5. International data transfers

Some service providers may process data outside Spain or the European Economic Area. Where required, we rely on an adequacy decision, standard contractual clauses or another lawful transfer mechanism. Data submitted to a Spanish public authority is processed under that authority’s own rules and systems.

6. Retention and deletion

Working copies of client documents are kept in private, non-public storage only for as long as needed to complete the submission, provide the official proof and handle a related technical follow-up. They are then scheduled for deletion.

We may retain minimal case, payment, consent, audit and communication records for as long as reasonably necessary to provide the service, resolve disputes and meet legal, tax or accounting obligations. When retention is no longer necessary, the records are deleted or anonymized.

7. Security

We use access controls, private storage, encrypted network connections, restricted service credentials, audit records and data minimization measures designed to protect personal data. No online system can guarantee absolute security, so please use only the private upload and communication channels we provide.

8. Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, portability or objection to processing. You may also withdraw consent where processing relies on consent. These rights may be limited where we must retain data or continue processing it for legal obligations or legal claims.

Send a request to[email protected]. We may need to verify your identity before acting on a request. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD) or another competent supervisory authority.

9. Cookies and analytics

With your permission, the public website uses Meta Pixel and advertising cookies to measure and optimize Facebook and Instagram advertising. Meta Pixel is not loaded before you allow advertising cookies, and it is not loaded on the private case portal. You can decline advertising cookies or change your choice through Cookie settings in the footer.

Independently of Meta Pixel, we send minimized first-party events to our own application and carry a random visit identifier plus campaign parameters between the landing page and application form. That identifier is not stored in an analytics cookie, localStorage or sessionStorage, and first-party campaign measurement continues if you decline advertising cookies.

If you submit an application, its campaign attribution is linked to the resulting case so we can understand whether that case reaches payment, document intake and filing. Analytics events do not include document contents, passport details, payment credentials or free-form application answers. We do not send form contents, document contents, email addresses, phone numbers or payment credentials to Meta Pixel.

We use essential cookies or temporary browser storage only where needed for security, application-draft recovery, portal access and checkout recovery. An unfinished application draft remains in the current browser tab until you submit it or close the tab. You can control browser storage through your browser settings, although blocking essential storage may prevent draft recovery or the portal from working.

10. Changes to this policy

We may update this policy when the service, providers or legal requirements change. The latest version is published on this page with its effective date.

11. Contact

Privacy questions and requests:[email protected].