Privacy Policy
Operated by: Hasbi Limited, trading as "Visamila"
NZBN: 9429053836915
Website: visamila.com
Privacy Contact: [email protected]
Legal Contact: [email protected]
Effective Date: 7 October 2026
Version: 1.0
1. Introduction
This Privacy Policy explains how Hasbi Limited, trading as Visamila ("Visamila", "we", "us" or "our"), collects, uses, stores, protects and discloses personal information.
It applies to people who use Visamila as:
- Visitors seeking visa, immigration, relocation or related assistance; and
- Consultants providing immigration, legal, migration, consulting or related professional services.
Visamila is committed to handling personal information in accordance with the New Zealand Privacy Act 2020 and applicable privacy and data protection requirements.
2. Who We Are
Visamila is operated by:
Hasbi Limited
NZBN 9429053836915
Privacy enquiries:
Legal enquiries:
3. Information We Collect
The information we collect depends on how you use Visamila.
3.1 Visitor account information
We may collect:
- name;
- email address;
- password information in hashed form;
- third-party sign-in identifier where applicable;
- country;
- telephone number;
- profile/avatar information;
- email-verification status;
- Terms acceptance information;
- Terms version accepted; and
- date and time of acceptance.
3.2 Visitor Requirement information
A Visitor Requirement may include:
- visa type;
- country of origin;
- nationality;
- destination;
- travel or relocation timeline;
- budget range;
- free-text notes;
- telephone number;
- WhatsApp availability;
- contact-consent information; and
- marketing-consent information.
3.3 Visitor intake information
Depending on the type of Requirement, we may collect:
- education;
- occupation;
- language scores;
- finances;
- assets;
- visa-refusal history;
- current visa or immigration status;
- family and relationship information;
- employer information; and
- information concerning other members of a travel party.
Certain Requirements may involve information concerning:
- health;
- character;
- religious or pilgrimage circumstances;
- humanitarian or protection status; and
- other information that may be particularly sensitive.
You should only provide information reasonably relevant to your Requirement.
3.4 Visitor feedback information
We may collect:
- follow-up survey responses;
- closure information;
- whether a Consultant was hired;
- Platform ratings or feedback;
- suggestions; and
- outcome information.
3.5 Consultant information
Consultant information may include:
- name;
- email;
- password in hashed form;
- third-party sign-in identifier;
- telephone number;
- country;
- avatar;
- biography;
- individual/business status;
- declared business or practice name;
- destination countries;
- visa specialisations;
- languages;
- pilgrimage-related services;
- professional registration information;
- regulator;
- registration number;
- registration expiry date;
- optional licence documents;
- approval status;
- administrative notes;
- suspension information;
- Connects balance;
- transaction history;
- Stripe payment references;
- Leads unlocked;
- Lead dispute information;
- refund decisions;
- hire requests; and
- survey responses.
3.6 Technical information
We may collect technical and security information such as:
- session cookies;
- in-app notifications;
- IP addresses;
- request logs;
- security logs; and
- technical information necessary to operate and protect the Platform.
Visamila does not currently use advertising trackers or third-party analytics trackers.
4. How We Use Personal Information
We may use personal information to:
- create and administer accounts;
- authenticate users;
- verify email addresses;
- process Requirements;
- match Visitors with Consultants;
- provide Lead information;
- facilitate communication;
- disclose contact information following an authorised Lead unlock;
- administer Connects;
- process payments;
- investigate disputes;
- prevent fraud and spam;
- protect Platform security;
- investigate misuse;
- verify declared professional registration information;
- manage Consultant accounts;
- administer surveys and feedback;
- improve Platform functionality;
- develop aggregated and de-identified insights;
- send service-related communications;
- send optional marketing where consent has been provided;
- comply with legal and regulatory obligations; and
- perform other purposes described in this Policy or otherwise permitted by law.
5. Visitor Information Shared With Consultants
Before a Consultant unlocks a Requirement, eligible Consultants may see a limited Requirement summary.
This may include:
- visa type;
- origin;
- nationality;
- destination;
- timeline;
- budget;
- relevant intake information; and
- notes.
Contact information is intended to be excluded from this summary.
When a Consultant unlocks the Requirement, Visamila may disclose:
- Visitor name;
- email;
- telephone number; and
- WhatsApp availability.
A maximum of four Consultants may generally unlock a Requirement.
6. Consultant Information Shared With Visitors
When a Consultant unlocks a Visitor Requirement, Visamila may provide the Visitor with the Consultant's:
- professional name;
- declared business or practice name;
- email address; and
- telephone number.
The Consultant's business or practice information may be self-declared and may not have been independently verified.
7. Consultant Verification
Visamila may check declared professional registration information against publicly available regulatory registers.
This is an administrative verification process.
Visamila does not currently perform general identity-document verification, business verification or AML-style KYC checks.
A Consultant's approval therefore does not constitute:
- professional certification;
- endorsement;
- legal accreditation;
- confirmation of competence; or
- confirmation that all information provided by the Consultant is accurate.
8. Government and Regulatory Disclosures
Visamila does not routinely provide Visitor or Consultant information to government agencies.
We may disclose personal information where:
- required or authorised by law;
- required by a court order, warrant, statutory demand or other lawful process;
- necessary to comply with a regulatory requirement; or
- reasonably necessary to report suspected fraud, unlawful conduct, unlicensed immigration advice or other serious regulatory concerns.
Relevant authorities may include:
- courts;
- police;
- law-enforcement agencies;
- immigration authorities;
- immigration adviser regulators;
- professional regulators;
- privacy regulators;
- tax authorities; and
- other competent government or regulatory bodies.
Examples of relevant immigration regulators may include the New Zealand Immigration Advisers Authority, Australian migration adviser regulators and corresponding authorities in other jurisdictions.
We disclose information only to the extent reasonably necessary for the applicable purpose and as permitted or required by law.
9. Marketing
Visamila distinguishes between essential service communications and optional marketing.
9.1 Service communications
We may send communications necessary to:
- operate your account;
- administer a Requirement;
- notify you about a Lead;
- administer Connects;
- process transactions;
- maintain security;
- notify you of important Platform matters; or
- comply with legal requirements.
These are not optional marketing communications.
9.2 Visamila marketing
Where you provide the required consent, Visamila may send marketing communications concerning Visamila's products, services and relevant opportunities.
9.3 Partner offers
Where a Visitor provides separate optional consent, Visamila may send offers relating to:
- education;
- relocation and travel;
- financial services; and
- employment and recruitment.
Visamila sends these offers itself.
Visamila does not provide the Visitor's personal information to the relevant partner merely because the Visitor has opted in to receive partner offers.
9.4 Marketing channels
Where technically available and lawfully permitted, marketing may be delivered through:
- email;
- SMS; and
- WhatsApp.
Marketing consent may be withdrawn at any time.
Marketing communications will include an appropriate unsubscribe or opt-out mechanism where required by applicable law.
10. Consultant Promotional Profile Consent
Visamila will seek separate express consent before using a Consultant's:
- name;
- photograph;
- business/practice name; or
- professional profile information
for advertising, social media or other promotional purposes.
This consent is separate from acceptance of the Consultant Terms.
A Consultant may withdraw this promotional consent by contacting Visamila.
11. Consent Records
Where consent is required or relied upon, Visamila may retain records of:
- the consent given;
- the type of consent;
- the relevant wording or version;
- date and time;
- communication channel;
- withdrawal of consent; and
- related Terms or Policy version.
Consent records may be retained for up to seven years where necessary for evidential, legal, regulatory or dispute-resolution purposes.
12. Automated Processing and AI
Visamila may use automated tools for:
- spam detection;
- fraud detection;
- Requirement matching;
- security;
- abuse prevention; and
- Platform administration.
Visamila does not use Visitor or Consultant personal information to train general-purpose AI models.
Automated systems may process information to perform their specified operational functions.
Visamila does not use automated processing to make government immigration decisions.
13. Aggregated and De-identified Information
Visamila may create information that is aggregated or de-identified so that individuals cannot reasonably be identified.
Such information may be used, published, licensed or commercialised for:
- research;
- analytics;
- industry reports;
- market intelligence;
- business intelligence;
- product development; and
- other legitimate commercial purposes.
Visamila will not intentionally use de-identified information to identify an individual.
14. Overseas Processing
Visamila uses service providers and may connect Visitors with Consultants located outside New Zealand.
Current or anticipated providers may include:
- Amazon Web Services for hosting, databases, document storage and backups;
- Cloudflare for network delivery and security;
- Stripe for payments;
- Zoho for email delivery;
- Google for sign-in where enabled;
- future SMS and WhatsApp service providers; and
- Consultants located in other countries.
Some providers may process information outside New Zealand.
Visamila will take reasonable steps to comply with applicable requirements governing overseas disclosure of personal information.
Where required, Visamila will use appropriate contractual, legal or other safeguards or obtain the required authorisation for overseas disclosure.
15. Payment Information
Where payments are made through Stripe, payment-card information is processed by Stripe.
Visamila does not store full payment-card details.
Visamila may retain payment references, transaction information and other records necessary for accounting, reconciliation, fraud prevention and legal compliance.
16. Information Security
Visamila takes reasonable steps to protect personal information against:
- loss;
- unauthorised access;
- disclosure;
- misuse;
- alteration; and
- destruction.
Security measures may include:
- access controls;
- authentication;
- encryption where appropriate;
- secure cloud infrastructure;
- logging;
- monitoring;
- security controls provided by infrastructure providers; and
- administrative controls.
No online service can guarantee absolute security.
17. Privacy Breaches
If Visamila becomes aware of a privacy breach, we will assess the incident and take reasonable steps to contain, investigate and remediate it.
Where required by the Privacy Act 2020 or other applicable law, Visamila will notify the Office of the Privacy Commissioner and affected individuals.
18. Retention
Visamila retains information only for as long as reasonably necessary for the purposes for which it was collected, or for legal, regulatory, accounting, security, fraud-prevention, dispute-resolution or other lawful purposes.
Our current retention framework is:
| Information | Retention |
|---|---|
| Account/profile information | Until deletion, then generally within 30 days |
| Visitor Requirements/intake | De-identified 24 months after closure |
| Payment and tax records | 7 years |
| Consent and Terms acceptance records | 7 years |
| Consultant licence documents | Deleted 12 months after Consultant leaves, subject to legal requirements |
| Database backups | Approximately 30 days |
Some information may be retained for longer where required or permitted by law.
19. Account Deletion
Visitors and Consultants may request deletion of their account by contacting:
Visamila aims to erase or anonymise account and profile information within 30 days.
Backups may remain for up to a further 30 days before normal backup expiry.
Information required to be retained for legal, regulatory, accounting, security, fraud, dispute or evidential purposes may be retained.
Information already disclosed to an independent Consultant may remain under that Consultant's control.
20. Access and Correction
Subject to applicable law, you may request access to personal information held by Visamila about you.
You may also request correction of inaccurate information.
Requests should be sent to:
We may need to verify your identity before processing a request.
21. Withdrawal of Consent
Where processing is based on consent, you may withdraw that consent.
Withdrawal does not affect processing that occurred before withdrawal or processing that is permitted or required on another lawful basis.
Withdrawal of marketing consent does not prevent Visamila from sending essential service or legal communications.
22. Cookies
Visamila may use cookies or similar technologies necessary for:
- authentication;
- sessions;
- security;
- account functionality; and
- Platform operation.
Visamila does not currently use advertising trackers or third-party analytics trackers.
23. Consultant Responsibilities
A Consultant who receives Visitor information through the Platform is responsible for handling that information in accordance with applicable privacy law.
Once Visitor information has been disclosed to a Consultant, Visamila does not control the Consultant's independent processing of that information.
Consultants are prohibited by their contractual terms from using Visitor information for unrelated marketing without appropriate consent and from selling, renting or passing the information to third parties except where lawfully permitted.
24. Third-Party Websites and Services
The Platform may contain links or integrations to third-party services.
Visamila is not responsible for the privacy practices of third parties operating their own websites or services.
You should review the applicable third-party privacy policies before providing information directly to them.
25. Business Transfers
If Visamila or substantially all of its assets or business are acquired, reorganised, merged or transferred, personal information may be transferred as part of that transaction, subject to applicable privacy law.
Where required, appropriate protections and notices will apply.
26. Children's Information
Visamila's Visitor service is intended for people aged 18 or over.
We do not knowingly seek to create accounts for children.
Where a parent, guardian or authorised representative submits information concerning another person, that person must have the authority to do so.
27. Complaints
If you have a concern about how Visamila has handled your personal information, contact:
We will investigate the complaint and respond within a reasonable period.
You may also contact the New Zealand Office of the Privacy Commissioner where you are not satisfied with our response or wish to make an independent complaint.
28. Changes to This Privacy Policy
Visamila may update this Privacy Policy from time to time to reflect:
- changes to the Platform;
- changes to service providers;
- changes to legal requirements;
- new functionality;
- changes to data practices; or
- other legitimate operational requirements.
Where material changes are made, Visamila will take reasonable steps to notify affected users where required.
The updated version will state its effective date.
29. Contact
For privacy matters:
For legal matters:
Hasbi Limited trading as Visamila
NZBN 9429053836915