Legal
Cookie Policy
Last updated: 4 October 2026
1. What this policy covers
This Cookie Policy explains how buildmyvisa uses cookies, local storage and similar technologies ("cookies") on this website. It applies to visitors and customers in India, the United Arab Emirates, the United Kingdom and the European Economic Area, and should be read with our Privacy Policy.
2. Laws we follow
- India — Digital Personal Data Protection Act, 2023 (DPDP Act) and its Rules: consent must be free, specific, informed, unconditional and unambiguous, and as easy to withdraw as to give.
- UAE — Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL): clear, specific consent and the right to withdraw it.
- UK / EU — UK GDPR, the Privacy and Electronic Communications Regulations (PECR), the EU GDPR and the ePrivacy Directive: non-essential cookies are only set after you opt in.
3. Our consent approach
- Only strictly necessary cookies run by default. Analytics and marketing cookies — including advertising pixels from Google, Meta, TikTok, Reddit and LinkedIn — stay off until you choose "Accept all" or switch them on.
- "Reject non-essential" is shown as prominently as "Accept all". No pre-ticked boxes.
- We record your choice and the date you made it, and ask again if this policy changes materially or after 12 months.
- You can change or withdraw consent at any time using the "Cookie settings" link in the footer or the button below. Withdrawal does not affect processing already carried out.
4. Cookies we use
| Category | Purpose | Provider | Duration |
|---|---|---|---|
| Strictly necessary | Keeps you signed in and secures your account | buildmyvisa (hosting & authentication) | Session to 1 year |
| Strictly necessary | Remembers your cookie choice | buildmyvisa | 12 months |
| Strictly necessary | Keeps your website chat conversation linked to your browser | buildmyvisa | Until cleared |
| Strictly necessary | Payment processing, fraud prevention and security at checkout | Stripe Payments UK, Ltd. | Session to 2 years |
| Analytics (optional) | Understanding how visitors use the site so we can improve it | Google (Google Analytics / Google Ads) | Up to 13 months |
| Marketing (optional) | Measuring ad campaigns, conversions and reaching relevant audiences | Google Ads | Up to 13 months |
| Marketing (optional) | Measuring ad campaigns, conversions and reaching relevant audiences | Meta (Facebook & Instagram pixel) | Up to 13 months |
| Marketing (optional) | Measuring ad campaigns, conversions and reaching relevant audiences | TikTok (TikTok Pixel) | Up to 13 months |
| Marketing (optional) | Measuring ad campaigns, conversions and reaching relevant audiences | Reddit (Reddit Pixel) | Up to 13 months |
| Marketing (optional) | Measuring ad campaigns, conversions and reaching relevant audiences | LinkedIn (Insight Tag) | Up to 13 months |
Advertising cookies and pixels from Google, Meta, TikTok, Reddit and LinkedIn run only after you choose "Accept all" or switch marketing cookies on. They never have access to your visa documents, application answers or account data.
5. Third-party cookies and international transfers
Stripe sets its own cookies at checkout under the Stripe Cookie Policy and Privacy Policy. With your consent, our advertising partners — Google, Meta, TikTok, Reddit and LinkedIn — set their own cookies or pixels under their own cookie and privacy policies. Data from cookies may be processed outside your country, including in the UK, EU and US, under lawful safeguards (such as standard contractual clauses) and never to any country restricted under the DPDP Act.
6. Controlling cookies in your browser
You can also block or delete cookies through your browser settings. Blocking strictly necessary cookies may stop sign-in, chat or payments from working.
7. Your rights and contact
You may request access, correction, erasure or withdrawal of consent, and nominate someone to act for you, as described in our Privacy Policy. Contact our Grievance Officer, Liza Dias, at complaints@buildmyvisa.com. You may also complain to the Data Protection Board of India, the UAE Data Office, the UK Information Commissioner's Office or your local EU supervisory authority.
This document should be reviewed by a qualified legal professional before relying on it.