1. Regulatory Framework & Fiduciary Pledge
North Immigration is strictly committed to protecting the privacy, security, and confidentiality of our clients' personal and financial data. As an authorized government-licensed agent specializing in citizenship and residency by investment since 1997, client confidentiality represents the cornerstone of our fiduciary practice.
All data handling practices strictly comply with governing international privacy legislation, including UAE Federal Decree-Law No. 45/2021 on Personal Data Protection, the European Union General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
2. Information We Collect
To determine statutory eligibility and prepare sovereign citizenship or residency dossiers for submission to authorized government Citizenship by Investment Units (CIUs) and ministries, we collect only necessary data provided with express client consent:
- Identification & Biometric Records: Full legal names, date and place of birth, current citizenships, passport scans, and civil identity cards.
- Contact Information: Verified residential addresses, mobile and WhatsApp numbers, and official email addresses.
- Source of Wealth & Due Diligence (KYC/AML): Certified banking statements, corporate shareholding registers, tax documentation, and lawful source of funds records mandated by sovereign due diligence protocols.
- Family & Civil Status Records: Official marriage certificates, dependent birth certificates, military service records, and certified police clearance certificates.
3. How We Use & Process Data
We use collected information solely to render, support, and execute immigration and investment advisory mandates with institutional precision:
Government Dossier AssemblyStructuring formal applications in accordance with sovereign statutory directives.
Application Updates & LiaisonNotifying clients of vetting milestones, approval in principle, and passport issuance.
Fraud Prevention & ComplianceVerifying document authenticity and upholding stringent international compliance.
Service OptimizationEnhancing case management efficiency and maintaining a secure client portal.
4. Online Payment & Financial Security
All financial transactions for retainer advisory fees or official disbursements adhere to rigorous financial security protocols:
- PCI-DSS Level 1 Payment Gateways: Credit/debit card transactions are processed exclusively through certified tier-1 banking gateways compliant with the Payment Card Industry Data Security Standard (PCI-DSS).
- Zero Server Storage of Card Data: North Immigration does NOT store full credit card numbers, CVV security codes, or banking PINs on internal servers.
- SSL/TLS Session Encryption: All payment sessions are secured with 256-bit encryption to prevent any unauthorized interception.
5. Log Files & Cookie Technologies
Standard Log Files: North Immigration follows a standard procedure of utilizing server log files. The recorded technical parameters include IP addresses, browser specifications, Internet Service Providers (ISPs), date/time stamps, and referring/exit URLs. This data is utilized solely for technical administration, server security, and aggregate traffic diagnostics, without being linked to personally identifiable records.
Cookies & Web Beacons: We use functional cookies to retain visitor preferences (such as Arabic/English language selection) and safeguard consultation sessions. You may configure your browser at any time to reject cookies or notify you prior to placement.
6. Third-Party Disclosures & Non-Monetization
North Immigration maintains an unequivocal policy regarding client data integrity:
We do NOT sell, rent, monetize, or disclose your personal or investment data to commercial brokers, marketing agencies, or external data aggregators under any circumstances.
Disclosures are restricted exclusively to statutory requirements mandated by court orders, lawful regulatory investigations, or direct submissions to official sovereign government bodies (such as Citizenship by Investment Units and consular missions) under express client power of attorney.
7. Your Rights (GDPR, CCPA & UAE Law)
Pursuant to global and regional data protection regulations, clients retain the following statutory entitlements:
- Right to Access: Request complete disclosure regarding the categories and records of personal data retained.
- Right to Rectification: Request immediate correction of inaccurate or incomplete personal records.
- Right to Erasure ('Right to be Forgotten'): Demand data deletion, subject to mandatory statutory government audit retention periods under AML legislation.
- Right to Non-Discrimination & Opt-Out: Exercise 'Do Not Sell My Personal Information' provisions and opt out of advisory updates at any point.
*We formally respond to and execute verified statutory data subject inquiries within thirty (30) days of identity authentication.
8. Data Retention & International Transfers
Client records are retained for the duration of active legal representation, plus statutory compliance archiving periods mandated by licensing jurisdictions. Any cross-border transmission of files is conducted exclusively via secured diplomatic and encrypted government submission pipelines.
9. Data Protection Officer Contact
For inquiries, verification requests, or to exercise your statutory privacy rights, contact our Data Protection and Compliance Office directly:
