How we handle your information.

Who we are

NEXON Global Immigration Services is a licensed residency, citizenship and global mobility consultancy based in Business Bay, Dubai, United Arab Emirates. In this policy "we", "us" and "our" mean NEXON Global Immigration Services; "you" means anyone who contacts us, uses this website, or engages us on an application.

We are the controller of the personal data described here. That means we decide what is collected and why, and we are accountable for it — including for the work carried out on our instructions by the government-authorised agents, due-diligence firms and other partners named below.

NEXON Global Immigration Services, Business Bay, Dubai, United Arab Emirates. Email hello@nexonglobal.ae or call +971 4 000 0000.

What we collect

We collect only what a consultation or an application actually requires. In practice that falls into five groups.

Information you give us directly

• Contact details — name, email address, phone or WhatsApp number, country of residence and preferred language.
• Eligibility details — nationality, age, marital status, family composition, education, occupation, work history and language test results.
• Financial information — source of funds and source of wealth evidence, bank statements, tax records, proof of investment capital and business ownership documents.
• Identity and travel documents — passports, national identity cards, birth and marriage certificates, residence permits and previous visa history.
• Background information — police clearance certificates, medical certificates and any prior visa refusals or immigration history you disclose to us.

Information we generate about your file

• Consultation notes, assessments, program recommendations and the written fee schedule issued to you.
• Correspondence with you and with the authorities, agents and institutions handling your application.
• Application status, submission dates, decisions and any conditions attached to an approval.

Information about your family

Most programs cover a spouse, dependent children and, in some cases, parents. Where you provide information about another person, you confirm that you are entitled to do so and that you have shown them this policy. Information about children is collected only where a program requires it for a dependent applicant, and is handled with the same protections as the rest of the file.

Information collected automatically

• Technical data — IP address, device type, browser, and the pages you viewed on this website.
• Your language preference, which is stored in your browser so the site opens in English or Arabic as you left it.

Sensitive information

Some of what an application requires is sensitive by nature: health declarations, criminal record checks, and in a few programs biometric data taken by the receiving government. We collect it only where a specific program requires it, we tell you when that is the case, and we do not use it for anything else.

Why we use it, and on what basis

We use your information for a defined set of purposes, each with a lawful basis under UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and, where it applies to you, the EU and UK General Data Protection Regulation.

• To answer your enquiry and carry out a free assessment — on the basis of steps taken at your request before entering a contract.
• To advise you, prepare your file and submit your application — on the basis of performing our engagement with you.
• To complete due diligence and anti-money-laundering checks — on the basis of our legal obligations as a licensed advisory practice, and the obligations of the programs we submit to.
• To keep records of the advice we gave and the fees we quoted — on the basis of our legal obligations and our legitimate interest in being able to evidence our own work.
• To improve the website and understand which pages are useful — on the basis of our legitimate interest in running the site, using aggregated data only.
• To send you program updates or newsletters — only where you have asked for them, and with an unsubscribe link in every message.

We do not sell your personal data, we do not rent our client list, and we do not use your file to make automated decisions that produce a legal effect for you. Every recommendation you receive is reviewed by a named consultant.

Who sees it

An application cannot be submitted without disclosure to third parties. We share the minimum each recipient needs, and only where the program or the law requires it.

• Government departments and immigration authorities in the country you are applying to, and the units within them that assess applications.
• Government-authorised agents and promoters, where a program can only be filed through a licensed intermediary.
• International due-diligence firms appointed by the receiving government to run background checks.
• Banks, escrow agents, licensed funds, developers and other institutions where an investment or a qualifying deposit forms part of the route you choose.
• Translators, notaries, apostille services and courier companies handling your documents.
• Our professional advisers — external counsel, auditors and insurers — where they need it to advise us.
• IT and hosting providers who operate the systems our records sit in, under written instructions that they process data only for us.

We will also disclose information where we are compelled to by a court, a regulator or applicable law. If we are ever asked for your file by a party not on this list, we will tell you unless we are legally prohibited from doing so.

Sending information abroad

By its nature this work moves information across borders: a Portuguese golden visa file is assessed in Portugal, a Caribbean citizenship file by that country's due-diligence unit. Your data will therefore be transferred outside the United Arab Emirates, including to countries whose data protection regime differs from the UAE's.

Where a transfer is not to a jurisdiction recognised as providing an adequate level of protection, we rely on contractual safeguards with the recipient, or on the transfer being necessary to perform the contract you have asked us to carry out. You can ask us which basis applies to a particular transfer on your file.

How long we keep it

• Enquiries that do not become engagements — up to 24 months from your last contact with us, so that we can pick up a conversation where it left off.
• Client files — for the duration of the engagement and then for the period required of us as a licensed practice, which is currently seven years from the closure of the file.
• Anti-money-laundering and due-diligence records — for the minimum period required by the applicable regulations, even where the rest of the file has been closed.
• Marketing preferences — until you withdraw consent, plus a permanent suppression record so we do not contact you again by mistake.

When a retention period ends, records are deleted or irreversibly anonymised. Where a document has been submitted to a government authority, that authority keeps its own copy under its own retention rules, which we do not control.

How we protect it

• Files are held in access-controlled systems; a consultant sees a file because it has been assigned to them, not because they work here.
• Documents are encrypted in transit and at rest, and are exchanged with you through a secure channel rather than as loose email attachments.
• Every member of staff is bound by written confidentiality obligations that survive the end of their employment.
• Access is reviewed regularly, and removed on the day someone leaves or changes role.

No system is perfect. If a breach occurs that is likely to put your rights or your application at risk, we will notify you and the competent authority without undue delay, and tell you plainly what happened and what we are doing about it.

Your rights

You can exercise any of the following at no charge, by writing to us at the address at the end of this page.

• Access — ask for a copy of the personal data we hold about you.
• Correction — have inaccurate or incomplete information put right.
• Erasure — ask us to delete data we no longer have a lawful reason to keep.
• Restriction and objection — ask us to pause a particular use, or object to processing we carry out on the basis of legitimate interests.
• Portability — receive the data you gave us in a structured, machine-readable format, or have it sent to another adviser.
• Withdraw consent — for anything we do on the basis of consent, including marketing, with effect from the moment you tell us.
• Complain — to us first, and then to the UAE Data Office or, if you are in the EU or the UK, to your local supervisory authority.

We respond within 30 days. Some rights have limits: we cannot delete records we are required to retain for anti-money-laundering purposes, and we cannot withdraw a document already lodged with a government authority.

Cookies and this website

This site uses the smallest set of storage it can. Your language choice is kept in your browser's local storage so the page opens in the language you last used; it is not a tracking identifier and never leaves your device.

Where we use analytics, it is configured to report on pages and referrers in aggregate rather than to build a profile of you, and IP addresses are truncated. We do not run advertising trackers or share website behaviour with advertising networks. Your browser's controls will let you clear or block this storage; the site will still work, but it will open in English each time.

Changes to this policy

Programs and regulations change, and this policy changes with them. The date at the top of this page is the version in force. Where a change materially affects how we use information on an open file, we will tell active clients directly rather than relying on this page alone.

Contact and complaints

Questions about this policy, or a request to exercise one of the rights above, should go to our data protection contact:

NEXON Global Immigration Services, Business Bay, Dubai, United Arab Emirates. Email hello@nexonglobal.ae or call +971 4 000 0000.

If you are not satisfied with our answer, you may complain to the UAE Data Office. Complaining to a regulator does not affect any other remedy available to you.