Introduction
This Privacy Policy explains how Atlasium ("we", "us", "our") collects, uses, stores and protects your personal data when you use our visa assistance services and related platforms. We take privacy seriously and aim to handle every piece of information with care, transparency and security.
Who we are
Atlasium is an independent visa assistance platform. We help travellers prepare Schengen and United Kingdom tourist and business visa applications. Atlasium is not affiliated with embassies, consulates, VFS, TLS, BLS or any government authority.
What data we collect
- Identity data: full name, date of birth, nationality, passport details.
- Contact data: email, WhatsApp number, country of residence, postal address when relevant.
- Travel data: destination, dates, accommodation, travel insurance and itinerary information.
- Document data: passport scans, photos, supporting documents you choose to upload.
- Payment-related data: limited transaction information processed by our payment providers.
- Communication data: messages exchanged with our concierge by chat, email or WhatsApp.
- Technical data: device, browser and basic usage information collected through cookies and similar technologies.
How we collect data
We collect data directly from you when you fill in our application flow, upload documents, contact us, or interact with our website. We may also receive limited data from payment providers and analytics tools you have consented to.
Why we collect data
To provide visa assistance, prepare your application file, communicate with you, process payments, comply with legal obligations, prevent fraud and continually improve our service.
Legal basis for processing under GDPR
- Performance of a contract: to deliver the service you have purchased.
- Consent: for optional cookies, marketing or non-essential features.
- Legal obligation: to meet bookkeeping, tax and regulatory duties.
- Legitimate interests: to secure our platform and improve our services, where balanced against your rights.
Passport and identity document handling
Passport scans and identity documents are stored securely, with restricted access limited to the team members directly involved in preparing your file. They are used only for the purpose of assisting your application and are not sold or shared for marketing purposes.
WhatsApp and communication data
When you contact us on WhatsApp, your messages, phone number and any documents you share are processed for support purposes. WhatsApp's own terms and privacy policy also apply to these messages.
Payment-related data
Card details and bank credentials are handled by our regulated payment providers and are not stored on our servers. We retain only the limited information needed for accounting, refunds and fraud prevention.
Data retention periods
We keep personal data only as long as necessary to deliver the service and meet our legal obligations. Application files are typically retained for the duration required by accounting and consumer-protection laws, after which they are securely deleted or anonymised.
Data sharing with service providers
We share limited data with trusted providers strictly to operate the service: hosting, payment processing, communication tools, analytics (if consented), and travel-related partners (for example hotels and insurance providers when you request a reservation). Each provider is bound by confidentiality and data-protection obligations.
International data transfers
Where data is transferred outside the European Economic Area, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent legal mechanisms to ensure your data remains protected.
Security measures
We use encryption in transit, access controls, secure storage, regular reviews and confidentiality commitments to protect your information. No system is perfectly secure, but we work continuously to keep risks low.
Your GDPR rights
- Right of access — request a copy of the data we hold about you.
- Right to rectification — ask us to correct inaccurate or incomplete data.
- Right to erasure — request deletion of your data, subject to legal limits.
- Right to restrict processing — limit how we use your data in certain cases.
- Right to object — object to certain processing activities.
- Right to data portability — receive your data in a structured, machine-readable format.
- Right to withdraw consent — at any time, where processing is based on consent.
- Right to lodge a complaint — with your local data-protection supervisory authority.
How to request access, correction or deletion
You can exercise any of your GDPR rights by contacting us through our Contact page. We will respond within the timeframes set by applicable law and may ask for additional information to verify your identity.
Cookie usage
We use essential cookies to make the site work, and optional analytics and preference cookies only if you accept them. You can change your choices at any time through the cookie banner or your browser settings.
Contact for privacy requests
For any privacy-related question or request, please use the Contact page or write to our support team. We are committed to clear, respectful and timely answers.