Privacy Policy
Effective date: May 24, 2026
GulfVisaHub ("we", "our", or "us") operates the website at gulfvisahub.org. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our site or subscribe to our newsletter. Please read it carefully. By using the site, you agree to the practices described below.
1. Information we collect
We collect only what we need to operate the site and communicate with you. We collect information in three ways:
a) Analytics data (collected automatically)
When you visit gulfvisahub.org, we collect anonymised usage data including: pages viewed, time on page, referring URL, approximate geographic region (country/city level), browser type, device type, and operating system. This data is collected through Vercel Analytics and Google Analytics 4. We do not collect precise location data (GPS). IP addresses processed by Google Analytics are anonymised before storage.
b) Newsletter subscription (provided by you)
If you subscribe to our newsletter, we collect your email address. We do not require your name, country, or any other identifying information to subscribe. Your email is stored securely and used solely to send you the newsletter you opted into.
c) Contact form submissions (provided by you)
If you contact us via our contact page or by email directly, we collect the information you provide - typically your email address and the content of your message. We retain this only for as long as necessary to respond to and resolve your enquiry.
2. How we use your information
We use the information we collect for the following purposes:
- Analytics data: To understand which content is most useful, identify technical issues, and improve the site experience. We do not use analytics data to build individual user profiles or for targeted advertising outside of standard AdSense contextual ad serving.
- Newsletter email: To send you our newsletter. Each email contains an unsubscribe link. We do not sell, rent, or share your email address with any third party for marketing purposes.
- Contact enquiries: To respond to your message. We do not add people who email us to marketing lists without their explicit consent.
- Legal compliance: To comply with applicable laws and to protect our rights and the rights of our users.
We do not engage in automated decision-making or profiling that produces legal or significant effects.
3. Data processors and third parties
We use the following third-party services to operate GulfVisaHub. Each acts as a data processor on our behalf and is bound by their own privacy policies and, where applicable, GDPR data processing agreements:
| Processor | Purpose | Data processed |
|---|---|---|
| Vercel | Hosting and infrastructure; Vercel Analytics | Request logs, anonymised analytics events |
| Google Analytics | Site analytics | Anonymised page views, session data, device/browser info |
| Google AdSense | Display advertising | Cookies, browsing context for contextual ad serving |
| Supabase | Database (newsletter subscriber list) | Email addresses of newsletter subscribers |
| Resend | Transactional email delivery | Email addresses, email open/click events |
We do not sell your personal data to any third party, ever.
4. Cookies and tracking technologies
GulfVisaHub uses cookies and similar tracking technologies. Here is a plain-English breakdown of what is set and why:
Essential cookies
These are necessary for the site to function. They do not track you for advertising purposes. Examples: session tokens if you are logged in, CSRF protection tokens.
Analytics cookies
Set by Google Analytics (cookies prefixed with _ga). These help us understand how visitors use the site. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.
Advertising cookies
Set by Google AdSense to serve contextual ads. These may use data about your browsing habits to show relevant advertisements. Google's ad personalisation can be managed via Google Ads Settings.
You can control cookies through your browser settings. Disabling all cookies may affect site functionality. For more information, visit aboutcookies.org.
5. Your rights
Depending on where you are located, you may have the following rights regarding your personal data:
Right of access (GDPR Art. 15)
You may request a copy of the personal data we hold about you.
Right to rectification (GDPR Art. 16)
You may ask us to correct inaccurate personal data.
Right to erasure (GDPR Art. 17 / CCPA)
You may request that we delete your personal data. For newsletter subscribers, you can unsubscribe at any time and request deletion of your email from our database.
Right to data portability (GDPR Art. 20)
You may request your data in a structured, machine-readable format.
Right to object (GDPR Art. 21)
You may object to processing of your personal data for direct marketing purposes.
Right to withdraw consent
Where processing is based on consent (e.g., newsletter), you can withdraw consent at any time without affecting the lawfulness of prior processing.
California residents (CCPA)
California residents have additional rights including the right to know about personal information collected and disclosed, the right to delete personal information, and the right to opt out of sale of personal information. We do not sell personal information.
To exercise any of these rights, email privacy@gulfvisahub.org. We will respond within 30 days.
6. Data retention
We retain personal data only as long as necessary for the purposes for which it was collected:
- Newsletter subscriber email addresses: Retained until you unsubscribe or request deletion. Deletion is processed within 7 days of request.
- Analytics data: Retained per the default retention settings of Vercel Analytics (90 days) and Google Analytics 4 (14 months, our configured maximum).
- Contact enquiry emails: Retained for up to 12 months after the enquiry is resolved, then deleted.
7. Children's privacy
GulfVisaHub is not directed at children under 13 years of age (or under 16 in the European Union). We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us at privacy@gulfvisahub.org and we will delete it promptly.
8. International data transfers
GulfVisaHub is operated from and primarily serves users in South Asia and the Gulf region. Our infrastructure (Vercel, Supabase, Resend) may process data in the United States or the European Union. Where personal data is transferred outside the EEA, we rely on Standard Contractual Clauses or equivalent safeguards as required by GDPR. Our third-party processors maintain their own transfer mechanisms and privacy frameworks.
9. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Effective date" at the top of this page. We will notify newsletter subscribers of significant changes via email. Continued use of the site after a change is posted constitutes acceptance of the updated policy.
10. Contact us
For privacy-related enquiries, requests to exercise your data rights, or to report a concern:
Privacy contact
Email: privacy@gulfvisahub.org
We aim to respond to all privacy requests within 30 days.
If you are in the EEA and are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.