Privacy Policy

1. Who We Are

Agrin UK is a trading name of [Company Name] registered in England and Wales. Our registered address is in London, United Kingdom.

Agrin UK is the Data Controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. As Data Controller, we determine how and why your personal data is processed.

For all data protection queries, please contact us at: privacy@agrin.uk

Our website is agrin.uk.

---

2. What Data We Collect

We collect personal data from you in several ways, depending on how you interact with our services. The table below sets out the types of data we collect and how we obtain them.

---

3. Why We Use Your Data (Legal Basis)

Under UK GDPR, we must have a lawful basis for processing your personal data. The table below sets out each purpose for which we use your data and the legal basis we rely on.

---

4. Who We Share Your Data With

We do not sell your personal data to any third party. We share your data only where necessary to deliver our services or comply with legal obligations. The recipients are:

• Spanish consulate and immigration authorities — your personal and immigration data must be submitted to the relevant Spanish government authorities as part of processing your visa application. This sharing is necessary to deliver the service you have contracted.
• Certified translation providers — where your documents require sworn translation into Spanish, we share relevant documents with certified translation professionals.
• Stripe — we use Stripe to process payments. Stripe's own privacy policy applies to the payment data they collect and process. We do not receive or store your full card details. See Stripe's privacy policy.
• Google Analytics — we use Google Analytics to collect anonymised data about how visitors use our website. This data does not identify individual users. See Google's privacy policy.
• Email service providers — we use third-party email delivery services to send case updates and communications to you.

---

5. International Data Transfers

When we submit your visa application on your behalf, your personal data is transferred to Spanish government authorities — including the relevant Spanish consulate and immigration bodies. This transfer is necessary for the performance of the immigration service you have contracted with us.

Spain is a member of the European Union and is subject to the EU General Data Protection Regulation (EU GDPR), which provides a standard of data protection broadly comparable to UK GDPR. The UK government has not made a formal adequacy decision in respect of Spain specifically, but transfers to Spanish public authorities for visa processing purposes are made on the basis of necessity for the performance of your contract.

For any other international transfers of your data, we ensure that appropriate safeguards are in place as required by UK GDPR, including standard contractual clauses or reliance on adequacy decisions where applicable.

---

6. How Long We Keep Your Data

We retain your personal data only for as long as necessary for the purposes for which it was collected, or as required by law.

---

7. Your Rights Under UK GDPR

Under UK GDPR and the Data Protection Act 2018, you have the following rights in relation to your personal data:

• Right of access (Subject Access Request)
  You have the right to request a copy of the personal data we hold about you and information about how we process it.
• Right to rectification
  You have the right to ask us to correct any inaccurate or incomplete personal data we hold about you.
• Right to erasure ("right to be forgotten")
  You have the right to ask us to delete your personal data in certain circumstances — for example, if we no longer need it for the purpose for which it was collected, or if you withdraw your consent. Note that this right may be limited where we are legally required to retain data.
• Right to restrict processing
  You have the right to ask us to suspend processing your personal data in certain circumstances — for example, while you contest the accuracy of data we hold.
• Right to data portability
  Where processing is based on your consent or a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used and machine-readable format, and to request that we transfer it to another organisation.
• Right to object
  You have the right to object to processing based on legitimate interests, or to processing for direct marketing purposes. If you object to direct marketing, we will stop processing your data for that purpose immediately.
• Rights related to automated decision-making and profiling
  You have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects on you. Agrin UK does not currently make automated decisions of this nature.
• Right to withdraw consent at any time
  Where we process your data based on your consent (for example, for marketing emails), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before you withdrew it.

---

8. Cookies

Our website uses cookies — small text files placed on your device — to make the site function correctly and to understand how visitors use it. We use the following categories of cookies:

• Essential cookies (session and security)
  These cookies are necessary for the website to work. They enable core functions such as page navigation, secure form submissions, and maintaining your session. They cannot be disabled as they are required for the site to function.
• Analytics cookies (Google Analytics)
  We use Google Analytics to measure how visitors use our site — for example, which pages are visited most, where visitors come from, and how long they stay. This helps us improve the site. Analytics cookies can be declined. You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.
• Marketing and third-party tracking cookies
  We do not currently use marketing cookies or tracking cookies from third-party advertising networks.

For more information about managing cookies in your browser, visit aboutcookies.org.

---

9. How We Protect Your Data

We take the security of your personal data seriously. The measures we have in place include:

• SSL/TLS encryption — all data transmitted between your browser and our website is encrypted using industry-standard TLS (HTTPS).
• Access controls — only staff members who require access to your data for the purposes of managing your case are permitted to access it. Access is role-based and reviewed regularly.
• Stripe for payments — all payment card data is handled directly by Stripe, a PCI DSS-compliant payment processor. We never receive, store, or transmit your full card details.
• Regular security reviews — we review our data security practices and technical measures on a regular basis to ensure they remain appropriate.

No method of electronic transmission or storage is 100% secure. While we strive to protect your personal data using commercially reasonable means, we cannot guarantee absolute security.

---

10. Changes to This Policy

We review this privacy policy periodically and may update it from time to time to reflect changes in our practices, legal requirements, or the services we offer. The "Last updated" date at the top of this page reflects when the policy was last revised.

Where changes are material, we will take reasonable steps to notify you — for example by posting a notice on our website or, where we hold your email address and it is appropriate to do so, by email. Continued use of the agrin.uk website or our services following an update to this policy constitutes your acceptance of the revised terms.

We encourage you to review this policy periodically to stay informed about how we protect your data.

---

11. Contact and Complaints

If you have any questions or concerns about this privacy policy or about how we handle your personal data, please contact us:

Email: privacy@agrin.uk
Website: agrin.uk/contact

We will do our best to resolve any concerns you have. However, if you are not satisfied with our response, you have the right to lodge a complaint with the UK's data protection supervisory authority:

Last updated: May 2026. This policy applies to agrin.uk and all related services operated by Agrin UK.

---

Related policies and pages: Contact Us Money-Back Guarantee