Privacy

Wealthy Expat Immigration Services FZCO, registered in Dubai, United Arab Emirates, is responsible for the personal information collected through this website. Where an affiliated entity — Wealthy Expat Pte Ltd (Singapore), Wealthy Expat Services LLP (UK), IAM Wealthy Expat FZCO (UAE) or Wealthy Expat Europe Sp. Z o.o. (Poland) — handles your engagement, that entity acts on the same terms.

Questions about personal information go through the contact page. Every request is answered by a person, not an automated system.

You give us information only when you send a form: the homepage matcher (your priorities and, on the second screen, a name, email address, phone number and current citizenship), a program inquiry, a contact request, the newsletter form, a guide request, a Private Advisory application, a comparison you ask us to send, or a request for Client Portal access. Each form asks only for what that request needs; the email address is the one field every form requires.

Alongside the form we record what the page already knows: the page the form was sent from, the referring page if your browser shared one, and any campaign parameters in the address you arrived on. This is used to understand which channels bring visitors to us.

We do not collect documents, account numbers, exact balances or identity papers through the website. Where a matter later requires them, your case team handles them directly and outside this site.

Every form separates three consents and records each one with its status, the moment it was given, the version of this notice you saw and the form you gave it on. The first consent is necessary to answer your request. The second, optional, allows program and jurisdiction updates by email. The third, optional and shown only where a phone number is asked for, allows WhatsApp or SMS about the request you made.

A box left unticked is recorded as a refusal, not ignored. Withdrawing a consent later is as simple as telling us, or using the unsubscribe link in any email; the withdrawal is recorded the same way the consent was.

To answer the request you made: to prepare the results the matcher promised, to respond to an inquiry, to schedule a conversation, or to review an application for Private Advisory or for Portal access.

To keep a record of that request and of your consents, so that we can show what you asked for and what you agreed to.

To understand how the website is used and which channels bring visitors, in aggregate.

We do not sell personal information and we do not use it for automated decisions with legal or similarly significant effects. The matcher's shortlist is an educational ranking of published program rules, not an eligibility decision.

Requests are stored and worked in our client relationship system, GoHighLevel, where your case team reads them. Website data is hosted by our infrastructure providers, including Vercel for the website itself and Supabase for the records behind the Client Portal. Calls are booked through iClosed, whose calendar opens inside this site: the details you enter there go to iClosed and to us so the call can be held. Each provider processes information under a data processing agreement and only on our instructions.

If usage analytics are enabled, they run through Google Tag Manager; no analytics script loads unless it has been configured, and no advertising cookies are set by this site.

Some of these providers operate outside the United Arab Emirates, including in the European Union and the United States. Transfers rely on the providers' contractual safeguards.

The homepage matcher remembers your answers for the current browser tab so a refresh does not empty the form; that memory is cleared when the tab closes. The comparison tool and the Global Map keep your selections in your browser so they survive a reload; nothing in either is sent to us until you ask us to send it.

Signed-in clients hold one session cookie for the Client Portal. It is essential to the sign-in, is not readable by scripts, and expires with the session. The cookie policy lists everything this site stores in a browser.

A request and its consent records are kept for as long as we are handling the matter and afterwards for as long as we need to show what was asked and agreed, which is normally no longer than necessary to meet legal, regulatory and accounting obligations. Marketing consent lapses when you withdraw it. Requests that are not pursued are removed on a periodic review.

You can ask what personal information we hold about you, ask for it to be corrected or deleted, object to a use, withdraw a consent, and ask for a copy in a portable form. Where a law in your country gives you further rights — including the right to complain to a supervisory authority — those rights apply too.

Send any request through the contact page. We will confirm your identity in a proportionate way before acting on it and answer within the time the applicable law allows.

Forms are validated and rate-limited on our servers, submissions are held in a queue that is retried rather than lost, and credentials for our systems are never present in the website itself. The Client Portal requires a second authentication factor on every sign-in and shows the status of a case only — never documents.

When this notice changes, the “Last updated” date at the end of this page changes with it, and the version you consented to stays attached to your consent record. Material changes are announced on this page.