Privacy Policy

1. Who we are

myIGP Passport ("we", "us", "our") is operated by IGP Services Ltd, a company registered in England and Wales (company number 17156193), with its registered office at 128 City Road, London, EC1V 2NX, United Kingdom. IGP Services Ltd is the data controller for personal information processed through the Platform. You can contact us at admin@igpservices.com.

2. What this policy covers

This policy explains what personal information we collect when you use myIGP Passport, why we collect it, how we use and protect it, and the rights you have over it.

3. Information we collect

• Account information: name, email address, password, account type (candidate / employer).
• Profile information: profession, qualifications, country of origin, destination country, English test results, visa status and other career details you provide.
• Documents you upload to the Platform (e.g. CV, certificates, references, ID documents, contracts).
• Subscription and payment information: plan, billing status and limited card metadata. Card numbers are handled directly by our payment processor (Stripe) and are never stored on our servers.
• Usage information: pages visited, features used, progress through pathways, device and browser information, IP address, and approximate location.
• Communications: messages you send to support and notification preferences.

4. How we use your information

• To create and operate your account.
• To deliver the features included in your subscription, including personalised pathways and AI-assisted guidance.
• To process subscription payments.
• To send service emails (verification, password resets, reminders, important account notices).
• To monitor and prevent fraud, account sharing and misuse of the Platform.
• To improve the Platform and develop new features.
• To comply with our legal obligations.

5. Legal bases for processing (UK GDPR)

• Contract: to provide the services you have subscribed to.
• Legitimate interests: to keep the Platform secure, prevent abuse and improve our services.
• Consent: where you have given it (e.g. optional marketing communications).
• Legal obligation: where we are required by law to retain or disclose information.

6. AI-assisted features

Some features use third-party AI models to generate guidance, CV content, interview practice and other assistance. Inputs you provide to these features may be transmitted to those AI providers in order to generate a response. We do not sell your data, and AI providers we use are contractually restricted from using your content to train their models where that option is available.

7. Sharing your information

We share personal information only with:

• Service providers that help us operate the Platform (hosting, database, email delivery, payment processing, AI providers, analytics).
• Employers — only where you actively choose to share your profile or apply to a role.
• Regulators, law enforcement or other authorities where we are legally required to do so.

We do not sell your personal data.

8. International transfers

Some of our service providers process data outside the UK and EEA. Where this happens, we rely on appropriate safeguards (such as the UK International Data Transfer Agreement or EU Standard Contractual Clauses) to protect your information.

9. How long we keep your information

We keep your account and profile information for as long as your account is active. If you close your account, we will delete or anonymise your personal data within a reasonable period, except where we are required to retain certain records (for example for tax, accounting or fraud-prevention purposes).

10. Security

We use industry-standard technical and organisational measures to protect your information, including encryption in transit, access controls, and row-level security on our database. No system is ever completely secure — please use a strong, unique password and keep your login details confidential.

11. Your rights

Under UK and EU data protection law you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data (subject to legal retention requirements).
• Object to or restrict certain processing.
• Request a portable copy of your data.
• Withdraw consent at any time where processing is based on consent.
• Complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

To exercise any of these rights, email admin@igpservices.com.

12. Cookies

We use a small number of strictly necessary cookies and similar technologies to keep you signed in, remember your preferences and operate the Platform securely. We do not use advertising cookies.

13. Children

The Platform is intended for users aged 18 and over. We do not knowingly collect data from children.

14. Changes to this policy

We may update this policy from time to time. The latest version will always be available on the Platform, and we will notify you of material changes by email or in-app notice.

15. Contact

Questions about this Privacy Policy or how we handle your data can be sent to admin@igpservices.com.