DiuMitra Privacy Policy
DiuMitra’s Privacy Policy explains how personal information is handled when you use our website, make an enquiry, communicate through chat or WhatsApp, request travel or community support, or use learning services. It explains what information may be collected, why it is needed, when other providers become involved and how to exercise your data protection rights.
Last reviewed: 22 October 2026
1. About this Privacy Policy
This policy relates to the website at https://diumitra.com/ and the DiuMitra – Travel & Visa Advisory services and online features offered through it. It covers website visitors, people who contact us, customers, individuals requesting provider introductions and users of relevant tools or learning features.
DiuMitra is a community-led travel, information and signposting service for people in the UK, India and elsewhere. It is not a government department, embassy, consulate, solicitor, regulated immigration adviser or regulated financial adviser. This distinction concerns the scope of our services; it does not reduce your rights over your personal information.
2. Who is responsible for your personal information?
The operator of DiuMitra determines the purposes and methods of processing personal information for its own website, enquiries, customer communication and administration. DiuMitra – Travel & Visa Advisory is the public-facing name used for these activities.
For privacy questions, requests about your information or data protection complaints, email privacy@diumitra.com. You can also reach us through the DiuMitra contact page. Please do not include a passport image, bank statement, security code or other sensitive document in an initial message.
When you use a separate booking supplier, payment provider, professional adviser, messaging service or external platform, that organisation may also be responsible for its own handling of your information. Its privacy notice will explain its separate role.
3. What information can we collect?
The information involved depends on the service or feature you use. Categories may include:
- Contact and enquiry details: your name, email address, telephone number, preferred communication method, language preferences and the information you choose to include in a request.
- Travel or service preferences: destinations, dates, traveller numbers, itinerary preferences and the general type of assistance or supplier introduction requested.
- Communications: emails, contact forms, WhatsApp messages, website chat content, callback requests, support conversations and records of how an enquiry was handled.
- Website and technical information: IP address, device or browser type, approximate location derived from technical data, page requests, timestamps, security events and information collected by cookies or similar technologies where enabled.
- Website visitor and chat-session information: session identifiers, landing or recent pages, navigation history, whether an enquiry or chat flow has started and messages or actions associated with a visitor session, where the relevant website feature is enabled.
- Learning and digital-product information: account identifiers, course registrations, learning progress, answers or attempts, purchases, access records and communications relating to learning support, where those services are used.
- Booking, billing and transaction records: the service purchased or requested, transaction references, payment status and records needed for customer support, accounting or compliance. A payment provider may handle card details directly.
- Feedback, listings and community contributions: information you submit for a review, listing, enquiry, event, referral or community activity, including material you ask us to make publicly visible.
We may also receive relevant information from a person authorised to contact us for you, or from a supplier when you have arranged for us to be involved. We do not assume that someone acting for you is automatically authorised to receive your private information.
4. Website visits, visitor history and live chat
The website may use systems that record how a visitor interacts with pages, forms, chat features or enquiry flows. Depending on the enabled features, this can include session identifiers, page-view history, the most recently viewed page, the time of a visit and whether a conversation is new, ongoing or previously handled.
Where human chat support is offered, authorised team members may be able to see information associated with a conversation to understand the enquiry and respond. An automated greeting or chatbot message does not mean a person is monitoring every visitor, and an agent’s access to visitor history does not itself authorise unsolicited marketing.
Some monitoring relies on cookies or similar technologies. Any use requiring consent or another applicable legal condition must be managed under the relevant rules; our separate Cookie Policy explains the available choices. You can use the website without providing an enquiry message, although some technical information is processed simply to deliver and protect the site.
5. Why we use your information and the legal basis
UK data protection law requires a lawful basis for each use of personal information. The following describes the main purposes and the basis that may apply; the appropriate basis depends on the particular activity and must reflect how the service operates.
Purpose | Information involved | Relevant lawful basis |
|---|---|---|
Reply to enquiries and provide requested information | Contact information and enquiry content | Legitimate interests in responding to genuine enquiries, or steps you request before entering a contract |
Arrange or administer a service you purchase from us | Booking or service details, customer records and communications | Performance of a contract, or steps requested before a contract |
Operate learning accounts or deliver purchased digital content | Account, registration, access and transaction information | Performance of a contract |
Maintain the website and investigate security issues | Technical logs, session and security information | Legitimate interests in running and securing the service, and legal obligations where applicable |
Process accounting records and respond to lawful requests | Transaction and required record-keeping information | Compliance with legal obligations |
Manage support issues, rights requests and complaints | Enquiry details, correspondence and evidence | Legal obligations and, where appropriate, legitimate interests in resolving disputes |
Provide an introduction you ask us to make | Limited contact and service-request information | Steps requested before a contract or legitimate interests, as appropriate to the arrangement |
Send optional promotional communications | Contact details and marketing choices | Consent where required, or legitimate interests only where the electronic-marketing rules permit it |
Use optional analytics or other tracking | Cookie identifiers, device and interaction data | Consent where legally required, or another applicable lawful basis and storage/access exception where available |
Where we rely on legitimate interests, these may include responding to enquiries, protecting the website, preventing misuse and keeping appropriate service records. We must consider whether that use is necessary and fair, and whether your interests, rights or freedoms outweigh ours.
We do not require you to opt into unrelated marketing to ask a question or request support. If you object to direct marketing, we must stop using your information for that purpose.
6. Information you are asked to provide
You can browse much of the website without giving us your name. To reply to an enquiry, arrange a requested service or create a learning account, we may need a way to identify or contact you and enough information to carry out that request.
If you choose not to provide information that is necessary for a particular service, we may be unable to complete that request. Information that is optional should not be treated as mandatory simply because a form permits it to be supplied.
7. Sensitive information, passports and family documents
Travel, visa, OCI, Portuguese-documentation, benefits, property and similar enquiries can involve especially private information. Please do not send passport scans, visa decisions, biometric information, national identifiers, bank details, health records, children’s identity documents or passwords through a first enquiry, public comment, ordinary website chat or unsolicited WhatsApp message.
Some documents may also reveal special-category information, such as health, religion or ethnic origin. If a specific lawful activity genuinely requires us to handle such information, an appropriate additional legal condition and secure handling arrangements are needed before collection. Do not assume that submitting a document automatically gives DiuMitra permission to use or forward it.
DiuMitra does not decide official applications or act as an immigration, legal or financial representative. Applicants should provide official submissions directly to the appropriate body or an authorised professional, using that recipient’s designated process.
8. Chatbots, AI-assisted features and online tools
Website chat, tools and learning features may use automated responses or external technology providers. Information you enter can be processed to produce a reply, operate a conversation, maintain technical logs or allow a permitted human follow-up.
Automated responses may be incomplete or incorrect and must not be treated as official decisions or professional advice. Avoid entering sensitive information about yourself or anyone else into an automated feature unless its specific privacy arrangements and secure submission process have been made clear.
We will not treat a chat enquiry as blanket permission to share the transcript for unrelated purposes. If a third-party AI or messaging service is used, the provider’s role, applicable data processing arrangements and any international transfers must be assessed for that feature.
9. Online learning, purchases and children’s information
If you use a DiuMitra learning service, we may process details needed to set up an account, manage enrolment, provide course material, record progress, administer paid access and respond to support requests. Some features may require registration, while other resources may be available without an account.
If children or young people use relevant learning or community features, their personal information requires particular care. A parent or guardian should contact us before sharing a child’s sensitive records, identity documents or financial information; any processing involving children must follow appropriate age-related safeguards and notices.
Payment processing may be carried out by an external provider. Its privacy information applies to payment information handled directly by it; DiuMitra may still receive a payment status, order reference or other transaction record needed to administer a purchase.
10. When we share information with others
We may need to share limited personal information with service providers who support website hosting, website security, technical operation, communications, forms, support systems, payments or learning delivery. DiuMitra uses WordPress and Hostinger hosting, and visitors may choose to communicate through WhatsApp; separate provider practices can apply to those services.
Where you request a travel quotation, referral or other introduction, we may share the details reasonably necessary for the requested contact or arrangement with a relevant supplier or professional. This is not permission to circulate sensitive documents or add you to unrelated marketing lists.
An airline, hotel, transfer operator, insurance provider, property professional, solicitor, mortgage adviser or other external organisation may act as an independent controller. You should review that organisation’s privacy notice before sharing detailed personal information or entering its booking or advisory process.
Information may also need to be disclosed where the law requires it or where necessary and lawful to address fraud, security, complaints or legal claims. We do not give external organisations unrestricted access to user information merely because they are listed or linked on the website.
11. International access and transfers
Our audience includes people in the UK, India and Portugal, and some enquiries or suppliers may involve international communication. Online tools, messaging systems, hosting components and other service providers may also process information outside the UK.
Where a transfer is restricted under UK data protection law, the relevant organisation must identify an appropriate transfer route, such as UK adequacy regulations, suitable contractual safeguards or a legal exception where justified. The protection that applies may differ depending on the recipient and service, and we cannot promise that all third-party systems remain in the UK.
12. Cookies and similar technologies
Cookies, web storage, scripts and similar technologies may be used to operate the website, remember a choice, provide security, maintain a login or measure use of a feature. Not all of these technologies are treated in the same way under UK law.
Where consent is required, the relevant technology should not be used before valid consent has been obtained. Some specific uses may qualify for a legal exception with different conditions. The separate DiuMitra Cookie Policy explains the categories, available choices and any applicable consent controls.
13. Marketing messages and your choices
If you ask to receive news or promotional updates, your contact details may be used for that purpose only where the relevant data protection and electronic-marketing requirements are met. A service update about something you have asked us to do is not necessarily a promotional message.
You can withdraw marketing consent or object to direct marketing at any time by using the unsubscribe instructions in a message, where provided, or by emailing privacy@diumitra.com. Stopping promotional messages does not stop essential communications about an active order or enquiry.
14. How long we keep information
We keep personal information only for as long as it is needed for the purpose for which it was collected, taking account of statutory obligations and any reasonable need to establish, exercise or defend legal claims. Different kinds of records may have different retention periods.
For example, a general enquiry may no longer be needed after it has been resolved; a purchase may require longer accounting and transaction records; a learning account may retain progress while the account is active; and security logs may be retained for a limited period to investigate abuse. Applicable retention periods and criteria should be documented for each active system.
When the relevant period ends, the information should be securely deleted, anonymised or retained only where another lawful reason exists. Backup copies may remain for a limited recovery cycle and must not be kept indefinitely without justification.
15. Security and safe communication
We seek to protect personal information through proportionate technical and organisational measures, including controlling who should be able to access information and using service arrangements appropriate to the data involved. No website, email service, telephone network or messaging platform can guarantee absolute security.
Please verify unusual requests for payment or documents using a known DiuMitra contact method. Never provide passwords, one-time passcodes, payment-card PINs or full banking credentials in a public form, automated chat or unsolicited message.
16. Your rights under UK data protection law
Depending on the circumstances, you may have the right to:
- Be informed about how your personal information is used.
- Access a copy of personal information held about you.
- Correct inaccurate or incomplete information.
- Request erasure where the relevant conditions apply.
- Restrict processing in certain circumstances.
- Object to certain uses, including direct marketing.
- Receive or transfer information in a portable format where that right applies.
- Withdraw consent where consent is the legal basis for a use.
- Challenge applicable solely automated decisions that have legal or similarly significant effects, subject to the rules and safeguards that apply.
These rights are not absolute in every situation. We may need proportionate evidence of identity or authority before disclosing information, and legal exemptions or record-keeping duties may affect how a request is fulfilled.
To make a rights request, contact privacy@diumitra.com or use the contact page. We will handle it within the timescales required by law, ordinarily one calendar month for many requests, subject to any applicable extension or permitted pause.
17. Data protection complaints
If you are concerned about how we have collected, used, shared or retained your information, you can make a data protection complaint through privacy@diumitra.com or the DiuMitra contact page. Please describe the concern, relevant dates and how you would like us to address it; do not send unnecessary identity documents with your first message.
We will acknowledge data protection complaints within 30 days, investigate appropriately, keep you informed and communicate the outcome without unjustifiable delay. A complaint and a request to access or delete information are separate procedures, each with its own legal requirements.
You also have the right to complain to the UK Information Commissioner’s Office (ICO), the independent UK data protection regulator. You do not have to give up that right by contacting DiuMitra first.
18. External websites and independent services
The site may contain links to official government portals, travel providers, online payments, learning resources, professional organisations and community listings. Following an external link may take you to a separate service with different privacy rules and responsibilities.
We encourage you to check the correct official or professional recipient before disclosing sensitive information. DiuMitra cannot control every independent website or provider linked to from our pages.
19. Updates to this policy
We review this Privacy Policy when our services, technology, information-handling practices or applicable requirements change. If a change substantially affects how we use personal information, we will provide appropriate updated information and seek additional consent where required before beginning the new use.
For enquiries about this policy or the handling of your information, contact privacy@diumitra.com or DiuMitra Contact.