SafirSafirBack to website

LEGAL INFORMATION

Privacy Policy

How Safir International Education Consultancy handles personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable French data-protection law.

Effective date: 27 August 2026. This policy applies to this website and enquiries made directly to Safir. External services, including WhatsApp, apply their own privacy terms.

1. Who is responsible for your data?

The data controller is Safir International Education Consultancy, based in Paris, France (“Safir”, “we”, “us”). Privacy enquiries and requests to exercise your rights may be sent to info@safirconsultancy.fr.

2. Data we may collect

Depending on how you contact us, we may process:

  • identity and contact details, such as your name, email address and WhatsApp contact;
  • your current country, preferred study destination, field and level of study;
  • academic, application or immigration-related information that you choose to provide;
  • messages, correspondence and consultation history;
  • technical information normally generated when a website is accessed, such as IP address, browser information, timestamps and security logs.

Please do not send passports, identity documents, financial information, health information or other sensitive documents through the general website enquiry unless Safir has specifically requested them through an appropriate secure channel.

3. Why we process data and our legal bases

  • Responding to enquiries and preparing a possible service: steps taken at your request before entering into a contract.
  • Providing agreed consultancy services: performance of a contract.
  • Operating, securing and improving the website: Safir’s legitimate interests in providing a reliable and secure service.
  • Keeping legally required records and responding to authorities: compliance with legal obligations.
  • Optional marketing: consent where consent is legally required. You may withdraw it at any time.

Providing information is voluntary, but Safir may be unable to answer an enquiry or provide a requested service without necessary details.

4. Who receives your data?

Access is limited to authorised Safir personnel and service providers that need the information for hosting, communications, security, document handling or professional support. Information may also be disclosed where required by law or to establish, exercise or defend legal claims.

Safir does not sell personal data. Universities, schools, public authorities, visa service providers or other third parties receive applicant information only when necessary for a service requested by you and with an appropriate legal basis.

5. International transfers and external services

Some destinations, institutions and technology providers may be outside the European Economic Area. Where GDPR transfer rules apply, Safir will use an available lawful safeguard, such as an adequacy decision, approved contractual clauses, or another permitted mechanism.

WhatsApp is an external Meta service. When you select a WhatsApp link, Meta processes information under its own terms and privacy policy. You should avoid sending sensitive documents until Safir confirms an appropriate channel.

6. Retention

Safir keeps personal data only for as long as necessary for the relevant purpose:

  • general enquiries that do not become a client relationship: normally up to two years after the last meaningful contact;
  • client and service records: for the duration of the relationship and then for applicable French limitation, accounting and legal-retention periods;
  • consent records and objections: for as long as needed to demonstrate and respect your choice;
  • technical and security logs: for a limited period proportionate to security needs.

Data may be retained longer when required by law, a dispute or a legal claim, and will then be restricted to that purpose.

7. Cookies and local storage

The website currently uses browser storage to remember your language preference. It does not currently use advertising cookies. If optional analytics or marketing technologies are introduced, the website will provide any notice and consent choices required by law before they are activated.

8. Your rights

Subject to the conditions of the GDPR, you may request access, correction, deletion, restriction, portability, or object to processing. Where processing relies on consent, you may withdraw consent at any time without affecting earlier lawful processing. You may also give instructions concerning your data after death where French law permits.

Send requests to info@safirconsultancy.fr. Safir may request proportionate information to verify identity. You also have the right to complain to the Commission Nationale de l’Informatique et des Libertés (CNIL).

9. Security and changes

Safir applies reasonable organisational and technical measures appropriate to the nature and risk of the information. No internet service is completely risk-free. This policy may be updated when practices, services or legal requirements change. The effective date above identifies the current version.