Legal

Privacy Policy

Last updated: 27 August 2026

1. Data controller

Invite Daddy Limited
Company Registration Number (CRO): 759077
Registered in Ireland
Registered office: 3rd Floor, The Bank Building, Blackhall Place, Mullingar, Co. Westmeath, N91 W3WP, Ireland
Email: info@invitedaddy.ie · Telephone: +353 87 977 8939

We have not appointed a Data Protection Officer, as we are not required to. Data protection enquiries go to the email address above.

2. What personal data we collect

We do not collect or store card data. Card details are entered directly into a secure form hosted by our acquiring bank and never pass through this website. We never see or hold your full card number, expiry date or security code. We receive only a transaction reference and the outcome.

Special category data

Some applications require data that GDPR treats as special category — for example health information, or data revealing religious belief or political opinion, where a form or consulate demands it. We collect such data only where it is genuinely necessary for your application, and we rely on your explicit consent (Article 9(2)(a)) or on the establishment or defence of legal claims (Article 9(2)(f)). You may withdraw that consent at any time, though doing so may make it impossible to continue with your application.

3. Legal basis for processing

• Performance of a contract (Article 6(1)(b)) — the main basis. We process your data to deliver the services you engaged us for and to take payment.
• Legal obligation (Article 6(1)(c)) — retaining accounting and tax records, and complying with any lawful request from a competent authority.
• Legitimate interests (Article 6(1)(f)) — keeping records to defend potential legal claims, preventing fraud and misuse, and administering our business. We have weighed these against your rights.
• Consent (Article 6(1)(a)) — for special category data, and for any optional communication. Consent can be withdrawn at any time.

4. Who we share your data with

We never sell your personal data and never share it for third-party marketing. We disclose it only as follows:

• Visa application centres, embassies and consulates — where the application process requires it, or where we prepare documents you will submit.
• Employers abroad — for work placement clients only, and only to the specific employer being matched to you in Serbia, Ukraine or Belarus.
• Translators, notaries and legalisation services — where your documents require certified translation or notarisation.
• Our acquiring bank and payment processor — to take payment and process refunds.
• Professional advisers — accountants and lawyers, bound by confidentiality.
• IT and hosting providers — acting as processors under written contract, and only on our instructions.
• Competent authorities — where disclosure is required by law.

5. Transfers outside the EEA

Delivering our services necessarily involves transferring personal data outside the European Economic Area. Specifically:

• To you, in your country of residence — India, Nepal, Pakistan or Bangladesh.
• To employers and authorities in Serbia, Ukraine or Belarus, for work placement clients.
• To consulates and visa centres handling your application, which may be located outside the EEA.

Some of these countries have no European Commission adequacy decision. Where that is the case, we rely on:

• Standard Contractual Clauses with processors, where an ongoing processing relationship exists; or
• Article 49(1)(b) GDPR — the transfer is necessary to perform the contract you have entered into with us. Sending your application data to the consulate that must decide your case is inherent to the service you asked us to provide.

You may ask us for details of the safeguards applying to a specific transfer.

6. How long we keep your data

When a retention period ends, data is securely deleted or irreversibly anonymised.

7. Your rights

Under GDPR you have the right to:

• Access — obtain a copy of the personal data we hold about you.
• Rectification — have inaccurate or incomplete data corrected.
• Erasure — have your data deleted, where no legal obligation requires us to keep it.
• Restriction — limit how we use your data while a dispute about it is resolved.
• Portability — receive data you gave us in a structured, machine-readable format, or have it sent to another controller.
• Object — object to processing based on our legitimate interests.
• Withdraw consent — at any time, where processing is based on consent. This does not affect the lawfulness of processing before withdrawal.
• Not be subject to automated decision-making — we do not carry out automated decision-making or profiling with legal or similarly significant effects.

To exercise any right, email info@invitedaddy.ie. We respond within one month, extendable by two further months for complex requests, in which case we will tell you and explain why. There is no charge unless a request is manifestly unfounded or excessive. We may need to verify your identity first.

8. Your right to complain

If you believe we have handled your data unlawfully, please raise it with us first. You also have the right to complain directly to the Irish supervisory authority:

Data Protection Commission
6 Pembroke Row, Dublin 2, D02 X963, Ireland
www.dataprotection.ie

If you live in another EU or EEA country, you may instead complain to your local data protection authority.

9. Security

We apply appropriate technical and organisational measures to protect your data, including encrypted transmission (HTTPS across the site), access limited to those who need it, and confidentiality obligations on everyone handling client files. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a breach occurs that is likely to result in a high risk to your rights, we will notify you and the Data Protection Commission as GDPR requires.

10. Cookies

This website uses no analytics, advertising or tracking cookies and does not profile visitors. It loads a web font from Google Fonts; that request reaches Google’s servers and may expose your IP address to Google. The payment page embeds a secure form hosted by our acquiring bank, which may set cookies strictly necessary to process your payment and to perform 3-D Secure authentication. Those cookies are governed by the bank’s own privacy notice.

11. Children

Our services are not directed at children. Where an application includes a minor as a dependant, we process that data on the instruction of the parent or legal guardian, who is responsible for providing it.

12. Changes to this policy

We may update this policy. The current version always appears here with its date. Material changes affecting how we use your data will be notified to active clients by email.

13. Contact

Invite Daddy Limited · Company Registration Number 759077 · Registered in Ireland
3rd Floor, The Bank Building, Blackhall Place, Mullingar, Co. Westmeath, N91 W3WP, Ireland
info@invitedaddy.ie · +353 87 977 8939

Terms & Conditions · Refund Policy · Service Delivery Policy