Privacy Notice

The short version. pass2port ranks residency- and citizenship-by-investment pathways based on your passport. We collect contact details and preferences when you use optional forms or ask for a roadmap email. We do not evaluate ancestry or descent eligibility, and we do not use AI to process your personal data. We don't sell your data or use it for third-party advertising. Optional advisory follow-up is disclosed separately and shared with CoreSpaces Realty only with your consent. You can withdraw consent and ask us to delete your data at any time.

1. Who we are

pass2port (the website at pass2port.com) is operated by CoreSpaces LLC (Dubai, UAE) ("pass2port", "we", "us"), which is the data controller responsible for the personal data described here. CoreSpaces LLC (Dubai, UAE) is based in the United Arab Emirates. You can reach us at privacy@pass2port.com. For data-protection queries and grievances, contact privacy@pass2port.com.

Advisory follow-up recipient: CoreSpaces Realty (RERA ORN 253900901) is the Dubai property advisory that may contact you about residency and property services when you consent on an optional follow-up form. Both entities are UAE-based; we do not share your details with CoreSpaces Realty without your separate consent at the form.

2. What this notice covers

This notice applies to information collected through pass2port.com and related emails. It is written to meet our obligations under the UAE Personal Data Protection Law (PDPL), India's Digital Personal Data Protection Act, 2023, and the EU/UK GDPR where applicable. Wording on UAE-specific obligations should be confirmed by qualified counsel before publication.

3. The information we collect

Information you give us

Email address, and optionally name and phone number, on optional follow-up or roadmap forms.
Quiz preferences: passport(s) held, motivation, budget band, timeline, relocation willingness, citizenship retention preference, and family size — processed to rank pathways for your session; not stored as a persistent profile unless you submit an optional form.
A nationality context and pathway interest tag on optional follow-up forms (e.g. UAE Golden Visa guidance) — a generic slug and topic label only.
On guide PDF forms: contact details plus coarse preference bands (e.g. budget band, route type, year-group band such as Primary/Secondary). We do not collect a child's name, age, date of birth, or other identifying details about a child.
Anything you include if you contact us.

We do not collect ancestry, parent/grandparent birth countries, or descent-eligibility inputs. Citizenship-by-descent pages are informational only.

Information collected automatically

Basic technical and usage data needed to run and secure the site, and error-diagnostic logs.
Cookies — see §11.

We do not ask for financial account numbers, government ID numbers, or documents.

4. Why we use your information, and our lawful basis

| What we do | Why | Lawful basis | |---|---|---| | Rank pathways for your passport and preferences | Provide the core service | Your consent at the roadmap gate / legitimate interest in session processing | | Email your roadmap | You asked us to | Consent / contract | | Send occasional updates | Keep information current | Consent — withdrawable | | Share inquiry with CoreSpaces Realty for advisory follow-up | You asked us to on the optional form | Separate consent — withdrawable | | Operate and secure the site | Working, safe service | Legitimate interests / legal obligation |

We do not sell personal data or share follow-up inquiries with program providers, agents, or other third parties beyond CoreSpaces Realty as disclosed and consented. The ranking engine is deterministic. Roadmap emails use your ranked results plus standard introductory text — we do not send your personal data to any AI provider to generate that prose.

5. Consent and withdrawing it

We ask for consent clearly (unticked checkboxes) and record it per purpose (boolean, copy version, timestamp). You may withdraw consent via unsubscribe links or by contacting us. Withdrawal does not affect prior lawful processing.

6. Who we share it with

Service providers (hosting on Vercel, database on Neon, transactional email via Resend, security monitoring) under contract. These providers process data only to deliver the service on our instructions.

CoreSpaces Realty — only when you consent on an optional advisory form, for follow-up on residency and property services. Both CoreSpaces LLC (Dubai, UAE) and CoreSpaces Realty are UAE entities.

We may disclose data if required by law or to establish or defend legal claims.

7. International transfers

We operate from the UAE. Some service providers are outside the UAE/EU/UK (e.g. the United States). We use appropriate safeguards where required (contractual terms and, where applicable, standard contractual clauses).

8. How long we keep it

We keep email and consent records, and advisory inquiry details, for 24 months from collection, after which they are deleted automatically. You can ask us to delete them earlier at any time. Quiz inputs are not persisted at rest unless you submit a form. Diagnostic logs are kept briefly.

9. Your rights

Depending on where you are, you may access, correct, delete, withdraw consent, object, restrict, or port your data. Use the deletion form on this page, or contact privacy@pass2port.com. You may complain to the relevant authority (UAE PDPL authority — confirm with counsel; India DPB; EU supervisory authority; UK ICO).

10. Children

pass2port is for adults (18+). We do not knowingly collect children's data.

11. Cookies and analytics

Necessary cookies only unless you consent to non-essential analytics.

12. Changes to this notice

We may update this notice and will change the version and date. Material changes may require fresh consent.

13. Contact us

privacy@pass2port.com · grievance: privacy@pass2port.com

This notice is provided for transparency and is not legal advice. Counsel should review before publication.