Privacy Policy

The data controller is Gatescore Ltd, company number 17241991, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. Gatescore is managed and administered by Resource Pool (Private) Limited, registered in Pakistan, which acts as our processor and not as a controller in its own right.

Gatescore Ltd is registered with the United Kingdom Information Commissioner's Office under registration ZC158578. Data protection questions go to support@gatescore.ai.

• Account and contact data. Name, email address, telephone number, country, the organisation you work for if you are an agent, and your login credentials in hashed form.
• Audit questionnaire data. Your travel document details, trip and route details, destination selections, employment, study, family, sponsorship and financial circumstances as you enter them.
• Documents you upload. Passport pages, identity documents, bank statements and financial evidence, employment and offer letters, contracts, academic and qualification records, sponsor and accommodation evidence, medical fitness records where a deployment route requires them, attestation and clearance paperwork, and previous visa or refusal documentation.
• Transaction data. What you bought, when, the amount, the currency, the invoice, and the outcome of the payment. We do not collect or store your full card number. Card details are entered on the payment provider's own secure form.
• Technical data. IP address, device and browser type, pages visited, and time stamps, collected through server logs and analytics.

We do not sell personal data. We do not share it with advertisers. We do not use your documents to train third party artificial intelligence models.

• Your agent. Where you bought through an appointed agent, or asked us to share with one, that agent sees the file and the report. The agent is a separate controller for its own dealings with you.
• Service providers. Cloud hosting, email delivery, payment processing, customer support tooling and analytics, each under a written contract limiting them to our instructions.
• Group operations. Resource Pool (Private) Limited, SECP registration 0324964, based in Islamabad, manages and administers Gatescore day to day. Its staff access personal data to run support, agent onboarding and payment handling. It does so as our processor, under a written data processing agreement, acting only on our documented instructions.
• Entry data providers. Destination selections may be sent to entry-rules data providers to retrieve current requirements. Identity documents are not sent to them.
• Professional advisers and authorities. Where we are legally required to disclose, or need to establish or defend a legal claim.

Data is hosted in the United Kingdom or the European Economic Area. Support and operations staff in Pakistan access data to do their work, which is a transfer outside the United Kingdom. Pakistan is not covered by a United Kingdom adequacy decision, so that transfer is made under the United Kingdom International Data Transfer Agreement together with technical measures including access controls, logging and encryption. A copy of the transfer safeguards is available on request from support@gatescore.ai.

You can ask us to delete your uploaded documents sooner than the periods above. Email support@gatescore.ai and we will do so within 30 days, unless we are required to keep something for a legal reason.

• Encryption in transit using TLS, and encryption at rest for stored documents.
• Role-based access, so staff see only the files their role requires.
• Access logging and review.
• Written confidentiality obligations on all staff and contractors.
• A documented breach procedure. Where a breach is likely to risk your rights, we notify the ICO within 72 hours and tell you without undue delay.

Under United Kingdom data protection law you can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, port it to another provider, or stop processing based on legitimate interests. You can withdraw consent at any time, and you can object to marketing at any time with immediate effect.

Send any request to support@gatescore.ai. We reply within one month. We may ask you to confirm your identity first. There is no charge unless a request is manifestly unfounded or excessive.

If you are unhappy with how we handled your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would rather you came to us first so we can put it right.

We use cookies that are strictly necessary to keep you logged in and to keep the site secure. These do not require consent. Analytics cookies, which help us understand how the site is used, are set only if you accept them in the cookie banner. You can change your choice at any time in your browser settings or through the banner.

The service is not directed at children. Accounts are for adults aged 18 or over. Where a file concerns a minor, it must be submitted by a parent or legal guardian.

The audit is automated. It applies rule packs to the file you submit and produces findings and a score. It does not make any decision that has a legal or similarly significant effect on you. No visa, permit, job or admission decision is made by Gatescore or by the audit engine. Every finding in the report names the requirement it relates to, so you can see why it was raised, and you can contact support@gatescore.ai to have a finding reviewed by a person.

We will post any change to this policy on this page with a new version number and effective date, and will email account holders where the change is material.