Welcome to TalentVisa. By accessing or using our website and services, you agree to be bound by these Terms & Conditions. Please read them carefully before using our site.
The domain www.talentvisa.com
is operated by Yair Oz and forms part of the TalentVisa group of immigration services. This Privacy Policy (“Policy”) explains how we collect, process, and use your personal data. TalentVisa.com is managed by licensed immigration advisers under MARA (Australia) and IAA (New Zealand), and adheres to strict privacy obligations under the Privacy Act 1988 (Australia), the Privacy Act 2020 (New Zealand), and international frameworks such as the GDPR and CCPA.
We recognize the sensitive nature of the information entrusted to us, including personal identification data, legal and employment documents, academic records, and where required, medical or character-related information. Accordingly, TalentVisa is committed to applying advanced technical, organizational, and legal safeguards to protect your information against unauthorized use, disclosure, alteration, or loss.
TalentVisa reserves the right to update this Policy from time to time to reflect changes in law or business operations. In the event of any material change, we will notify you through reasonable means, such as a notice on our website or direct communication.
This Privacy Policy sets out how TalentVisa collects, uses, stores, shares, and protects your personal data. It is designed to give you a clear overview of our practices and your rights under applicable privacy laws in Australia, New Zealand, and relevant international standards (GDPR, CCPA).
This Policy covers the following key areas:
TalentVisa may collect and process two main categories of information: non-personal data and personal data.
Non-personal technical and usage information is collected automatically when you interact with our website or systems, including:
Browser type, device, and operating system.
Language settings and general location (Geo-IP).
Pages visited, session identifiers, and time spent on site.
IP addresses, cookies, user agents, and device identifiers.
This information is collected primarily through third-party services (e.g., Google Analytics, Cloudflare, Meta Pixel) and is used to improve user experience, strengthen website security, and measure marketing effectiveness.
At the preliminary stage (eligibility checks and consultation requests), we may collect limited personal data for the purpose of assessing visa options:
Typeform (Eligibility Questionnaire): Basic details such as age, education, professional experience, field of occupation, language proficiency, marital status, and general health declarations (voluntary). At this stage, we do not request full identification details; the purpose is only to provide an initial eligibility assessment.
Jotform (Consultation or Service Intake): Similar data may be collected for the purpose of scheduling consultations or starting a specific service, such as an Australian Working Holiday Visa. In such cases, the client provides confirmation of eligibility, signs a formal service agreement, and completes payment via secure channels.
WordPress (Contact Forms): If you submit details such as name, email, phone number, or a message via our website, the information will be stored in our system to enable follow-up communication.
Mailchimp (Mailing Lists): Basic details (name, email, preferences) may be transferred to Mailchimp for the purpose of sending professional updates or promotional offers. You can unsubscribe at any time via the built-in “unsubscribe” mechanism.
Consent: At the end of the Typeform questionnaire, you are required to tick a consent box confirming that you have read and agreed to this Privacy Policy and consent to the collection and use of your information for the purpose of an initial eligibility assessment. Without this consent, the questionnaire cannot be completed.
When you formally engage TalentVisa and sign a service agreement, additional personal data is collected as required for preparing and lodging visa applications. This may include:
Identification details (full name, passport, contact details, residential address).
Academic and employment records (certificates, transcripts, CVs, reference letters).
Relationship evidence (marriage certificates, partnership documents).
Police clearance certificates and medical examination results, if required.
Birth certificates of family members.
Bank statements, account confirmations, and financial capacity evidence.
Investment data (source of funds, asset documentation – for investor visa applications).
Professional licenses or registration documents.
Immigration forms and supporting evidence required by the relevant government authority.
Legal or family documents (marriage/divorce decrees, military service or exemption certificates).
Digital photographs, scans, and other uploaded files.
This information is stored securely in a private Google Drive folder created specifically for your case, accessible only to you and authorized TalentVisa personnel (primarily Yair Oz). Copies may also be stored in encrypted internal systems.
Personal data may also be collected through:
Email correspondence or live chat.
Phone calls or online meetings (Zoom / Google Meet).
Social media interactions (Facebook, Instagram, LinkedIn).
To operate and enhance our services, TalentVisa uses trusted third-party providers, including but not limited to:
Submitting personal information through initial forms (Typeform, WordPress, Mailchimp) is voluntary, but without it TalentVisa may be unable to proceed with eligibility checks or schedule a consultation.
Information collected at the screening stage is used solely for preliminary assessment and does not constitute legal advice or a guarantee of visa approval.
Information stored in Google Drive or other systems is retained only for clients who formally engage in a visa process and is protected with appropriate technical and organizational safeguards.
Clients remain responsible for the accuracy and completeness of the information provided.
TalentVisa is not responsible for the quality, accuracy, or completeness of any information provided by clients or third parties; such information is accepted “as is.”
The personal data we collect and process through TalentVisa’s services is required to operate our immigration advisory and representation activities. We use the information for different purposes depending on the stage of our engagement with you.
Preliminary eligibility assessment: Information submitted via the Typeform quiz, website contact forms (WordPress), or Mailchimp mailing lists is used solely to provide an initial eligibility evaluation for immigration pathways (e.g., Australia, New Zealand, Golden Visa countries, and others).
Storage in secure systems: At this stage, information is stored internally and in selected third-party systems (Typeform, Jotform, Mailchimp, WordPress), which operate under recognized international data security standards.
No transfer to authorities: Data collected during this stage is not shared with immigration authorities; it is used internally for assessment only.
Marketing use with consent: Basic details (such as name and email) may be used to send newsletters, professional updates, or service offers – but only with your explicit consent. You may unsubscribe at any time.
Tailored advisory reports: Using education, employment, financial, and personal details to build a complete profile and provide accurate, professional advice.
Consultation management: Scheduling, documenting, and managing communications for advisory meetings.
Client file setup: Consolidating required documents (passport, academic records, family documents, employment records, CVs, and in some cases medical or police certificates) in a private Google Drive folder, accessible only to you and authorized TalentVisa staff.
Sharing with professional colleagues: In specific cases, and only with your prior consent, we may collaborate with external professionals (e.g., immigration lawyers, specialist advisers, or partner agents in other jurisdictions).
Immigration authority requirements: For official visa submissions, your information will be transferred to the competent immigration authorities (e.g., the Australian Department of Home Affairs or Immigration New Zealand) in line with their laws and regulations.
Background and security checks: Authorities may require additional checks (e.g., military service, criminal record, financial due diligence, or Interpol cross-checks for investment visas).
Regulatory oversight: In certain circumstances, professional regulators (such as MARA in Australia or IAA in New Zealand) may require us to provide limited information as part of compliance audits.
Service improvement: Analyzing user interactions via Google Analytics, Cloudflare, Meta Pixel to improve website functionality and digital processes.
Data security: Using collected data to prevent unauthorized access, detect fraud, and maintain the integrity of information.
Legal compliance: Retaining records and ensuring compliance with statutory obligations in Australia, New Zealand, and other relevant jurisdictions.
Your data will be used only for the purposes outlined in this Policy and will not be used for any other purpose without your explicit consent, unless required by law.
Information collected at the initial eligibility stage is voluntary but necessary to proceed with consultations or case initiation.
Third-party systems used (Typeform, Mailchimp, WordPress) comply with international security standards, and access to your data is restricted.
Sharing with external professionals occurs only with your knowledge and consent.
Disclosure to regulators (MARA, IAA) happens only when legally required and to the minimum extent necessary.
TalentVisa is not responsible for the accuracy, completeness, or quality of data provided by you or third parties; such data is accepted “as is.”
TalentVisa is not liable for direct, indirect, or consequential damages (including financial loss, data loss, or reputational harm) arising from the authorized use or required disclosure of your information.
We retain your data only as long as necessary to provide services, fulfill the purposes outlined in this Policy, or comply with legal and regulatory obligations. Data may be stored in internal systems as well as with trusted third-party providers, in Australia, New Zealand, the EU, the United States, and other jurisdictions. All transfers are subject to contractual and legal safeguards to ensure appropriate protection standards.
Typeform (Eligibility Quizzes):
Data stored: preliminary eligibility details (age, education, professional background, language ability, health/character declarations, and basic contact details).
Retention: incomplete submissions are deleted automatically after 15 days. Completed submissions are stored on Amazon AWS servers (default: Virginia, USA; Enterprise accounts: EU) until deleted by us or upon client request. Data is encrypted in transit (TLS 1.2) and at rest (AES-256).
Jotform (Consultation/Work Visa Forms):
Data stored: more detailed profile data required for consultations or specific visas (e.g., Australian 462/417 Working Holiday visas), including education, employment, financial ability, and family details.
Retention: stored on Jotform servers (US/EU depending on configuration) until deleted by us or upon client request.
Google Drive (Client Files):
Data stored: full client case files including identification, academic and employment documents, family certificates, CVs, financial and—where applicable—medical or police records.
Retention: according to Google’s policies, data is retained indefinitely while the account is active. Inactive accounts (2+ years) or accounts over storage quota may be deleted after advance notice.
Regulatory requirement: under the Immigration Advisers Authority (IAA) Code of Conduct in New Zealand, licensed advisers must keep full client records for at least 7 years after case closure.
Mailchimp (Mailing Lists):
Data stored: name, email, and optional preferences.
Retention: stored until you unsubscribe, request deletion, or we remove the record.
Calendly / Google Calendar (Consultations):
Data stored: name, phone, and email provided for booking consultations.
Retention: retained only as long as required for scheduling purposes, then deleted according to calendar policies.
Cookies and Tracking Technologies:
Technical usage data (IP addresses, device identifiers, browsing activity) may be stored temporarily by third-party providers (Google Analytics, Meta Pixel, Cloudflare, Hotjar, etc.) according to their independent privacy policies.
When submitting visa applications, your personal data is transferred to the immigration authorities of the destination country (e.g., Australian Department of Home Affairs, Immigration New Zealand, or Golden Visa jurisdictions).
The retention of this data is not under TalentVisa’s control. Immigration authorities generally keep application records for extended periods to comply with border security, compliance, and audit requirements under local laws.
You may request the deletion of your personal data from our systems (Typeform, Jotform, Google Drive, Mailchimp, consultation records) at any time, subject to our legal and regulatory obligations. For example, we are legally required by the IAA (NZ) to maintain complete client records for at least 7 years. (visa applicants only)
Data that has already been transferred to immigration authorities (Australia, New Zealand, Golden Visa countries) cannot be deleted by TalentVisa and is managed under the laws and policies of the relevant government agency.
Unless otherwise required by law, TalentVisa may securely delete information under our control at our discretion.
For requests regarding data retention or deletion, please contact us at:
We do not sell or rent your personal data for commercial purposes. Information may be shared only on a “need to know” and minimum-necessary basis, to deliver our services, comply with legal and regulatory obligations, or protect our rights and security.
We rely on trusted third-party service providers and technology platforms for day-to-day operations:
Typeform, Jotform – for eligibility assessments and consultation forms.
Google Drive / Google Workspace – for secure client file storage.
Mailchimp – for mailing list management and newsletters (with your consent).
Cloudflare, jsDelivr CDN – for site security and performance optimization.
Google Analytics (GA4), Meta Pixel, Hotjar, Maka – for usage analytics, user experience improvements, and remarketing.
YouTube, Google reCAPTCHA – for embedded content and spam protection.
UPAY, Stripe, PayPal, or direct bank transfers – for secure payment processing.
Legal basis: Service agreements + user consent.
In certain cases, we may collaborate with professional colleagues to deliver immigration services:
Licensed immigration advisers in Australia (MARA) and New Zealand (IAA).
Local immigration advisers in other countries (only with your explicit consent).
Golden Visa partners, such as Henley & Partners, where they are directly handling the program. In such cases, you will be required to sign a separate agreement with them.
Lawyers, notaries, certified translators – for document preparation, validation, and translation.
Financial advisors and accountants – where proof of funds or financial compliance is required.
Legal basis: Client consent + professional duty.
Because our services involve immigration and visas, information may be shared with:
Immigration authorities (e.g., Department of Home Affairs – Australia, Immigration New Zealand, EU Golden Visa authorities).
Professional regulators (MARA in Australia, IAA in New Zealand) for compliance audits.
Tax authorities, courts, and enforcement agencies when legally required.
International compliance bodies (e.g., AML/FATF) for anti-money laundering, counter-terrorism financing, and global financial compliance.
Legal basis: Legal and regulatory obligation.
Data may also be shared with:
Event or conference partners, if you register for a joint event (with your consent).
Payment and money transfer platforms (UPAY, PayPal, Stripe, banks).
CRM, accounting, or IT support systems used to manage our business operations.
Legal basis: Contractual necessity and/or user consent.
In the event of a merger, acquisition, or transfer of business operations, we may transfer personal data to the acquiring entity or new partner, provided that:
Equivalent privacy protections are maintained, and
Clients are notified in advance where legally required.
Legal basis: Legitimate business interest + notification.
In exceptional cases, we may share information if necessary:
Legal basis: Legal obligation + legitimate interest.
We may use or share anonymized, aggregated data for research, analytics, or business purposes. Such information does not identify individuals.
In connection with the services described in this Policy, certain personal data may be transferred and processed outside the client’s country of origin. These transfers are necessary to deliver immigration, advisory, and investment-related services.
We ensure that any international data transfer is carried out in compliance with applicable privacy laws (including the Privacy Act 1988 (Australia), the Privacy Act 2020 (New Zealand), and where applicable, the GDPR) and subject to contractual safeguards (such as Standard Contractual Clauses) to maintain equivalent levels of protection.
Australia and New Zealand – Data may be shared with the Australian Department of Home Affairs and Immigration New Zealand in order to prepare, lodge, and manage visa applications.
Golden Visa jurisdictions (EU, Caribbean, others) – Data may be transferred to local immigration authorities or professional partners such as Henley & Partners.
Other countries – Where services are provided in cooperation with local advisers, lawyers, or consultants (e.g., Canada, EU states), clients will enter into a direct agreement with the relevant service provider, and data will be subject to that provider’s privacy policy and local regulations.
Personal data may also be stored or processed on secure servers located outside of Australia and New Zealand, including:
United States and Europe – Cloud and infrastructure providers such as Typeform, Jotform, Google Drive/Workspace, Mailchimp, Cloudflare, Hotjar, and Maka.
These providers maintain independent privacy policies and comply with internationally recognized security standards.
For clients seeking Investor or Golden Visa programs, we may share relevant financial or compliance information (e.g., proof of funds, asset documentation, due diligence records) with licensed investment firms, institutional investors, or financial compliance partners.
Such sharing will be done only with the client’s explicit consent and under separate contractual agreements between the client and the financial institution.
TalentVisa does not manage investments, does not act as a party to investment agreements, and assumes no liability for any risks, losses, or changes in regulation. All investment-related responsibility rests solely with the client and the relevant financial institution.
Immigration authorities in Australia and New Zealand are legally bound to apply strict data protection standards in their systems and processes.
Most jurisdictions in which we operate (including EU Golden Visa programs) are regulated under frameworks such as the GDPR, ensuring strong safeguards for applicants’ data.
Where direct international transfers are required, TalentVisa uses contractual and organizational measures to ensure data is protected at a level equivalent to domestic law.
Once data has been transferred to immigration authorities in destination countries, TalentVisa no longer controls its storage duration or processing. These matters are determined exclusively by the respective government authorities in accordance with their laws and retention policies.
Our website and online services use cookies, pixels, tags, and other analytics tools for the following purposes:
By using our website, you consent to the use of cookies and similar technologies, unless you choose to disable them in your browser settings.
You may manage or delete cookies at any time through the settings of common browsers:
If you choose to disable cookies, some features of our website may not operate properly, and your online experience may be limited.
We also use third-party services that rely on cookies or similar technologies, including:
Each of these third-party providers operates under its own independent privacy policy.
TalentVisa is not responsible for their processing of data.
For further details, please see our Cookies Policy:
TalentVisa is committed to maintaining transparent, professional, and proportionate communication with its clients. We may contact you through one or more of the following channels: email, SMS, WhatsApp, phone calls, push notifications, or online meetings (Zoom/Google Meet).
These communications are essential for the performance of our services and will be sent even if you have opted out of marketing communications. Examples include:
Updates on the status of your case (file initiation, progress with authorities, missing documents).
Consultation reminders and payment due dates.
Invoices, receipts, and financial updates.
Security notifications (identity verification, password changes, unusual account activity).
Service messages cannot be unsubscribed, as they are required for the delivery of services you requested.
We only send marketing communications with your explicit consent, using approved mailing systems such as Mailchimp. Such communications are sent exclusively to clients who have previously engaged with us or expressed interest in immigration or relocation services.
Content may include:
Professional updates and immigration policy changes.
Invitations to new visa programs or advanced eligibility checks.
Follow-ups with clients who expressed interest but did not proceed.
Re-engagement with clients previously found ineligible, where policy changes may now enable eligibility.
You may unsubscribe at any time via the unsubscribe link in each message, or by contacting us directly at [email protected]
In some cases, we may reach out personally outside of automated emails, for example:
Phone calls or WhatsApp messages to coordinate urgent meetings.
Direct outreach to clarify missing information or provide important regulatory updates.
We commit not to harass or overload you with unnecessary communication. Direct contact is used sparingly and only for service-related purposes.
You may opt out of marketing or promotional communications at any time, and we will honor your request immediately.
Service-related communications are mandatory and cannot be opted out of, as they are integral to the services you have requested.
TalentVisa is committed to securing your personal data and minimizing risks of loss, misuse, unauthorized access, alteration, or disclosure. We apply a combination of technical, organizational, and physical safeguards in line with industry best practices and our regulatory obligations in Australia and New Zealand.
Restricted Access – Access to client information is limited to Yair Oz (licensed adviser) and authorized staff/consultants strictly on a need-to-know basis.
Two-Factor Authentication (2FA) – Enabled on all core systems (Google Drive, Mailchimp, WordPress, Typeform, Jotform).
VPN Encryption – Remote work and data transfers are performed through secure VPN channels.
Cybersecurity Protection – Company computers are protected with updated antivirus software (e.g., ESET NOD32) and firewalls.
Regular Backups – Data is routinely backed up and stored in secure environments.
SSL/TLS Encryption – The TalentVisa website is secured with HTTPS and TLS encryption for all data transmissions.
Continuous Monitoring – Website and hosting environments (WordPress / Jetserver Cloud) are monitored weekly for attempted intrusions, malware, or security anomalies.
Registered Database – Client data is stored in defined systems for service and communication purposes only.
Access Management – Access rights are documented and regularly reviewed; all access is logged and monitored.
Retention and Deletion – Data is stored and deleted in accordance with our Data Retention Policy (see Section 3).
Annual Audit – An internal compliance review is conducted annually to ensure adherence to privacy and security standards.
With selected service providers (e.g., Google, Typeform, Mailchimp, Jetserver Cloud), we rely on Data Processing Agreements (DPAs) to ensure that personal data is processed and stored in compliance with international privacy frameworks (GDPR, Privacy Act AU/NZ).
TalentVisa operates under the MARA (Australia) and IAA (New Zealand) licensing frameworks, which require strict compliance with professional conduct and confidentiality standards.
Email Confidentiality Notice – All emails sent by TalentVisa include a confidentiality statement designed to ensure that personal and professional information remains protected, even in cases of human error. This notice makes clear that the information is confidential, may be legally privileged, and is not intended for use by anyone other than the named recipient.
Confidentiality Disclaimer (attached to all outgoing emails):
This message contains information that may be confidential or privileged. If you are not the intended recipient, you may not use, copy, or disclose to anyone any of the information in this message. If you have received this message and are not the intended recipient, kindly notify the sender at [email protected]
and delete this message from your computer. Please do not disclose the contents of this document to any other person, or take any copies.
New Zealand and Australia immigration (Australian Government Department of Home Affairs) policies and their application and interpretation are subject to change without notice. The recipient should not rely on any information being relevant at a future date. TalentVisa and the writer do not guarantee any immigration outcome, as such is solely determined by Immigration New Zealand or the Australian Department of Home Affairs.
Internet communications are not secure, and TalentVisa does not accept legal responsibility for the contents of this message. We do not accept any liability in connection with computer viruses, corruption, or unauthorized amendments.
While TalentVisa applies advanced measures to secure your data, no system can be guaranteed as completely immune to cyber risks or unauthorized access. We therefore cannot promise absolute protection, but we continuously improve our defenses to meet the highest possible standards.
TalentVisa is committed to respecting your legal rights in relation to your personal data, subject to our statutory and regulatory obligations.
You have the right to:
Access – request a copy of the personal data we hold about you.
Correction – request that we update or amend inaccurate or incomplete information.
Withdrawal of Consent – withdraw consent to data processing or opt out of communications.
Deletion – request that we delete your personal data, except where we are legally required to retain it (e.g., mandatory record-keeping under the Immigration Advisers Authority in New Zealand for 7 years).
You may exercise these rights by:
To protect your privacy and ensure that information is disclosed only to the rightful individual:
We may require you to provide additional details or documents to verify your identity.
Verification may include providing identification documents or confirming a code sent to your registered phone number.
Any documents or communications provided for verification will be retained securely for legal purposes (e.g., recording identity verification, as outlined in Section 3 – Data Retention).
Please note: Your rights are not absolute. In certain situations, TalentVisa may lawfully refuse to provide, correct, or delete information, either in whole or in part. In such cases, we will provide you with the reasons for refusal, in accordance with applicable law.
This Privacy Policy may be updated or revised from time to time by publishing a new version through our services. By default, the revised version will take effect upon publication. In the event of a material change, we will provide prior notice on our website or via another available communication channel. After the notice period, continued use of our services will be deemed as acceptance of the updated policy.
Our services may include links to third-party websites or platforms. TalentVisa is not responsible for the privacy practices or content of such third parties. The use of external websites is governed solely by their privacy policies and terms. We encourage you to review the privacy policy of each external site before providing personal information. This Policy applies exclusively to TalentVisa’s services.
Our website and services are not intended for individuals under the age of 18. A minor cannot independently open a case file or submit a relocation/visa application. Any direct contact from a minor will be declined.
In practice, it is technically possible for a minor to attempt to complete an eligibility quiz (by providing a false age). If it is later discovered that the respondent is a minor, the engagement will be terminated immediately, and further handling will only be permitted through the minor’s parent or legal guardian.
In family immigration and relocation cases, we may be required to collect and process information relating to children as part of visa applications (e.g., birth certificates, passports, basic medical information, vaccination or school records). Such data is collected and processed strictly to meet the legal requirements of the relevant immigration authorities and is subject to confidentiality and privacy protections.
If you believe we may be holding information about a minor outside the scope of a legitimate family visa application, please contact us immediately at: [email protected]
In accordance with applicable privacy laws, the data controller for TalentVisa services is:
Yair Oz – Licensed Immigration Adviser (MARA & IAA)
📧 Email: [email protected]
🌐 Website: www.talentvisa.com
For any questions, requests, or concerns relating to this Privacy Policy or your data, you may contact our appointed Data Protection Officer (DPO):
Yair Oz – Licensed Immigration Adviser (MARA & IAA)
Email: [email protected]
Phone: +972-3-6491-372
Contact Person: Mr. Yair Oz – CEO, Licensed Immigration Adviser
While TalentVisa applies high standards of data protection and takes extensive measures to secure your information, factors outside our control may impact security. We cannot guarantee absolute prevention of data breaches or unauthorized access.
What personal information do we collect?
Basic details from eligibility quizzes and contact forms (e.g., age, education, experience, family status), plus information needed for visa applications (e.g., passports, academic/work records, financial or medical documents).
Why do we use your data?
To check your visa eligibility, provide professional immigration advice, manage your case, submit applications, and (if you consent) send professional updates or marketing communications.
Do you share your information?
Yes, but only when necessary to deliver our services:
With technology providers (Typeform, Jotform, Mailchimp, Google Drive, Cloudflare).
With immigration authorities in Australia, New Zealand, and other relevant countries.
With trusted partners (e.g., lawyers, translators, Henley & Partners for Golden Visa cases).
We never sell or rent your personal data.
How long do we keep your data?
Eligibility data (Typeform/Jotform): temporary, up to deletion or 15 days for incomplete entries.
Client files (Google Drive): retained for at least 7 years as required by law.
Marketing data (Mailchimp): stored until you unsubscribe.
Once transferred to immigration authorities, retention is controlled by those authorities under their laws.
How do we protect your data?
We apply advanced security safeguards: limited access, two-factor authentication (2FA), VPN-secured transfers, antivirus and firewall protection, regular backups, and SSL/TLS encryption. All emails include a Confidentiality Notice to protect your information even in case of human error.
What rights do you have?
You may request to:
Access your personal data.
Correct or update inaccurate details.
Delete your data (where legally possible).
Withdraw consent for marketing communications.
📧 Contact: [email protected]
Can we guarantee absolute security?
No. While we use strong safeguards, no online system can be 100% secure. We continuously monitor and improve protections to minimize risks.
👉 For full details, please read the complete TalentVisa Privacy Policy.