Privacy Policy

Who we are

Click Migration is a registered migration agent practice based in Perth, Western Australia. Our registered migration agent is Parveen Kumar (Migration Agent Registration Number 1801563). The agent is regulated by the Office of the Migration Agents Registration Authority (OMARA) and must comply with the Code of Conduct for registered migration agents prescribed under the Migration (Migration Agents Code of Conduct) Regulations 2021.

Click Migration is not a law firm. Immigration legal advice and assistance in Australia may only be provided by registered migration agents, Australian legal practitioners, or other exempt persons as permitted by law.

For privacy enquiries, contact us using the details on our Contact page.

Scope of this policy

This policy applies to personal information we collect through clickmigration.com.au and related online services we operate, including consultation booking, contact enquiries, and secure client workspace access.

It does not apply to third-party websites or services linked from our site. Those providers have their own privacy policies.

What information we collect

The information we collect depends on how you interact with us. We may collect the following categories of personal information:

• Identity and contact details — such as your name, email address, phone number, and postal address.
• Consultation and booking information — including appointment selections, visa pathway of interest, client notes, and messages sent through our contact form.
• Immigration and client-matter information — such as passport and identity documents, visa and immigration history, relationship and family evidence, employment and education records, financial information, health information, police and character documents, photographs, signatures, and other files you upload or provide for advice or application preparation.
• Workspace and document-review information — including uploaded files, item status, review notes, replacement requests, and submission history within a secure client workspace.
• Payment information — card payments are processed by Stripe. We do not store full card numbers on our systems. We may retain payment references, amounts, and transaction status.
• Technical and usage data — such as IP address, browser type, device information, and pages visited, collected through server logs and analytics tools where enabled.
• Communications — records of emails, SMS messages sent in connection with our services (where SMS is enabled and credits are available), and internal notes relating to your matter.
• Appointment notes — information recorded in connection with consultations or case work.

How we collect information

We collect personal information directly from you when you complete forms on our website, book a consultation, verify access to a secure workspace, upload documents, correspond with us, or engage our services.

We may also collect information from third parties where relevant to your matter — such as referees, employers, or educational institutions — but only where you have authorised us to do so or where it is reasonably necessary for your migration matter.

Why we use personal information

We use personal information for purposes connected with providing registered migration agent services, including:

• Responding to enquiries and managing consultation bookings.
• Assessing eligibility and preparing advice tailored to your circumstances.
• Preparing, lodging, and managing visa applications and related submissions to the Department of Home Affairs and other authorities.
• Operating secure client workspaces, reviewing uploaded documents, and requesting replacements or additional items.
• Communicating with you about your matter, including appointment reminders and workspace notifications.
• Processing payments and maintaining financial records.
• Complying with legal and professional obligations, including record-keeping requirements applicable to registered migration agents.
• Maintaining platform security, including rate limiting and malware scanning of uploaded files where enabled.
• Improving our website and services.

We do not sell your personal information.

Consent and other bases for use

We collect and use personal information where you have consented, where it is reasonably necessary to provide migration agent services you have requested, or where we are required or authorised by law.

You may withdraw consent for optional communications at any time by contacting us. Withdrawal of consent may limit our ability to provide certain services.

Who we may disclose information to

We may disclose personal information to third parties where necessary to deliver our services or meet legal obligations, including:

• The Department of Home Affairs and other Australian government agencies, tribunals, or courts — as part of visa application processes you authorise.
• Payment processing — Stripe processes online consultation payments.
• Email delivery — Resend and/or Brevo send transactional emails such as booking confirmations, workspace access codes, and reminders.
• SMS delivery — ClickSend sends SMS reminders where SMS is enabled in our platform and credits are available.
• Google services — where connected, Google Calendar (appointment synchronisation), Google Drive (workspace file mirroring), Google Contacts (client contact synchronisation), and Google Places (public review display on our website).
• Cloud file storage — uploaded workspace files are stored using S3-compatible object storage configured for our platform.
• Caching and rate limiting — Upstash Redis may process request identifiers (such as IP addresses) to limit abuse of public forms.
• Website hosting — Vercel hosts our application and may process request metadata needed to deliver the site.
• Malware scanning — uploaded files may be scanned using ClamAV or a comparable service where configured.
• Professional advisers — such as lawyers or accountants — where you have engaged us to coordinate with them, or where required by law.

Some service providers may store or process data outside Australia. We do not represent that personal information is stored only in Australia. Where information is disclosed overseas, we take reasonable steps that are appropriate in the circumstances.

We do not disclose personal information to third parties for their own unrelated marketing purposes.

How we protect information

We use administrative, technical, and organisational measures intended to protect personal information against misuse, interference, loss, and unauthorised access, modification, or disclosure.

Secure client workspace access uses tokenised links and email verification codes. Access is time-limited. You are responsible for safeguarding workspace links and verification codes.

No method of electronic transmission or storage is completely secure. We cannot warrant absolute security.

Retention and deletion

We retain personal information for as long as reasonably necessary to provide services, manage client matters, meet taxation and professional record-keeping obligations, resolve disputes, and comply with applicable law.

Our platform includes a configurable document retention setting for administrative purposes. At present, automatic deletion of client files based on that setting is not implemented as an automated purge job. Retention and secure destruction practices are applied having regard to our professional obligations and the nature of each matter.

When personal information is no longer required and we are not legally or professionally required to retain it, we take reasonable steps to destroy or de-identify it.

Cookies and analytics

Our website may use cookies and similar technologies to maintain sessions, remember preferences, and understand how visitors use our site.

Where analytics tools (such as Google Analytics 4 or Google Tag Manager) are enabled, they may collect usage data. You can manage cookie preferences through your browser settings. Disabling cookies may affect some website functionality.

Access and correction

You may request access to the personal information we hold about you, or request correction if it is inaccurate, out of date, incomplete, irrelevant, or misleading.

We will respond within a reasonable period. Where the APPs apply to us, a reasonable period will generally not exceed 30 days unless an extension is necessary and we explain the delay to you.

We may need to verify your identity before releasing information. We may decline access or correction where permitted or required by law.

Privacy complaints

If you believe we have mishandled your personal information, please contact us first using the details on our Contact page so we can understand and respond to your concern.

We will investigate your complaint and provide a response within a reasonable timeframe. The Office of the Australian Information Commissioner (OAIC) generally considers 30 days a reasonable time for an organisation to respond to a privacy complaint, and we aim to respond within that period where practicable.

If you are not satisfied with our response, you may be able to complain to the OAIC where the OAIC has jurisdiction. Information about lodging a complaint is available at oaic.gov.au. Whether the OAIC can investigate a complaint depends on the circumstances, including whether the Privacy Act applies to the handling of your information.

Data breaches

We take suspected security incidents seriously. If we suspect unauthorised access to, disclosure of, or loss of personal information, we will investigate and take steps to contain and assess the incident.

Where the Privacy Act 1988 (Cth) notifiable data breach scheme applies to us, we will assess whether the incident is an eligible data breach and, if notification to the OAIC and affected individuals is required by law, we will notify in accordance with those requirements.

This section does not constitute a promise to notify in every security incident. Notification obligations depend on the nature of the incident and applicable law.

Children

Our services are directed at adults seeking migration advice. We do not knowingly collect personal information from children under 18 without appropriate consent where required.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page indicates when changes were published. Continued use of our website after changes are published constitutes acceptance of the updated policy.

General information only

Information on this website and in general communications is not a substitute for migration advice tailored to your individual circumstances. Visa outcomes depend on departmental processing, policy settings, and the facts of each case.