HomePrivacy Policy

Privacy Policy

Effective Date: May 23, 2025
Company Name: Pinnacles Travels and Migration Consulting Limited
Website: https://pinnacles.travel

1. Introduction

Pinnacles Travels and Migration Consulting Limited (“Pinnacles Travels,” “we,” “our,” or “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information when you visit our website or use our services, in accordance with international data protection regulations, including:

General Data Protection Regulation (GDPR) (EU)
Nigeria Data Protection Act (NDPA)
Canada’s PIPEDA
California Consumer Privacy Act (CCPA), if applicable

2. Who We Are

We are a professional travel and migration consulting firm that provides visa assistance, travel bookings, international consulting, and support services. Our website address is: https://pinnacles.travel

3. What Information We Collect

We collect both personal and non-personal data. Depending on how you interact with us, we may collect:

A. Personal Information

Full name
Email address
Phone number
Passport/ID number
Date of birth
Nationality and residency
Visa and travel history
Payment details (via secure gateways only)
Educational/employment documents (for migration services)

B. Automatically Collected Information

IP address
Browser type
Device information
Operating system
Referring URLs
Pages visited and time spent

C. Cookies and Tracking

We use cookies to improve functionality, personalize user experience, and analyze traffic. You can control cookies through your browser settings.

4. How We Collect Information

Directly from you when you fill forms or communicate with us
Automatically via website technologies (cookies, analytics)
Through third-party providers with your authorization (e.g., immigration platforms)

5. Purpose of Data Collection

We collect and use your personal data for the following purposes:

To provide our travel and migration consulting services
To respond to inquiries and provide customer support
To process bookings, visas, and payments securely
To verify identity for compliance purposes
To communicate updates, newsletters, and promotional offers
To enhance website performance and user experience
To comply with legal obligations (e.g., KYC, immigration laws)

6. Legal Bases for Processing (GDPR Compliance)

We only process your data where:

You have given explicit consent
It is necessary to perform a contract
It is required for legal compliance
It is within our legitimate business interests (e.g., service improvement, fraud detection)

7. Sharing and Disclosure of Information

We may share your data with:

Immigration authorities or embassies for visa processing
Travel partners, airlines, and logistics providers
Payment processors (e.g., Paystack, Stripe, Flutterwave)
Third-party consultants, where needed to deliver our services
Legal or regulatory authorities, when required by law

We ensure third parties respect the security of your data and treat it in accordance with the law.

8. International Data Transfers

If your data is transferred outside your country (e.g., EU to Nigeria or Canada), we ensure appropriate safeguards such as:

Standard Contractual Clauses (SCCs)
Data processing agreements
Encryption and secure data handling protocols

9. Data Retention

We retain your data only as long as necessary to fulfill the purposes for which it was collected, including:

Legal and accounting requirements
Service history records
Proof of consent and compliance

When no longer needed, your data is securely deleted or anonymized.

10. Your Rights

Under GDPR, NDPA, and similar laws, you have the right to:

Access your personal data
Correct inaccurate or outdated data
Request deletion (“right to be forgotten”)
Withdraw consent at any time
Restrict or object to processing
Request data portability
File a complaint with a Data Protection Authority

11. Data Security

We use appropriate security measures to prevent unauthorized access, disclosure, or misuse of your data, including:

SSL/TLS encryption
Access controls and authentication
Regular security audits
Encrypted storage of sensitive data
Staff training and confidentiality agreements

12. Third-Party Websites and Embedded Content

Our website may contain links or embedded content (e.g., YouTube videos, Google Maps) from third parties. These sites have their own privacy policies, and we do not accept responsibility for their practices.

13. Children’s Privacy

We do not knowingly collect data from children under the age of 16. If you are a parent or guardian and believe your child has provided personal data, please contact us immediately.

14. Automated Decision-Making and Profiling

We do not use your data for automated decision-making or profiling without human involvement.

15. Changes to This Privacy Policy

We may update this policy periodically. The latest version will always be posted on our website with the updated effective date. Continued use of our services means you accept the changes.

16. Contact Information

If you have any questions about this Privacy Policy or how we handle your data, please contact:

Data Protection Officer
Pinnacles Travels and Migration Consulting Limited
📧 Email: privacy@pinnacles.travel
🌐 Website: https://pinnacles.travel