Privacy Policy

Your personal data is processed by MigrationArm ("MigrationArm", "we", "us"), registered address: Armenia, contact e-mail for requests: https://migrationarm.am/en/contact.

MigrationArm is a private company that helps individuals and businesses prepare documents and complete administrative procedures in the Republic of Armenia. We process personal data in accordance with the Law of the Republic of Armenia "On Protection of Personal Data" and this Policy.

Depending on the service you choose, we may process:

• account data: name, e-mail address, phone number, preferred language and a password hash (we never store your password itself);
• application answers: passport details, date and place of birth, citizenship, residential address, family details, place of work or study, company or vehicle details, limited to what the specific procedure requires;
• uploaded documents: copies of passports and ID cards, certificates, statements, photographs, powers of attorney and similar documents;
• payment information: the amount, status and transaction reference received from the payment provider (never your full card details);
• your correspondence with us and staff notes on your application;
• technical data: IP address, browser and device type, sign-in and activity logs, and cookies (see our Cookie Policy).

Some documents (for example, a medical certificate) may contain special-category data. We process such data only where the chosen procedure requires it and only with your separate consent.

We process data in order to:

• provide the service you requested: check that your documents are complete, prepare applications and document packages, book appointments, support you through the procedure and keep you informed of its status;
• create and maintain your account;
• take payments and issue payment records;
• respond to your enquiries and complaints;
• keep the service secure and prevent fraud and abuse;
• meet our legal obligations, including accounting and tax record-keeping.

We rely on the consent you give when you register and submit an application, and on the cases expressly provided for by law. We send marketing messages only if you have separately agreed to receive them, and you can opt out at any time.

We use organisational and technical safeguards, including:

• uploaded documents are kept in private (non-public) encrypted object storage;
• files can only be opened through temporary links that expire after a short time;
• all data is transmitted over secure connections (HTTPS/TLS);
• staff access is role-based and limited to the applications they work on;
• actions on applications and documents (viewing, editing, downloading) are recorded in an audit log;
• staff are bound by confidentiality obligations.

No system is completely secure, but we review our safeguards regularly. If we detect a security incident, we will respond as required by law.

We do not sell or rent out your personal data.

We share data only to the extent necessary with:

• government authorities, when you instruct us to submit or deliver documents on your behalf or when the law requires it;
• notaries, translators and other professionals, where your procedure requires it and you have agreed;
• our processors (service providers) acting on our instructions: hosting and cloud storage providers, e-mail and notification services, and the payment provider (a bank or payment system).

Our processors must keep your data confidential and use it only to carry out our instructions.

Some of our service providers (for example, hosting or e-mail providers) may operate servers outside the Republic of Armenia.

We transfer data abroad only as permitted by the Law "On Protection of Personal Data": to countries that ensure an adequate level of personal data protection, or on another lawful basis, including your consent or authorisation from the competent authority where required.

Card payments are made on the secure page of our payment provider. Your card number, expiry date and CVV/CVC code are entered only on that page and are processed by the provider.

MigrationArm never receives or stores your full card details. The provider sends us only what we need to record the payment: the amount, status, transaction reference and, where available, a masked card number.

We keep your data while we provide the service and, after it ends, for the period set by our internal retention policy and for any longer period the law requires (for example, for accounting records).

Retention periods for uploaded documents are set in our retention settings and may be shorter for certain categories. When the period ends, the data is deleted or anonymised. You can ask us to delete your data sooner unless the law requires us to keep it.

Under the laws of the Republic of Armenia you have the right to:

• be told whether we process your data, for what purpose and to whom it is disclosed;
• access your data and receive a copy;
• have inaccurate or incomplete data corrected;
• have data blocked or destroyed where processing is unlawful or no longer necessary;
• withdraw your consent (this does not affect processing carried out before withdrawal, but we may then be unable to continue the service);
• complain to the Personal Data Protection Agency of the Ministry of Justice of the Republic of Armenia or to a court.

To exercise your rights, write to https://migrationarm.am/en/contact. We may ask you to confirm your identity and will respond within the time limits set by law.

The service is intended for adults. Applications concerning minors are submitted by their parents or other legal representatives, who provide the necessary consent.

We use cookies that are necessary for the website to work and, only with your consent, analytics cookies. See our Cookie Policy for details.

We may update this Policy. The date of the latest version is shown at the top of the page, and we will notify registered users of significant changes.

For any question about personal data, contact MigrationArm, Armenia, https://migrationarm.am/en/contact.