Privacy Policy

1. Introduction & Scope

Pathwise Consultant ("we", "our", or "us") is dedicated to protecting the privacy, integrity, and confidentiality of the personal and academic data entrusted to us by students, prospective applicants, and their sponsors ("you").

This Privacy Policy explains transparently how we collect, handle, store, transfer, and dispose of your personal data across our admissions advisory services, document legalization assistance, and Portuguese student visa application coordination.

2. Information We Collect

To accurately assess eligibility and process international admissions, we collect specific categories of personal data:

A. Identification & Contact Information

• Full legal name (as printed on your passport and academic degrees).
• National Identity Card (CNIC) and International Passport scan copies.
• Contact details: Primary email address, active WhatsApp phone number, and residential address.

B. Academic Credentials & Verification Documents

• Matric, Intermediate, Bachelor's, and Master's transcripts and degree certificates.
• Medium of Instruction (MOI) verification letters or English proficiency test scores (IELTS/PTE/TOEFL).
• Statement of Purpose (SOP), Curriculum Vitae (CV/Europass), and Academic Recommendation Letters.

C. Financial & Sponsorship Records

• Sponsor bank statements, account maintenance certificates, and proof of source of income.
• Affidavits of financial support, employment letters, or tax return summaries required for D4 visa evaluation.

3. Purpose of Processing

We process your data strictly under valid legal bases and contractual obligations:

• University Evaluation & Enrolment: Submitting official applications to Portuguese public universities, polytechnics, and accredited private institutions.
• Legalization & Attestation: Coordinating educational verification through HEC, IBCC, and the Ministry of Foreign Affairs (MOFA) Apostille desk.
• Embassy & Visa Submission: Reviewing financial documentation, sponsorship affidavits, and cover letters to ensure compliance with the Portuguese Ministry of Foreign Affairs (MNE) and AIMA guidelines.
• Post-Arrival Assistance: Coordinating student accommodation contracts, arrival logistics, and initial registration in Portugal.

4. Sensitive Documents & Security Measures

We implement industry-standard administrative, physical, and encrypted digital security protocols to prevent unauthorized access, loss, or alteration:

• End-to-End Encryption: Digital copies transmitted via our portal or communication channels are secured with TLS 1.3 encryption.
• Restricted Staff Access: Only the assigned Senior Case Manager and Admissions Officer handling your specific file are granted access to your financial statements.
• Secure Storage: Physical documents submitted for attestation are kept in fireproof secured archives with biometric check-in tracking.

5. Authorized Third Parties

We only transmit your data to recognized institutional bodies directly involved in your application lifecycle:

• Portuguese Higher Education Institutions: The specific university admission portals chosen by you in your written shortlist.
• Governmental Bodies: HEC Pakistan, IBCC, MOFA, and the Portuguese Consular / VFS Global Visa Section.
• Verified Accommodation Providers: Portuguese student residence administrators (only upon your explicit written authorization).

6. Data Retention & Disposal

We retain student file records for the active duration of your admission cycle and up to twenty-four (24) months after visa issuance to assist with subsequent permit renewals or transcript inquiries.

Following the retention milestone, sensitive financial statements are permanently purged from our active databases in accordance with ISO 27001 document destruction standards.

7. Your Privacy Rights (GDPR & Local Law)

As a data subject, you hold fundamental rights regarding your personal information:

• Right to Access: Request a complete export of all personal data held in your client file.
• Right to Rectification: Request correction of any inaccurate or outdated information.
• Right to Erasure ("To Be Forgotten"): Request full deletion of your profile and records if you choose to terminate services prior to submission.
• Right to Revoke Consent: Withdraw permission for data processing at any time by notifying us in writing.

8. Contact Data Protection Officer (DPO)

If you have any questions regarding this Privacy Policy, wish to exercise your data rights, or request document purge, please contact our Compliance Officer: