Legal
Privacy Policy
Last updated: 1 September 2026
1. Who We Are
This Privacy Policy explains how WorkRoutecollects, uses, and protects information when you visit workroute.online and interact with our forms. WorkRoute provides private global mobility, investment migration, and relocation advisory services. It does not process payments, does not require account creation, and does not host user-generated content.
Contact for privacy matters: Info@workroute.online.
2. Information We Collect
We collect information you voluntarily submit through our contact, eligibility assessment, callback request, consultation booking, and newsletter forms, which may include:
- Full name
- Email address
- Phone number and country code
- Country of residence
- Occupation and business ownership status
- Investment capacity or range
- Family or dependent composition
- Service or destination interest
- Any free-text message you choose to provide
We do not currently operate user accounts, logins, checkout or payment systems, or file upload functionality, and we do not collect information through these means.
3. Current Status of Form Data
At present, our website forms are not connected to a backend processing system. Submissions made through these forms are not currently transmitted to or stored by WorkRoute or any third party.
This section will be updated, and users will be notified via a revised "Last updated" date, once a backend is implemented. Once active, submitted data will be transmitted to and processed by WorkRoute team.
4. How We Use Your Information (Once Collection Is Active)
When form collection becomes active, we intend to use the information described in Section 2 to:
- Respond to enquiries and provide requested information about our advisory services
- Assess eligibility for relevant global mobility or investment migration pathways
- Schedule and manage consultation or callback requests
- Send newsletter communications, where you have opted in
- Maintain records of our advisory relationship with you
- Comply with applicable legal and regulatory obligations
5. Legal Basis for Processing (EU/EEA Visitors)
Where the General Data Protection Regulation (GDPR) applies to our processing of your personal data, we rely on the following legal bases:
- Consent for newsletter sign-ups and, where applicable, for submitting enquiry or assessment forms
- Legitimate interests for responding to enquiries, providing requested advisory information, and improving our services, balanced against your rights and interests
- Contractual necessity where processing is required to take pre-contractual steps at your request, such as preparing an eligibility assessment
- Legal obligation where we are required to retain or disclose information to comply with the law
Investment capacity/range and family or dependent composition are collected only where you choose to provide them, based on your consent, in order for us to give you relevant and accurate advisory guidance. You are not required to provide this information to contact us generally.
6. Data Retention
We intend to retain personal data submitted through our forms only for as long as necessary to respond to your enquiry, provide the advisory service requested, comply with legal obligations, and resolve disputes. Newsletter data will be retained until you unsubscribe or withdraw consent.
Specific retention periods will be confirmed once the backend processor and applicable record-keeping obligations are finalized, and this section will be updated accordingly.
7. Sharing and Disclosure
We do not sell personal data. We may share personal data with:
- Service providers who host, process, or support our website and form submissions, including our confirmed backend/data processor once implemented
- Professional advisors (such as legal, immigration, or tax professionals) where necessary to progress your enquiry, and only with your knowledge
- Regulators or authorities where required by law
- A successor entity in the event of a merger, acquisition, or reorganization of our business
8. Third-Party Services
Our website currently uses the following third-party services:
- Vercel Speed Insights collects performance and usage telemetry to help us understand and improve website performance
- Supabase Storage used solely to host static video assets displayed on the site; it does not store form submissions, does not operate a database of personal data, and is not used for authentication
We do not currently use Google Analytics, Google Tag Manager, Mixpanel, a CRM platform, an email marketing platform, Sentry, advertising pixels, or chat widgets. If any such tool is implemented, this Privacy Policy will be updated in advance to describe the tool, the data it processes, and your choices.
WhatsApp: Where a WhatsApp contact option is offered, this operates via a wa.me link that hands you off directly to WhatsApp. We do not receive or process any data through this link beyond what you choose to send us directly within WhatsApp, which is governed by WhatsApp's own privacy policy.
9. Cookies and Tracking
WorkRoute does not currently implement application-level cookies, tracking pixels, or similar technologies, and no cookie consent banner is currently displayed. However, our hosting provider, Vercel, may use cookies, browser storage, or telemetry mechanisms as part of delivering and securing the website (for example, through Vercel Speed Insights). We recommend visitors review Vercel's own privacy and cookie documentation for further detail.
Should WorkRoute implement its own cookies or tracking tools in the future, this Privacy Policy and an accompanying Cookie Policy/consent banner will be updated accordingly before such tools go live.
10. International Data Transfers
Given WorkRoute's connection to Poland/the European Union and its advisory services spanning the United States, Canada, United Kingdom, Australia, New Zealand, UAE, Singapore, and Portugal, personal data may be transferred to and processed in countries outside the country in which you are located, including countries that may not have data protection laws equivalent to those in your home jurisdiction.
Where such transfers occur from the EU/EEA, we will take appropriate measures, such as Standard Contractual Clauses or reliance on an adequacy decision, to protect your personal data in line with GDPR requirements.
11. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate or incomplete data
- Request deletion of your data, subject to legal retention requirements
- Object to or restrict certain processing
- Request a copy of your data in a portable format
- Withdraw consent at any time, without affecting processing carried out before withdrawal
- Lodge a complaint with your local data protection authority
To exercise any of these rights, contact us at Info@workroute.online.
12. Children's Privacy
WorkRoute's services are directed at investors, entrepreneurs, executives, and families making global mobility decisions, and are not directed at children. This website is intended for use by adults aged 18 and over only. We do not knowingly collect personal data from children.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, our backend processor, or applicable law, including once form submissions become active. Material changes will be reflected by an updated "Last updated" date at the top of this page.
14. Contact Us
Questions about this Privacy Policy or our data practices can be directed to Info@workroute.online.
