1. Introduction
MobilitySQR Technologies ("MobilitySQR", "we", "us", or "our") operates the website mobilitysqr.com and the MobilitySQR platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website, use our platform, or engage with our global mobility services.
By accessing or using our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use our services.
This policy applies to all users worldwide, including those protected under the EU/UK General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and the Indian Digital Personal Data Protection Act (DPDP Act).
2. Information We Collect
Account Information
When you create an account or engage our services, we collect:
- Full name, email address, phone number
- Company name, job title, and department
- Business address and billing information
- Login credentials and authentication data
Assignment & Mobility Data
To deliver immigration, tax, and relocation services through the MobilitySQR platform, we may collect:
- Passport details, visa documentation, and national identity numbers
- Tax identification numbers and tax residency information
- Family and dependent information (names, dates of birth, relationship status)
- Travel history, work permits, and assignment documentation
- Compensation data relevant to cross-border tax calculations
Usage Data
We automatically collect certain information when you interact with our services:
- Log data (IP address, browser type, operating system, referring pages)
- Device information (device identifiers, screen resolution, language preferences)
- Cookies and similar tracking technologies
- Feature usage patterns and navigation paths within the MobilitySQR platform
Payment Information
Payment card numbers and bank account details are processed directly by our PCI-compliant third-party payment providers. We do not store full payment card numbers on our systems. We retain only the last four digits, card type, and transaction reference for record-keeping purposes.
3. How We Use Your Information
We process your personal data for the following purposes:
- Provide and operate the MobilitySQR platform — delivering immigration case management, tax compliance tracking, relocation coordination, and assignment management features
- Process immigration, tax, and relocation services — preparing and filing visa applications, calculating cross-border tax obligations, and coordinating relocation logistics on your behalf
- Communicate service updates — sending assignment status notifications, regulatory change alerts, platform updates, and support communications
- Improve our products — analyzing usage patterns to enhance platform features, fix issues, and develop new capabilities
- Comply with legal obligations — meeting tax reporting requirements, immigration record-keeping mandates, and responding to lawful government requests
- Prevent fraud and ensure security — detecting unauthorized access, protecting against malicious activity, and enforcing our terms of service
4. Legal Basis for Processing (GDPR)
For individuals in the European Economic Area (EEA) and the United Kingdom, we process personal data under the following legal bases:
- Performance of a contract — processing necessary to fulfill our service agreements, including managing immigration cases, tax filings, and relocation assignments through the MobilitySQR platform
- Legitimate interests — processing necessary for our legitimate business interests, such as improving our services, ensuring platform security, and conducting analytics, where these interests are not overridden by your rights
- Consent — where you have given explicit consent, such as for marketing communications or the processing of special category data. You may withdraw consent at any time
- Legal obligation — processing necessary to comply with applicable laws, including tax reporting obligations, immigration record-keeping requirements, and responses to court orders
5. Data Sharing
We share personal data only in the following circumstances:
Service Providers
We work with trusted third-party partners to deliver our services, including immigration law firms and visa processing vendors, tax advisory firms and compliance consultants, relocation management companies and destination service providers, and cloud infrastructure and hosting providers. All service providers are contractually obligated to protect your data and use it only for the purposes we specify.
Government Authorities
We submit personal data to government authorities as required for visa and immigration applications, work permit filings, tax reporting obligations, and other legally mandated disclosures. These submissions are made on your behalf and in accordance with your service agreement.
With Your Consent
We may share your data with other parties when you have given explicit consent, such as sharing assignment details with your employer's HR team or designated contacts.
Legal Requirements
We may disclose personal data if required by law, regulation, legal process, or enforceable governmental request.
We never sell your personal data to third parties. We do not share personal data for cross-context behavioural advertising.
6. International Data Transfers
MobilitySQR operates offices in Gurgaon (India), London (United Kingdom), and Delaware (United States). Your personal data may be transferred to and processed in any of these locations to provide our services.
For transfers of personal data from the EEA or UK to countries that have not received an adequacy decision from the European Commission, we implement appropriate safeguards, including:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- UK International Data Transfer Agreements (IDTAs) where applicable
- Data processing agreements with all sub-processors that mandate equivalent protections
- Technical and organizational measures to ensure data security during transfer
You may request a copy of the safeguards we use by contacting our Data Protection Officer at the address below.
7. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes described in this policy:
- Active account data — retained for the duration of your business relationship with us, plus a reasonable wind-down period to allow for reactivation
- Assignment and tax records — retained in accordance with applicable regulatory requirements, typically seven (7) years for tax-related records, as mandated by tax authorities in the relevant jurisdictions
- Immigration case files — retained for the period required by immigration authorities in the relevant jurisdictions, or as needed for ongoing visa renewals and compliance
- Anonymized analytics data — retained indefinitely, as this data cannot be linked back to any individual
- Marketing preferences — retained until you unsubscribe or withdraw consent
When personal data is no longer required, we securely delete or anonymize it using industry-standard methods.
8. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
Under GDPR (EU/UK Residents)
- Right of access — obtain a copy of the personal data we hold about you
- Right to rectification — correct inaccurate or incomplete personal data
- Right to erasure — request deletion of your personal data, subject to legal retention obligations
- Right to restriction — limit how we process your data in certain circumstances
- Right to data portability — receive your data in a structured, machine-readable format
- Right to object — object to processing based on legitimate interests or for direct marketing
- Right to withdraw consent — withdraw previously given consent at any time, without affecting the lawfulness of prior processing
Under DPDP Act (Indian Residents)
- Right to access — request a summary of your personal data and processing activities
- Right to correction and erasure — correct inaccurate data or request deletion
- Right to grievance redressal — lodge complaints about data processing practices
- Right to nominate — designate a person to exercise your rights in case of death or incapacity
To exercise any of these rights, contact us at info@mobilitysqr.com. We will respond within 30 days (or sooner where required by law). We may ask you to verify your identity before processing your request.
9. CCPA-Specific Rights (California Residents)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):
- Right to know — request details about the categories and specific pieces of personal information we have collected, the sources of collection, the business purposes for processing, and the categories of third parties with whom we share it
- Right to delete — request the deletion of personal information we have collected from you, subject to certain legal exceptions
- Right to correct — request correction of inaccurate personal information
- Right to opt-out of sale or sharing — you have the right to opt out of the "sale" or "sharing" of your personal information. MobilitySQR does not sell your personal information and does not share it for cross-context behavioural advertising
- Right to limit use of sensitive personal information — request that we limit the use and disclosure of sensitive personal information to what is necessary to perform our services
- Right to non-discrimination — we will not discriminate against you for exercising any of your CCPA rights
To submit a CCPA request, email info@mobilitysqr.com with the subject line "CCPA Request". We will verify your identity and respond within 45 days.
Do Not Sell My Personal Information: MobilitySQR does not sell personal information as defined by the CCPA.
10. Security Measures
We take the security of your personal data seriously and implement robust technical and organizational measures, including:
- Encryption — all data is encrypted at rest (AES-256) and in transit (TLS 1.2+)
- SOC 2 aligned controls — our security program is aligned with SOC 2 Type II standards covering security, availability, and confidentiality
- Regular security audits — we conduct periodic penetration testing, vulnerability assessments, and third-party security reviews
- Access controls — role-based access with multi-factor authentication, least-privilege principles, and regular access reviews
- Employee training — all staff undergo regular data protection and security awareness training
- Incident response — we maintain a documented incident response plan and will notify affected individuals and relevant authorities of any data breach in accordance with applicable law
- Vendor management — all sub-processors undergo security assessments before engagement and are bound by data processing agreements
11. Children's Privacy
Our services are designed for businesses and professionals. We do not knowingly collect personal data from children under the age of 16. If we become aware that we have inadvertently collected personal information from a child under 16, we will take steps to delete that data as soon as possible.
If you believe we have collected data from a child under 16, please contact us immediately at info@mobilitysqr.com.
Note: where our services involve processing dependent or family member data for assignment and relocation purposes, such data is provided by the assignee or their employer as part of the service engagement and is processed under the applicable legal basis described in Section 4.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or regulatory guidance. When we make material changes, we will:
- Update the "Last updated" date at the top of this policy
- Notify you via email or through a prominent notice on our website or within the MobilitySQR platform
- Where required by law, obtain your consent to the changes before they take effect
We encourage you to review this policy periodically to stay informed about how we protect your data.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please reach out to us:
Office Addresses
- India (Headquarters): MobilitySQR Technologies, Gurgaon, Haryana, India
- United Kingdom: MobilitySQR Technologies Ltd, London, United Kingdom
- United States: MobilitySQR Technologies Inc, Delaware, United States
If you are in the EU or UK and are unsatisfied with our response, you have the right to lodge a complaint with your local supervisory authority. For the UK, this is the Information Commissioner's Office (ICO). For India, complaints may be directed to the Data Protection Board of India once established under the DPDP Act.