Below you can find the privacy policy of Prism. You can find the privacy policy for Prism USA here.
PRIVACY POLICY
Prism Worldwide Limited
1. INTRODUCTION
Prism Worldwide Limited, as global immigration consulting firm in providing Investment Visas, Employment Visas, Retirement Visa, Student Visa, Residency & Citizenship Visa, is committed to safeguard the privacy and personal data of our clients. This Policy outlines our mechanism in collecting, using, disclosing, storing, and processing personal data in compliance with applicable privacy laws in Switzerland (Federal Act on Data Protection), Cyprus (Protection of Physical Persons against the processing of Personal Data and Free Movement of such Data Law 125(I)/2018), Singapore (Personal Data Protection Act), United Arab Emirates, Hong Kong, and Philippines.
2. SCOPE
This Policy applies to all personal data processed by Prism Worldwide Limited in connection with our business services in Switzerland, Cyprus, Singapore, United Arab Emirates, Hong Kong, and Philippines, regardless of the country from which it originates. This includes personal data of our website visitors, partners, clients and any other individuals whose personal data is permissible to collect.
3. COLLECTION OF PERSONAL DATA
We may collect the following personal data through different means depending on the Services you have with us:
Information provided directly by you through filling in forms, communications or correspondence with us, applications with our services, subscribing with our service or online publications, giving us feedback, answering surveys, and in contracts:
- Identity Data: Name, marital status, gender, date of birth, place of birth
- Contact Data: Residential Address, billing Address, email address, mobile / telephone numbers.
- Financial Data: Bank account details where applicable for processing in a secured third-party payment processor.
- Transaction Data: Transactions details for the services you have engaged from us.
- Profile Data: Criminal record / activities if necessary
Sensitive Personal Data (where applicable and with express consent): This may include health information, racial or ethnic origin, and biometric data, only when necessary for service provision and permitted under the laws of the originating country.
Usage and Technical Data collected through automated interactions. Our servers temporarily save each access in a log file when you visit our websites.
The following data is collected without your intervention and stored by us until automatic deletion (at the latest after 12 months):
- the IP address of the requesting computer (shortened);
- the date and time of access;
- the name and URL of the retrieved file;
- the page and address of the website from which you were redirected to our websites and, if applicable, the search term used;
- the country from which our website is accessed;
- the operating system of your computer and the browser you use (provider, version and language);
- the transmission protocol used (e.g. HTTP/1.1).
Data we obtained from third parties and publicly accessible sources if permissible and relevant to our business purposes.
- Identity and Contact Data from Public registers.
- Contact, Financial and Transaction Data from third-party payment and technical providers.
- Technical Data from Google Analytics / Media / Internet.
- Profile Data from authorized third parties (World Check).
4. PURPOSE OF COLLECTION OF DATA
We process the personal data for the purpose for which it was collected unless we have obtained additional consent or legal basis for other processing of your personal data.
Opening and managing customer relationship which the following personal data collected shall be processed:
- Name, first name*
- Address*
- Date of birth*
- Phone number*
- Gender*
- Passport/Other Valid Government Identification Cards
- Electricity bill/other proof of address*.
- Curriculum vitae and client profile
- World Check by LSEG
- Source of wealth and cumulative wealth data
- Reference letters
- Risk assessment*
- KYC form/register of beneficial owners/passport/proof of address*.
- Criminal record in case you provide such
Opening a client account with third party such as a custodian bank or broker which the following personal data should also be processed:
- Name, first name*
- Address*
- Date of birth*
- Phone number*
- Gender*
- Passport/Other Valid Government Identification Cards*
- Electricity bill/other proof of address*
Processing of personal data marked with (*) is mandatory. If these were not processed, (a) and (b) above-mentioned will not be able to proceed for the purpose why it is collected. This includes complying with legal requirements such as Combating Fraud, Anti-Money Laundering, and Counter Financing-Terrorism.
- Internal Record Keeping.
- Improving our business services and operations.
- Processing payments and transactions.
- Marketing and communication, subject to consent and if permitted by law.
5. LEGAL BASES FOR PROCESSING PERSONAL DATA
We processed the above collected personal data based on the following legal basis:
- Consent: There is a consent given to us to process your collected personal data for such purpose only or additional consent if permitted by law to enable to partake in our business services and operations.
- Performance of a Contract: There is an obligation to process your collected personal data as initial steps prior delivering our services, managing our relationship and processing payments.
- Legitimate interests: There is a necessity to process your collected personal data as pursued by us or by third party to keep your data up to date and fulfillment with legal or regulatory obligations, except where such interests are overridden by the rights of data subjects requiring its protection and confidentiality.
6. DISCLOSURE OF PERSONAL DATA
We share your personal data with the following categories of recipients and ensure that we have implemented appropriate security measures to prevent your personal data from being lost, altered, unauthorized used, accessed or disclosed:
- Group companies of Prism Worldwide Limited: Limited access to your personal data to our employees and agents who have directly involved with the services you have with us.
- Service providers: We work with service providers from originating country and in abroad who process data about you on our behalf or in joint responsibility with us or who receive data about you from us in their own responsibility (e.g. IT providers, accountants, registered agents, auditors, bank address checkers).
- Central services provider is our group company Arvis in the Philippines.
- Banks: Whenever we open accounts for yourself or entities which we set up and manage for you, bank compliance data is shared with the bank. Usually, they require the same data about yourself as we require.
- Authorities: We may pass on personal data to offices, courts and other authorities in originating country and in abroad if we are legally obliged or entitled to do so or if this appears necessary to protect our interests. The authorities then process this data on their own responsibility.
All these categories of recipients may in turn involve third parties, so that your data may also be made accessible to them. We can restrict processing by certain third parties (e.g. IT providers), but not by other third parties (e.g. authorities, banks, etc.).
7. INTERNATIONAL DATA TRANSFERS
We guarantee that all international transfers of personal data are conducted with appropriate safeguards or protections that are comparable to those required by applicable laws. The personal data is processed in our group companies in Switzerland, the EU/EEA, the Philippines, the United Arab Emirates, Cyprus, Hong Kong and Singapore. Moreover, in the course of our services, personal data can be transferred to the registered agents, auditors, banks and agent companies in the EU/EAA, British Virgin Islands, Panama, Gibraltar, United Arab Emirates, Hong Kong, Philippines, West Indies, Marshall Islands and – in specific cases where you wish a relation to another country – other countries.
If a recipient is located in a country without adequate or comparable legal data protection, we take appropriate steps to bound the recipient through legally enforceable obligations to comply and provide a standard of protection to the transferred personal data that is adequate or comparable with the applicable data protection from originating country.
We obtain consent from you for such international data transfers if such consent was not obtained at that time when your personal data was collected for such purpose. The data exchanged via the internet is often routed via third countries. Thus, your personal data may be transferred to and stored in countries outside your jurisdiction where it is legally permissible and necessary for the provision of our Services.
8. YOUR RIGHTS
You can object to data processing at any time. You also have the following rights:
Right of access: You have the right to request access to your personal data stored by us at any time and free of charge if we are processing it. This gives you the opportunity to check what personal data we are processing about you and that we are using it in accordance with applicable data protection regulations.
Right to rectification: You have the right to have inaccurate or incomplete personal data rectified and to be informed of the rectification. In this case, we will inform the recipients of the data concerned of the adjustments made, unless this is impossible or involves disproportionate effort.
Right to erasure: You have the right to have your personal data erased under certain circumstances. In individual cases, the right to erasure may be excluded.
Right to restrict processing: Under certain circumstances, you have the right to have us restrict the processing of your personal data.
Right to object: You have the right to object to data processing, in particular to the processing of personal data.
Right to Data Transfer: Where applicable, you are entitled—at no cost—to obtain the personal data you have supplied to us in a structured, machine-readable format.
Right of withdrawal: In principle, you have the right to withdraw your consent at any time with effect for the future. Processing activities based on your consent in the past do not become unlawful as a result of your revocation.
Right of complaint: You have the right to lodge a complaint with a competent supervisory authority, e.g. against the way your personal data is processed.
9. PERSONAL DATA RETENTION
We retain your personal data if it is no longer needed for the purpose for which it was collected, or as required by applicable laws and regulations, including for the purposes of satisfying any legal, accounting or reporting requirements.
We determine the appropriate retention schedule for different categories of personal data and regularly review it in accordance with relevant laws on data privacy.
10. DATA SECURITY
We implement appropriate technical and organizational security measures to protect personal data from unauthorized access and misuse.
- Confidentiality and Availability: Ensuring the ongoing confidentiality and availability of processing systems and services.
- Controls: Regular testing of IT for network solutions, access restrictions, encryption of data carriers and transmissions.
- Evaluation: Assessing the effectiveness of the technical and organizational security measures.
- Training: Our employees who handle in the collection, processing, use, and disclosure of your personal data will receive appropriate data protection training to ensure that they are aware of their responsibilities under this Policy and relevant data protection laws.
11. Contact
If you have any questions about data protection, would like information, would like to object to data processing or would like to have your data deleted, please contact us by sending an e-mail to info@worldwide-visas.com.
Please send your request by letter to the following address:
Prism Worldwide Limited
Suite 1404, Tung Wai Commercial Building
109-111 Gloucester Road
Wan Chai, Hong Kong SAR
12. Adaptation
This Privacy Policy does not form part of any contract with you. We may amend this privacy policy at any time. The version published on www.worldwide-visas.com is the current version.
Last updated: 18 July 2025.
