Privacy Policy — Grewal Migration
Legal

Privacy Policy

Grewal Migration  |  Last updated: 29 April 2026

Grewal Migration (operated by Gary Grewal, Registered Migration Agent MARN 1684999) is committed to protecting your privacy. This policy explains what personal information we collect, how we use it, and your rights under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
Section 01

Who We Are

Grewal Migration is a registered migration agency operating in Australia. Our principal migration agent is:

Gary Grewal
Registered Migration Agent — MARN 1684999
Registered with the Office of the Migration Agents Registration Authority (MARA)
Website: grewalmigration.com.au
Phone: 0485 000 003

We are bound by the Migration Agents Code of Conduct as well as the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

Section 02

Information We Collect

The personal information we collect depends on the nature of your enquiry or engagement with us. It may include:

Identity and contact information

  • Full name, date of birth, gender
  • Residential address, email address, phone number
  • Passport details and other travel document information
  • Nationality and country of birth

Migration and visa information

  • Current and previous visa details and immigration history
  • Relationship information (details of your sponsor, children, partner)
  • Employment history and qualifications (where relevant to your visa)
  • Details of family members included in your application

Sensitive information

Depending on your visa type, we may be required to collect sensitive information including:

  • Health information (medical examination results, health conditions)
  • Criminal history and character information (police clearances)
  • Financial information (where required for sponsorship or Assurance of Support purposes)

We will only collect sensitive information with your consent or where required or authorised by law.

Website visitors

  • IP address and browser type
  • Pages visited and time spent on our website
  • Information submitted via contact or enquiry forms
  • Information submitted to download resources such as our Parent Visa Guide
Section 03

How We Collect Your Information

We collect personal information in the following ways:

  • Directly from you — via phone, email, video call, in-person meetings, or through forms on our website or funnels
  • From your sponsor or family members — where they provide your details as part of a visa application on your behalf
  • From third parties — such as the Department of Home Affairs, Centrelink, police agencies, or medical practitioners, where required for your application
  • Automatically — via cookies and analytics tools when you visit our website (see Section 9)

Where practicable, we will only collect information directly from you. If we collect information from a third party, we will take reasonable steps to notify you.

Section 04

Why We Collect Your Information

We collect and use your personal information to:

  • Assess your eligibility for Australian visa pathways
  • Prepare, complete, and lodge visa applications on your behalf
  • Communicate with the Department of Home Affairs, Centrelink, and other relevant bodies in connection with your matter
  • Comply with our obligations under the Migration Act 1958 (Cth), the Migration Agents Code of Conduct, and other applicable laws
  • Send you resources you have requested (such as our Parent Visa Guide)
  • Send you relevant updates, guides, and information about our services — where you have consented (see Section 8)
  • Respond to your enquiries and provide client support
  • Maintain our business records and comply with legal and regulatory obligations

We will not use your personal information for any purpose that is unrelated to the above without your consent.

Section 05

Disclosure of Your Information

We may disclose your personal information to third parties where necessary to provide our services, including:

  • Department of Home Affairs — as required to lodge and manage your visa application
  • Centrelink / Services Australia — in connection with Assurance of Support arrangements
  • Australian Federal Police and overseas police agencies — for character clearance purposes
  • Approved medical practitioners — to facilitate health examinations required for your visa
  • NAATI-accredited translators — where documents need to be translated
  • Our technology and software providers — including our client relationship management platform (GoHighLevel), email service providers, and cloud storage providers, where they process data on our behalf
  • Professional advisers — such as accountants or legal practitioners, where required

We do not sell, rent, or trade your personal information to any third party for marketing purposes.

We will not disclose your information to any other third party without your consent, unless required or authorised by law.

Section 06

Overseas Disclosure

Some of the third-party service providers we use may store or process data outside Australia. This may include cloud storage, email, and CRM platform providers whose servers are located in the United States or other countries.

Where we disclose your personal information to overseas recipients, we take reasonable steps to ensure those recipients handle your information in accordance with the Australian Privacy Principles. By engaging our services and submitting your information, you consent to this overseas disclosure where necessary.

We are also required to disclose information to the Department of Home Affairs, which may in some circumstances share information with overseas governments or bodies as part of the visa assessment process.

Section 07

Storage and Security

We take reasonable steps to protect the personal information we hold from misuse, interference, loss, and unauthorised access, modification, or disclosure. These steps include:

  • Password-protected and encrypted digital file storage
  • Access controls limiting who within our practice can view client files
  • Use of reputable, security-compliant third-party platforms
  • Secure disposal of physical documents when no longer required

As a registered migration agent, we are required under the Migration Agents Code of Conduct to maintain client files for a minimum period after the conclusion of your matter. After this period, files will be securely destroyed.

No method of transmission over the internet or electronic storage is completely secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security. If you believe your information has been compromised, please contact us immediately.

Section 08

Marketing Communications

If you download a resource from our website (such as the Parent Visa Guide), submit an enquiry form, or otherwise provide your contact details, we may send you:

  • Follow-up information relevant to your enquiry
  • Educational content about Australian parent visa pathways
  • Updates on changes to migration law, fees, or processing times
  • Information about our services

You may opt out of marketing communications at any time by clicking the unsubscribe link in any email we send, or by contacting us directly at the details in Section 13. We will action all opt-out requests promptly.

We will always continue to send you transactional or service-related communications (such as updates on your visa application) regardless of your marketing preferences.

Section 09

Cookies and Website Analytics

Our website and landing pages may use cookies and similar tracking technologies to improve your experience and help us understand how visitors use our site. This may include:

  • Essential cookies — necessary for the website to function correctly
  • Analytics cookies — to collect information about how visitors use our pages (e.g. Google Analytics)
  • Marketing cookies — to track conversions from advertising campaigns (e.g. Facebook Pixel, Google Ads)

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of our website. By continuing to use our website, you consent to our use of cookies in accordance with this policy.

We use GoHighLevel as our marketing and CRM platform. Information you submit through our forms and funnels is stored within that platform and used in accordance with this policy.

Section 10

Access and Correction

Under the Privacy Act 1988 (Cth), you have the right to:

  • Request access to the personal information we hold about you
  • Request correction of personal information that is inaccurate, out of date, incomplete, irrelevant, or misleading

To make an access or correction request, please contact us using the details in Section 13. We will respond to your request within a reasonable timeframe (generally within 30 days).

We will not charge a fee for making an access request. However, we may charge a reasonable fee to cover the cost of providing access in certain circumstances (for example, where the request is complex or involves a large volume of information). We will notify you of any applicable fee before proceeding.

We may refuse access or correction in limited circumstances permitted under the Privacy Act, including where doing so would have an unreasonable impact on the privacy of other individuals, or where the request is frivolous. If we refuse, we will provide written reasons.

Section 11

Complaints

If you believe we have handled your personal information in a way that does not comply with the Australian Privacy Principles, you may lodge a complaint with us first. We are committed to resolving complaints fairly and promptly.

Step 1 — Contact us directly

Please contact Gary Grewal using the details in Section 13, describing your complaint in writing. We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days.

Step 2 — Office of the Australian Information Commissioner (OAIC)

If you are not satisfied with our response, or if we fail to respond within 30 days, you may refer your complaint to the OAIC:

Office of the Australian Information Commissioner
Website: www.oaic.gov.au
Phone: 1300 363 992
Post: GPO Box 5218, Sydney NSW 2001

Migration Agents Registration Authority (MARA)

Complaints about a registered migration agent's conduct (including in relation to client information) may also be directed to MARA:

Office of the Migration Agents Registration Authority
Website: www.mara.gov.au
Phone: 1300 226 272
Section 12

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last updated" date at the top of this page.

We encourage you to review this policy periodically. Your continued use of our website or services after any changes constitutes acceptance of the updated policy.

Section 13

Contact Us

For any questions, requests, or complaints relating to this Privacy Policy or the handling of your personal information, please contact:

Gary Grewal — Privacy Officer

Grewal Migration

📞 0485 000 003

🌐 grewalmigration.com.au

📋 MARN 1684999