The Migration Advisory Centre ("MAC", "we", "us") is a division of Right Fit Evidence Pty Ltd, based in Maseru, Lesotho. We provide migration advisory services, and doing so requires us to collect personal information from you — some of it sensitive.
This policy explains what we collect, why we collect it, who we share it with, how long we keep it, and what rights you have. It applies to this website, maclesotho.com, and to the advisory services we provide.
Our commitment
We never sell your personal information. We never falsify documents. And we will never ask you to pay a bribe or an unofficial fee to any official on your behalf.
1. Who we are
The data controller responsible for your personal information is:
2. Information we collect
Information you give us directly
When you submit our client intake form, we collect:
Sensitive information
Your immigration status and your criminal-record declaration are sensitive personal information. We ask for them only because they directly affect which options are lawfully available to you, and we handle them with corresponding care. We will not ask you to disclose your religion, political views, ethnicity, or health information, and you should not include these in the form.
Case tracking
If you are an existing client and use the "Track My Case" tool on our website, you enter your passport number and surname. These are used solely to locate your file and return your current case status. We do not create a new record from a tracking lookup.
Information collected automatically
When you visit our website we may collect your IP address, browser and device type, pages visited, time spent, and the site that referred you. This happens through cookies and analytics, described in section 7.
Other ways you may contact us
If you contact us by WhatsApp, email, telephone, social media, or in person at our office, we keep a record of that correspondence.
3. Why we use your information
- To assess your eligibility and advise you on lawful migration options suited to your situation
- To provide the services you engage us for, including guidance on document collection and application submission
- To communicate with you about your enquiry, your case progress, and appointments
- To arrange complimentary airport transfers to and from Moshoeshoe I International Airport where you are a client
- To maintain our client records and meet our professional, accounting, and legal obligations
- To improve our website and understand how visitors use it
We do not use your information for automated decision-making. Every assessment is made by a human advisor.
4. Our legal basis
Under Lesotho's Data Protection Act 2011, we process your personal information on the following grounds:
- Your explicit consent — given when you tick the consent box on the intake form. For sensitive information such as your criminal-record declaration, consent is the basis we rely on, and you may withdraw it at any time.
- Performance of a contract — where you have engaged us under an Immigration Consultation Agreement.
- Compliance with a legal obligation — where Lesotho law requires us to retain or disclose information.
5. Who we share it with
We do not sell your personal information, and we do not share it for advertising. We share it only as follows:
6. Transfers outside Lesotho
Some of the service providers we use store data on servers outside Lesotho and outside the SADC region, including in the United States and the European Union. This applies to our website analytics, our cookie-consent provider, our email delivery service, and the hosting of our client portal and database.
Where we transfer your information outside the SADC region, we take reasonable steps to ensure the recipient affords it a level of protection comparable to that required by Lesotho law, and we share only what is necessary for the service in question.
7. Cookies and analytics
Our website uses cookies — small files stored on your device. We use:
- Necessary cookies, which keep the site functioning and remember your cookie choices. These cannot be switched off.
- Analytics cookies, through Google Analytics, which tell us how many people visit, which pages they read, and roughly where they are from. This information is aggregated and is not used to identify you personally.
When you first visit, a consent banner lets you accept or reject non-essential cookies. You can change your choice at any time through the banner's preferences link. You can also block or delete cookies in your browser settings, though parts of the site may then not work as intended.
8. How long we keep it
- Enquiries that do not become engagements — kept for up to 2 years, in case you return to us, then deleted.
- Client files — kept for 7 years after your matter concludes, to meet professional record-keeping and accounting obligations and to support you if your case is revisited.
- Website analytics — retained according to the settings in our analytics account, in aggregated form.
When a retention period ends, we securely delete or anonymise the information.
9. How we protect it
We take reasonable technical and organisational measures to protect your information, including encrypted connections (HTTPS) across our website, access-controlled client records, restricting staff access to those who need it, and confidentiality obligations for everyone who works with us.
No system is completely secure. If a breach occurs that affects your personal information, we will notify you and the relevant authority as required by the Data Protection Act 2011.
10. Your rights
Under the Data Protection Act 2011, you have the right to:
- Access a copy of the personal information we hold about you
- Correct information that is inaccurate or incomplete
- Request deletion of your information, subject to any legal obligation we have to retain it
- Object to processing on compelling legitimate grounds
- Withdraw your consent at any time, which stops further processing based on that consent but does not affect what we did beforehand
To exercise any of these rights, email info@maclesotho.com or call us. We will respond within 30 days. We may ask you to verify your identity first, to make sure we do not disclose your information to someone else.
If you are not satisfied with how we have handled your request, you may raise the matter with the Data Protection Commission established under the Data Protection Act 2011.
11. Children
Our services are directed at adults. We do not knowingly collect information from anyone under 18 without the consent of a parent or guardian. Where we assist with a family or student application involving a minor, we process that information on the instruction of the parent or guardian. If you believe we hold a child's information without proper consent, contact us and we will delete it.
12. Changes to this policy
We may update this policy as our services or legal obligations change. The date at the top shows when it was last revised. If we make a significant change affecting how we use your information, we will tell you directly where we reasonably can.
For any question about this policy or about your personal information:
A reminder about fraud
MAC cannot guarantee approval of any visa, residence permit, or work permit — and nor can anyone else. If an agent promises guaranteed approval, or asks you to pay an official unofficially, report them to the nearest Lesotho Police Station or Immigration Office.
