Privacy notice
How we look after your information.
Last updated 12 November 2026
Applying for a visa means trusting us with personal details, including passport and financial documents. This notice explains what we collect, why, who we share it with, how long we keep it, and your rights under the Nigeria Data Protection Act 2023.
Who we are
Folio & Co. is a visa and travel support service run by irinandco Limited (ìrìn & co.), Lagos, Nigeria. irinandco Limited is the data controller for the information you give us through this website.
What we collect
When you check your trip or download a checklist
- Your trip answers: destination, reason for travel, travel date, work situation, passport country and where you live.
- For a checklist or route check: your name, email address, and whether you’d like rule-change and travel emails.
When you open a file
- For each applicant: full name, sex, date of birth, passport number and expiry date, nationality, email and phone number, and for online visas, occupation and home address.
- Trip details: travel and return dates, your sponsor or host, and anything you tell us in the notes.
- The documents you upload, such as passport pages, photographs, bank statements, payslips and letters. These can include financial information.
When you pay
Payments are processed by Bachs. We receive the amount, a payment reference and whether the payment succeeded. We never see or store your card or bank login details.
Technical information
Our hosting provider keeps short-lived server logs (such as IP address and browser type) for security. Your browser keeps your file number for the current tab so your file stays open while you work. We don’t use advertising cookies or tracking pixels.
Why we use it
| Purpose | Legal basis |
|---|---|
| Preparing, checking and submitting your visa application, and booking appointments | To perform our contract with you |
| Taking payment and keeping financial records | Contract, and our legal obligations |
| Contacting you about your file, and answering route-check requests | Contract, and our legitimate interest in giving you a good service |
| Rule-change and travel emails | Your consent, only if you tick the box. You can withdraw it at any time. |
| Keeping the website secure and preventing fraud | Our legitimate interests |
We only collect what an embassy, visa centre or immigration authority needs, or what we need to run your file. We don’t sell your information, and we don’t use it for automated decisions about you.
Who we share it with
- Embassies, visa centres and immigration authorities, and their official partners (such as VFS Global), when we submit your application. They use your information under their own rules.
- Service providers that work for us, under agreements that limit how they use it:
- Vercel: website hosting and private document storage (stored in South Africa)
- Bachs: payment processing
- Resend: sending our team email notifications
- Notion: our internal case tracker (names, contact details and file status only; passport numbers and dates of birth are not stored there)
- Slack: internal team notifications (no passport details)
- Google Fonts and cdnjs: loading fonts and the PDF tool in your browser
- Authorities, where the law requires it.
Transfers outside Nigeria
Some of these providers store or process data outside Nigeria, including in South Africa, the European Union and the United States. Where we do this, we rely on the safeguards allowed under the Nigeria Data Protection Act, such as contractual protections with the provider.
How long we keep it
- Application details and documents: until your file closes, then deleted within 90 days, unless you ask us to delete them sooner or we have to keep them longer by law.
- Payment records: 6 years, to meet accounting and tax rules.
- Checklist and email list details: until you unsubscribe or ask us to delete them. If we haven’t been in touch for 2 years, we delete them.
How we protect it
Documents are kept in private storage that can’t be opened without a signed, time-limited link. Everything travels over encrypted connections. Only team members working on your file can see your details, and passport details are kept out of our everyday tools.
Your rights
Under the Nigeria Data Protection Act 2023, you can:
- ask what information we hold about you and get a copy
- ask us to correct anything that’s wrong
- ask us to delete your information
- object to, or ask us to limit, how we use it
- withdraw consent to emails at any time, using the unsubscribe link or by writing to us
- ask for your information in a format you can take elsewhere
- complain to the Nigeria Data Protection Commission
Deleting your information while your application is in progress may mean we can’t complete it. We’ll tell you if that’s the case.
Applying for someone else
If you add other applicants to your file, such as family members, please make sure they know you’re sharing their details with us. If an applicant is under 18, a parent or guardian must provide their information.
Changes to this notice
If we change how we use your information, we’ll update this page and the date at the top. If the change is significant, we’ll tell people with open files by email.
Contact us
For any privacy question or request, message us on Instagram at @flywithfolio with “Privacy” in the subject line, and include your file number if you have one. We reply within 14 days.
irinandco Limited · Lagos, Nigeria