Privacy Notice

Last updated 9th January, 2026

This privacy notice for BLS ("we," "us," or "our"), describes how and why we might collect, store, use, and/or share ("process") your personal information when you (user, data subject, data principal, applicant, individual) use our services ("Services"), such as when you:

Visit our website, or any website of ours or use our mobile application that links to this privacy notice.

Questions or concerns?

Reading this privacy notice will help you understand your privacy rights, choices and how we handle your personal information. If you still have any questions related to this privacy notice or data protection concerns, please contact us at dpo@blsinternational.com.

For questions related to your visa application/status related matters, or our additional services, please reach out to us at

WHO ARE WE?

BLS is a trusted partner of the High Commission of the Republic of Cyprus in Mongolia for managing administrative tasks and assisting the diplomatic mission of Republic of Cyprus in the processing of Visa Applications.

• BLS acts as a Data Processor/Operator on behalf of the High Commission of Republic of Cyprus, Mongolia (Data Controller/Responsible Party). Decisions regarding granting or rejecting applications rest with the Diplomatic Mission of the Republic of Cyprus.
• High Commission of the Republic of Cyprus in Mongolia is the Responsible Party for the use of personal data you provide for your visa applications. To know more information about how they process your personal data, please click here

BLS also provides some Additional Services beyond providing visa processing services on behalf of High Commission of the Republic of Cyprus, Mongolia

SCOPE

This Privacy Notice applies to all personal information that we collect from you, whether online, offline, or through our partners.

PURPOSE

We may collect your personal information for the following purposes:

• To process your visa or consular applications
• To provide Additional Services
• To provide customer support or responding to your queries
• To comply with applicable laws and regulations

WHAT INFORMATION WE COLLECT?

The personal information that we collect depends on the context of your interactions with us and the services, the choices you make, the features you use including the specific type of application to the foreign diplomatic mission. The personal information we collect may include the following:

Personal Information

• Name
• Father’s name
• Date of Birth
• E mail Address
• Applicant address details
• Telephone Number/Mobile Number
• Passport Details
• IP Address
• Payment details
• Application Reference number

Special Category of Personal Information. When necessary for your application, we may collect biometric data only with your explicit and informed consent, or as required by applicable legal or contractual obligations with the relevant diplomatic missions.

We may collect or process the following special categories of sensitive information:

• Biometrics Data (Fingerprint, and Photograph).

HOW DO WE COLLECT YOUR INFORMATION?

We may collect your personal information when you interact with us in the following ways:

• Website/Appointments: Name, email, mobile number, passport number
• Call centers: Name, contact, passport info
• Visa Application Centres: Physical documents as required
• Additional Services: Service-specific personal information, such as for courier.
• Social Media Queries: Passport/reference information
• Appointment cancellation or feedback Personal information including application references
• Automatic collection: IP address for security and fraud prevention.

WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?

We may rely on the following legal bases to process your personal information:

• Consent: We may process your personal information if you have given us permission (i.e., consent) to use your personal information for a specific purpose. You can withdraw your consent at any time by sending a mail at dpo@blsinternational.com.

  In case there is a change in our purpose of processing or in the category of personal information, we shall obtain a new consent.

  We process your personal data based on your explicit consent or as necessary to perform the specific service requested.

• Contractual Obligations: We may process your information where we believe it is necessary for the performance of a contract in which you are a party.
• Legal Obligations: We may process your information where we believe it is necessary for compliance with obligations imposed on us by law, such as to cooperate with a law enforcement body or regulatory agency, exercise or defend our legal rights, or disclose your information as evidence in litigation in which we are involved.
• Legitimate Interest: We may process your personal information if it is necessary to protect your legitimate interest or if it is necessary for pursuing our legitimate interests or that of any third parties with whom we share your personal information.

WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

We may share or disclose your personal information with:

• Diplomatic mission of the Republic of Cyprus in Mongolia when we receive or process your visa applications.
• Those service providers that enable us to provide the services such as courier, text messages etc.
• When required by law or government authority: (if required) such as, requests from government agencies, including law enforcement and other public authorities, which may include such authorities outside your country of residence.

We only share or disclose your personal information with these entities if it is necessary to provide the services you have requested or to comply with a legal obligation. We take all reasonable steps to ensure that your personal data is protected when it is shared or disclosed.

HOW LONG DO WE KEEP YOUR INFORMATION?

We keep your personal information only for as long as it is necessary to fulfill the processing purposes set out in this privacy notice, for e.g. no longer than Five (5) days after the passport is returned unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements).

HOW DO WE KEEP YOUR INFORMATION SAFE?

We implement appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. It includes, but not limited to, the use of encryption, passwords, and physical security measures.

DO WE COLLECT INFORMATION FROM MINORS?

By using our services, you represent and warrant that you are not a minor and you are not below the age of 18, and you are capable of providing valid consent.

When we process the personal data of individuals below the age of 18, we obtain consent of a competent person in accordance with applicable Mongolian laws including the POPIA.

IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?

As part of the services offered to you through this website or mobile application, or in a Visa Application Centre, the information which you provide to us may be transferred to international jurisdictions, i.e. outside your country of residence including the country of foreign diplomatic mission for which you have applied for Visa and internally within BLS to our data centers.

Whenever we transfer your personal data internationally, we will ensure adequate protection of your personal data as required by applicable laws and regulations including POPIA.

THIRD PARTY SITES/ LINKED SITES

The Website may contain links to other websites or resources over which BLS does not have any control. Such links do not constitute an endorsement by BLS of those external websites. You acknowledge that BLS is providing these links to you only as a convenience, and further agree that BLS is not responsible for the content of such external websites. We are not responsible for the protection and privacy of any information which you provide while visiting such external websites and such sites are not governed by BLS Policy. Your use of any external website is subject to the terms of use and privacy notice located on those external websites.

DO WE USE COOKIES?

Our website may use different types of cookies to enhance your experience. Cookies are small text files that are placed on your computer by websites that you visit. For more information on our use of cookies, please refer our Cookie Policy.

WHAT ARE YOUR PRIVACY RIGHTS?

You have following privacy rights in relation to your personal information processed by BLS with respect to the additional services provided to you:

• Right of Access – Individuals have the right to receive the details regarding processing of their personal data. You can request us to receive information including types of your personal data being processed, purpose of processing, categories of recipients with whom your data is shared etc.
• Right to Rectification: You have the right to request the correction of your inaccurate personal data or completion of incomplete data.
• Right to Correction, Deletion, or Destruction: You have the right to request the erasure, deletion or destruction of your personal data as per the provisions of the POPIA.
• Right to Object: You have the right to object to processing of your personal data under specific circumstances given under the GDPR.
• Right to Withdraw Consent: You have the right to withdraw your consent anytime. We shall stop the processing of your personal data when you withdraw your consent.
• Right to Processing and Automated Processing: You have the right not be subjected to any decisions resulting from automated processing of your personal data.
• Right to Lodge a Complaint: You have the right to lodge a complaint with us or with the Information Regulator if you are not satisfied with how we process your personal data.
• Right to Institute Civil Proceedings: You have the right to institute civil proceedings regarding the alleged interference of your personal information.

HOW TO EXERCISE YOUR PRIVACY RIGHTS?

Please email us at dpo@blsinternational.com if you wish to make a request to exercise your privacy rights with BLS in respect to the additional services provided to you.

You are not required to pay any charge for exercising your rights. However, a reasonable fee may be charged if your request is deemed manifestly unfounded or excessive. If you make a request, we will respond in a timely manner. If your request is rejected, we will provide you with reasons for such rejection.

To exercise your Data Subject Rights related to processing of your visa application, you must contact the Responsible Party at the diplomatic mission of the country you applied to. Their contact details are provided in the Privacy Notice on the website of the Controller.

CHANGES TO THE NOTICE

Our Privacy Notice may be updated from time to time to reflect any regulatory amendments or changes in our services and operations. You may check latest amendments by visiting our website. The date of the most recent revisions will appear on the top of the page.