Who is UNHCR?
UNHCR is the United Nations refugee agency. To improve its services, UNHCR has developed the My Services portal, a digital self-service platform designed to give its users greater control over their personal data. The platform acts as an entry-point for individuals seeking asylum to request registration with UNHCR.
My Services enables you to:
- Request to register with UNHCR
- Update your phone number
- Add new family members
This Privacy Notice explains how and why we collect, use, store, share and protect your personal data through the Digital Gateway. It outlines the purposes for which we use your data, how we ensure its security, and your rights regarding the information we hold. Additionally, it provides the contact details of the Personal Data Controller should you wish to exercise any of your rights. UNHCR collects and uses personal data in accordance with its General Policy on Personal Data Protection and Privacy and Policy on the Protection of Personal Data of Persons of Concern to UNHCR.
How is your personal data collected and used on the My Services portal?
UNHCR collects and processes personal data through the My Services portal to facilitate user registration and support the provision of protection interventions in line with UNHCR’s mandate. Your personal data is collected and processed when you interact with the platform, including:
- Account creation and registration, this applies where you are registering for the first time with UNHCR and creating an account on the My Services portal, when you share your personal details such as your name, contact information, address, and documents,
- Account management, such as when you update your contact details,
- Booking appointments with UNHCR.
What personal data do we process?
If you are registering with UNHCR for the first time or if you are updating your information, the following personal data shall be provided by you about yourself and your family members through the My Services portal:
- Basic bio-data: First name, last name, sex, date of birth, country of origin, marital status, national ID number, date of arrival
- Family Information: First name, last name, sex, date of birth, country of origin, marital status, national ID number, date of arrival
- Contact Details: Email address and phone number
- Photo: A passport size photo / selfie
- Document Uploads: ID card, passport, family documents, and others
- Location Details: Address including province/state, district, in country of origin and asylum
- Specific Needs (where applicable): Safety concerns, advanced pregnancy, disability, serious health problems
- Device information: IP address
The legitimate basis for UNHCR to process your personal data is to perform our mandate, i.e., it is necessary to process your personal data to provide international protection and assistance to forcibly displaced and stateless people.
UNHCR will seek to provide you with protection and assistance services relevant to your situation on the basis of the information you provide to UNHCR. Therefore, it is important to provide true and accurate data to the best of your knowledge, and to keep it updated. If you provide inaccurate or false information, it may negatively affect your eligibility for protection and assistance services.
How long do retain your personal data?
UNHCR will keep your data in the portal to register you in UNHCR’s case management system proGres during your registration appointment. Once your registration is completed, we will continue to keep your data in the portal to enable you to view the data we have stored on your behalf, and to update your contact information through the portal. For more information about how your data is processed in proGres, you will be counselled during your registration interview.
Your account will also be deleted if you do not submit an application for a registration interview within six months after you created your account, or if you do not enter any personal data in the portal within four weeks after account creation.
Who will have access to your data?
UNHCR treats your personal data with confidentiality. Where it is necessary, in order to provide protection and coordinate assistance services, your personal data, may be shared with:
NGOs / UNHCR Partners
- For provision and coordination of assistance services or where the registration is conducted by a partner.
The Royal Thai Government
- For prevention of detention and deportation of individuals with UNHCR.
What are your rights as a data subject?
UNHCR would like to make sure you are fully aware of the following rights:
- You have the right to access your personal data as well as information on how UNHCR collects, processes and stores it.
- You have the right to correct or update your personal data that is inaccurate or incomplete.
- You have the right to ask to delete your personal data if its processing is no longer necessary or where there is no legitimate basis for processing.
- You have the right to object to the use of your personal data for legitimate grounds, including sharing with certain third parties.
You or your chosen representative can exercise these rights by contacting us through the channels provided below. These rights are not absolute and may not apply in every situation. Requests related to exercise of your rights may be subject to verification and assessment by UNHCR on a case-by-case basis.
Please note that personal data is necessary for UNHCR to provide protection. Therefore, if you do not provide personal data or if you object to the use of personal data, you may not benefit from UNHCR efforts to protect you.
How can you contact us?
If you have questions or concerns about how UNHCR collects and processes personal data, or if you would like to make a request or lodge a complaint you can do so by sending an email to [email protected] with subject line indicating your self-service group number / application ID.
If you believe there may have been misconduct by UNHCR in relation to personal data processing, you may also write an email to UNHCR Inspector General’s Office.
All complaints are treated with strict confidentiality, meaning that all data is kept confidential, securely stored and used only for the mentioned purposes (protection, upholding rights, assistance service delivery). Only authorized staff will have access to this data for the mentioned purposes.
Cookies
If you want to know how we use cookies, visit https://learn.microsoft.com/en-us/power-pages/admin/cookies.
Changes to this privacy notice
UNHCR keeps its privacy notices under regular review and places any updates on its official webpage. This privacy notice was last updated in March 2026.
