PRIVACY POLICY – VISAETA.COM

Last updated: Tuesday, July 8th, 2025

Welcome to www.visaeta.com by VISAETA (hereinafter "VisaEta", "we", "our", "us"). This privacy policy aims to inform you about how we collect, use, store and protect your personal data when you use our services, in compliance with applicable legislation, including the General Data Protection Regulation (GDPR).

By accessing the site or using our services, you accept this policy.

1. Who are we?

Visaeta is an online assistance service for Electronic Travel Authorization (ETA) applications to the United Kingdom. We act as data controller for personal data collected through our site.

2. What data do we collect?

We may collect the following categories of personal data:

Identification information:

  • Name, first name, gender
  • Date and place of birth
  • Nationality, country of residence
  • Passport number, issue/expiry date
  • Photo or scan of passport
  • Photo of your face

Contact details:

  • Email address, phone number, postal address

Travel data:

  • Planned arrival date, port of entry, purpose of stay

Payment data:

  • Credit card information (processed by a secure provider, we do not have access to it)

Navigation data:

  • IP address, browser type, operating system, pages visited, cookies, date and time of access

3. How do we use your data?

We use your personal data for the following purposes:

  • Processing, submission and tracking of your ETA application
  • Transmission of your information to British authorities
  • Communication with you (confirmation, assistance, reminders)
  • Payment and billing management
  • Improvement of our site and services
  • Security, fraud detection
  • Compliance with our legal and regulatory obligations

5. How long do we retain your data?

  • ETA application data: 5 years
  • Billing data: 10 years (accounting obligations)
  • Navigation data (cookies): 13 months maximum
  • Customer support data: 3 years after last interaction

6. Who are the recipients of your data?

We share your data only with strictly necessary third parties, including:

  • Competent British authorities (Home Office, UKVI)
  • Our technical providers: hosting, security, payments
  • Our web analytics and CRM tools providers (e.g.: Google Analytics, ticketing software)
  • Administrative or judicial authorities, if required by law

We never sell your data to third parties.

7. Data transfers outside the European Union

Your data may be transferred to countries outside the European Economic Area (EEA), particularly to the United Kingdom as part of your ETA application. We ensure that all transfers are governed by appropriate safeguards (standard contractual clauses, adequacy decisions, etc.).

8. Your rights as a data subject

You have the following rights, which you can exercise at any time:

  • Right of access to your data
  • Right to rectification
  • Right to erasure ("right to be forgotten")
  • Right to restriction of processing
  • Right to object
  • Right to data portability
  • Right to withdraw your consent at any time
  • Right to lodge a complaint with the CNIL (www.cnil.fr)

To exercise your rights, contact us at: 📧 contact@visaeta.com

9. Cookies and similar technologies

Our site uses different types of cookies:

  • Essential cookies : necessary for the proper functioning of the site
  • Analytics cookies : to measure audience and improve our services
  • Advertising cookies : to display relevant advertisements

You can manage your preferences via our consent banner or from your browser settings.

10. Data security

We implement security measures compliant with industry standards:

  • Hosting in certified data centers (ISO 27001, etc.)
  • Communication encryption via TLS 256 bits
  • Restricted access to data (authorized personnel only)
  • Continuous monitoring of our infrastructure

11. Minors' privacy

Our services are not intended for persons under 18 years of age. If we learn that a minor has provided us with personal data, we will delete it as soon as possible.

12. Policy modifications

We may update this privacy policy at any time. The most recent version is available on our site, with its update date. We encourage you to consult it regularly.

13. Contact us

For any questions about this policy or to exercise your rights:

Email: contact@visaeta.com

Postal address: 60 rue François 1er, 75008 Paris, France

Phone: +33 7 56 96 51 56

Regional notices and specific choices

Rights of residents of the European Economic Area and the United Kingdom

In accordance with applicable legislation, including the General Data Protection Regulation (GDPR) and the UK Data Protection Act, VisaEta acts as data controller for the personal data we collect and use under this policy.

This means that we determine the purposes and means of processing your personal data, subject to applicable legislation.

Legal foundations for processing

We rely on the following legal bases to process your data:

  • Performance of a contract : to process your ETA application and provide you with our services in accordance with our general terms and conditions.
  • Consent : for certain operations (e.g.: advertising cookies, newsletter sending), we collect and use your data based on your consent, which you can withdraw at any time.
  • Legal obligations : to comply with our tax, accounting or anti-fraud obligations.
  • Legitimate interests : to improve our services, ensure their security, assist you, or prevent abuse, provided that your fundamental rights do not prevail.

Your rights

As a resident of the EEA or the United Kingdom, you have the following rights regarding your personal data:

  • Right of access : obtain confirmation that we hold data about you, and receive a copy.
  • Right to rectification : correct inaccurate or incomplete data.
  • Right to erasure : request deletion of your data, subject to conditions.
  • Right to restriction of processing : temporarily restrict the use of your data in certain cases.
  • Right to data portability : receive your data in a structured and readable format, or transfer it to another provider.
  • Right to object : object to the processing of your data in certain cases, particularly for direct marketing purposes.
  • Right to withdraw your consent : if processing is based on your consent, you can withdraw it at any time without affecting the lawfulness of prior processing.

We may need to verify your identity before responding to your request. Some requests may be refused when they are manifestly unfounded, excessive, or in conflict with our legal obligations.

How to exercise your rights

To exercise any of these rights, contact us at:

📧 contact@visaeta.com

Please include the mention "Your rights as an EU/UK data subject" in the subject of your request. For faster processing, please use the email address associated with your account or application.

Supervisory authority

You also have the right to lodge a complaint with the competent data protection authority:

  • In France: CNIL (www.cnil.fr)
  • In the United Kingdom: ICO (www.ico.org.uk)

However, we encourage you to contact us first. We are committed to responding quickly and resolving any difficulties related to the processing of your personal data.