Privacy policy

What we collect

• Identifying information — name, date of birth, nationality, passport number.
• Contact details — email, mobile, postal address.
• Travel details — itinerary, accommodation, sponsor details.
• Documents — passport scans, photos, financial proof, supporting letters.
• Payment information — handled by our PCI-compliant payment partners; we never store full card numbers.
• Technical data — IP address, device type, anonymised usage analytics.

Why we collect it

• To prepare and submit your visa application to the destination authority.
• To process payments and issue receipts.
• To communicate with you about your application status.
• To meet legal record-keeping obligations.
• To improve the service (anonymised usage data only).

Who we share with

• The destination authority — required to process your visa.
• Your assigned reviewer at gov.online.
• Sub-processors — our PCI-compliant payment partners (card and crypto processing), Cloudflare (storage and CDN), Resend (email).
• Where local partners are involved (Concierge tier), the licensed local visa agency you select.

We never sell your data, and we never share it with marketers or unrelated third parties.

How long we keep it

Documents (passport scans, photos, supporting evidence) are deleted 90 days after visa delivery, or earlier on request. Application records and payment ledgers are retained for 7 years to meet financial / tax record-keeping obligations.

Security

PCI-DSS Level 1 for payment data. TLS 1.3 in transit. AES-256 for documents at rest. Firebase Security Rules and least-privilege admin access. Independent security review annually.

Your rights (GDPR / similar)

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion ("right to be forgotten") subject to legal retention obligations.
• Restrict or object to processing.
• Receive your data in a portable format.
• Withdraw consent at any time.

To exercise any of these, write to [email protected] with "Privacy request" in the subject line.

Cookies

See our cookie policy for the full list of cookies we set and how to manage them.

Contact

gov.online Ltd — Data Protection Officer
[email protected]