Privacy Policy

1. Information We Collect

1.1 Personal Information You Provide

When you use our service to apply for ESTA, we collect personal information that you voluntarily provide, including:

• Contact Information: Name, email address, phone number, residential address
• Travel Information: Passport details, travel dates, destination address in the U.S.
• Biographical Information: Date of birth, place of birth, gender, citizenship, employment details
• Emergency Contact: Emergency contact name and phone number
• Eligibility Information: Responses to ESTA eligibility questions regarding health, criminal history, and previous visa denials
• Payment Information: Billing address and payment details (processed securely through Stripe)

1.2 Information Automatically Collected

We automatically collect certain information when you visit our website:

• Usage Data: IP address, browser type, operating system, pages viewed, time spent on pages, access times
• Device Information: Device type, unique device identifiers, mobile network information
• Cookies and Tracking: We use cookies and similar tracking technologies to enhance your experience and analyze website usage

2. How We Use Your Information

We use the information we collect for the following purposes:

2.1 Primary Service Purposes

• To process and submit your ESTA application to U.S. Customs and Border Protection
• To review your application for errors and inconsistencies
• To communicate with you about your application status
• To provide customer support and respond to your inquiries
• To process payments and prevent fraud

2.2 Service Improvement and Analytics

• To improve our website and service offerings
• To analyze usage patterns and optimize user experience
• To detect and prevent technical issues
• To conduct internal research and analytics

2.3 Legal and Security Purposes

• To comply with legal obligations and government requests
• To enforce our Terms of Service
• To protect our rights, privacy, safety, or property
• To detect, prevent, and address fraud or security issues

3. How We Share Your Information

We may share your information only in the following circumstances:

3.1 U.S. Government Authorities

Your ESTA application information is submitted to U.S. Customs and Border Protection and may be shared with other U.S. government agencies for the purpose of processing your travel authorization.

3.2 Service Providers

We share information with trusted third-party service providers who assist us in operating our website and providing our services:

• Payment Processor (Stripe): To process payments securely
• Communication Services: To send emails and SMS notifications
• Cloud Hosting: To host our website and store data securely
• Analytics Providers: To analyze website usage and performance

These service providers are contractually obligated to protect your information and may only use it for the specific services they provide to us.

3.3 Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Court orders, subpoenas, or legal processes
• Requests from law enforcement or government authorities
• Protection of our legal rights or property
• Investigation of potential violations of our Terms of Service
• Prevention of harm to individuals or the public

4. Data Security

We implement industry-standard security measures to protect your personal information:

• Encryption: All data transmitted between your browser and our servers is encrypted using SSL/TLS technology
• Secure Storage: Personal information is stored on secure servers with restricted access
• Payment Security: We use Stripe, a PCI-DSS Level 1 certified payment processor. We do not store credit card information on our servers
• Access Controls: Only authorized personnel have access to personal information, and they are bound by confidentiality obligations
• Regular Audits: We regularly review our security practices and update them as needed

5. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services and support your application
• Comply with legal and regulatory requirements
• Resolve disputes and enforce our agreements
• Maintain business records

Typically, we retain application data for 7 years after submission to comply with record-keeping requirements. After this period, we securely delete or anonymize your information unless we are legally required to retain it longer.

6. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

6.1 Access and Portability

You have the right to request a copy of the personal information we hold about you in a structured, commonly used format.

6.2 Correction

You have the right to request correction of inaccurate or incomplete personal information. Note that once your application is submitted to U.S. authorities, changes must be made through official government channels.

6.3 Deletion

You have the right to request deletion of your personal information, subject to certain exceptions (e.g., legal retention requirements, ongoing transactions, security purposes).

6.4 Opt-Out of Marketing

You can opt out of receiving promotional emails by clicking the "unsubscribe" link in any marketing email. Note that you will still receive transactional emails related to your application.

6.5 GDPR Rights (European Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR), including:

• Right to object to processing
• Right to restrict processing
• Right to lodge a complaint with a supervisory authority

To exercise any of these rights, contact us at privacy@estavisaportal.com. We will respond to your request within 30 days.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website:

7.1 Types of Cookies We Use

• Essential Cookies: Required for the website to function properly (e.g., authentication, security)
• Functional Cookies: Remember your preferences and settings
• Analytics Cookies: Help us understand how visitors use our website
• Performance Cookies: Collect information about website performance

7.2 Managing Cookies

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies if you prefer. Please note that disabling cookies may affect the functionality of our website.

8. Children's Privacy

Our service is not intended for children under 18 years of age without parental consent. When processing ESTA applications for minors, we require a parent or legal guardian to complete the application on their behalf. We do not knowingly collect personal information from children without parental consent.

9. International Data Transfers

Your information may be transferred to and processed in the United States or other countries where our service providers operate. These countries may have data protection laws that are different from your country. By using our service, you consent to the transfer of your information to these countries. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

10. Third-Party Links

Our website may contain links to third-party websites, including the official U.S. government ESTA website. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party websites you visit.

11. California Privacy Rights

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect, use, disclose, and sell
• Right to request deletion of your personal information
• Right to opt-out of the sale of personal information (Note: We do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

To exercise these rights, contact us at privacy@estavisaportal.com or call our toll-free number at 1-800-XXX-XXXX.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the new Privacy Policy on our website and updating the "Last Updated" date. Your continued use of our service after such changes constitutes your acceptance of the updated policy.

13. Data Protection Officer

For questions or concerns about our privacy practices or to exercise your privacy rights, you can contact our Data Protection Officer at: