Privacy policy

Data processed

Depending on the stage of the application, we may process first and last names, email, telephone, residential address, date of birth, nationality, passport details, passport and facial photographs, travel and employment information, other nationalities and answers required to prepare the application, including certain information about convictions or security questions when required for the official application.

We also process application and payment information required to perform the service. Full payment card details are not stored by our website: payments are processed by Stripe.

Purposes and legal bases

Data needed to create, manage, review and process the application is used to perform the service requested by the customer. Certain data may also be processed to meet our legal obligations, secure the service, prevent abuse and defend our rights in disputes, according to the legal basis applicable to each processing activity.

Recipients and service providers

Access is limited to people who need the data to provide the service. Data may be processed by essential technical providers, including hosting, database, payment and communication providers. Where necessary for the requested service, the required information is used to prepare or carry out the application with the competent official service.

We do not sell travellers’ personal data.

International transfers

Some technical providers may process data from countries outside the European Economic Area. Where regulations require, these transfers must be covered by an appropriate legal mechanism. The list of providers and applicable mechanisms is kept up to date in our compliance documentation.

Retention periods

Retention periods vary by data type. Passport copies and facial photographs used to prepare the application are intended to be deleted from active systems no later than 30 days after submission to the official service or, if not submitted, 30 days after closure of the application. Answers concerning criminal convictions and security questions are kept separate from general application data, limited to strictly necessary answers and deleted from operational storage as soon as the application is marked as submitted. Minimal data needed to evidence the contractual relationship and handle possible complaints may be retained for up to 5 years, without retaining passport copies, photographs or detailed answers that are no longer needed solely for this purpose. Accounting records and payment evidence are retained for the legally required periods, which may be up to 10 years.

Security

We apply measures to protect data against unauthorised access, loss or alteration. Operator access is restricted and particularly sensitive information is protected by appropriate technical mechanisms. No storage or transmission method can guarantee zero risk, so these measures are reassessed according to the risks.

Your rights

Depending on applicable regulations, you may request access, rectification or deletion of your data, restriction of certain processing, object to certain processing or exercise data portability where it applies. You may also lodge a complaint with the CNIL, the French data protection authority.

To exercise your rights, write to support@uk-eta.io.

Updates

This policy may be updated to reflect changes to the service, our providers or regulations. The version published on this page is the applicable version.