Privacy Policy

1. Introduction

VisaNow ("we", "us", or "our") operates the website visanow.app and related services (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit, register with, or otherwise interact with the Service.

By accessing or using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this policy, please do not access the Service.

2. Data Controller

VisaNow is the data controller for the personal information collected through this Service. Our contact details are:

3. Information We Collect

We collect several different types of information for various purposes to provide and improve our Service to you.

3.1 Personal Data You Provide

• Identity data: full name, date of birth, place of birth, nationality, gender, marital status.
• Contact data: email address, phone number, correspondence address.
• Travel data: passport information, flight details, accommodation, trip purpose, travel companions.
• Payment data: billing address, payment-method token (card numbers are processed by our PCI-compliant payment processor and never stored on our servers).
• Account data: username, password (hashed), application history.

3.2 Data Collected Automatically

• Device data: IP address, browser type and version, operating system, device identifiers.
• Usage data: pages visited, time spent on pages, click patterns, referrer URLs.
• Location data: approximate geographic location derived from your IP address.

4. How We Use Your Information

We use the information we collect for the following purposes:

• To process your visa, eTA, or travel-document application and submit it to the relevant authority.
• To verify your identity and prevent fraud.
• To process payments and refunds.
• To communicate with you about your application, including status updates and required corrections.
• To provide customer support and respond to your inquiries.
• To improve our website, products, and services.
• To comply with our legal obligations.

5. Legal Basis for Processing

We process your personal data under the following legal bases:

• Contract: processing is necessary to perform the contract you have entered into with us (i.e., submitting your visa application).
• Legal obligation: processing is necessary to comply with a legal obligation (e.g., record-keeping, tax, anti-fraud).
• Legitimate interests: processing is necessary for our legitimate interests, such as improving our services, securing our platform, and marketing, provided these interests are not overridden by your rights.
• Consent: for non-essential cookies and marketing communications, where required by applicable law.

6. Sharing Your Information

We may share your personal information with the following categories of recipients: government authorities to process your visa application; payment processors to handle transactions; cloud hosting providers to operate our service; analytics providers to understand usage; and law enforcement when legally required. We do not sell your personal information.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements.

• Application data: retained for up to 7 years after submission to comply with travel-industry record-keeping requirements.
• Payment records: retained for up to 10 years to comply with tax and accounting obligations.
• Marketing data: retained until you unsubscribe or withdraw consent.

When personal data is no longer needed, we securely delete or anonymize it.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data: the right to access, the right to rectification, the right to erasure, the right to restrict processing, the right to data portability, and the right to object to processing.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within the timeframe required by applicable law (typically 30 days).

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your jurisdiction.

• We rely on Standard Contractual Clauses or equivalent mechanisms for cross-border transfers where required.
• We conduct transfer impact assessments to ensure adequate protection.
• Cloud providers are selected on the basis of recognized security certifications.

By using our Service, you understand that your information may be transferred to other countries, including the United States and European Economic Area.

10. Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (TLS 1.2+), encryption at rest, role-based access controls, audit logging, regular security testing, and PCI-DSS-compliant payment processing.

• All payment-card data is handled exclusively by our PCI-DSS Level 1 payment processor.
• Personal data is encrypted at rest using AES-256.
• Access to personal data is restricted to authorized personnel on a least-privilege basis.

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

11. Children's Privacy

Our Service is not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us so we can delete the information.

• Applications for minors are submitted by a parent or legal guardian using their own account.
• We do not direct marketing to individuals under 16.

If we become aware that we have collected personal data from a child without verification of parental consent, we will take steps to remove that information from our servers.

12. Cookies and Tracking

We use cookies and similar tracking technologies. For detailed information on the cookies we use and your choices, please see our Cookie Policy.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date and, where appropriate, by email.

14. Jurisdiction-Specific Provisions

If you are located in the European Economic Area, United Kingdom, California, or other jurisdictions with specific data-protection laws, additional rights may apply (including those under the GDPR, UK GDPR, and CCPA/CPRA). Please contact us for details.

15. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us: