1. Introduction
This Privacy Policy explains how VISAonlineapply LLC ("we," "us," "our") collects, uses, processes, stores, and protects your personal data when you use the United States Electronic System for Travel Authorization (ESTA) application service provided through our portal at www.visaonlineapply.com/us.
We are a Limited Liability Company organized under the laws of Wyoming, United States (Wyoming Organization ID: 2026-001983981), operating from 30 N Gould St, STE R, Sheridan, WY 82801, USA.
This Policy is supplemental to our main Privacy Policy at www.visaonlineapply.com/privacy and should be read together with our US Terms and Conditions, US Cookie Policy, and US Refund and Cancellation Policy, all published at www.visaonlineapply.com/us.
We adhere to rigorous international privacy standards, including the principles of the EU General Data Protection Regulation (GDPR), the UK Data Protection Act, and applicable United States federal and state data privacy regulations.
⚠️
Important Information & Government Disclaimer
VISAonlineapply LLC is a private commercial visa assistance service. We are not affiliated with the United States Government, the Department of Homeland Security (DHS), or U.S. Customs and Border Protection (CBP). The official government portal is available directly at https://esta.cbp.dhs.gov/. To submit your ESTA application, we must transmit your personal data to CBP/DHS systems in accordance with Section 6 below.
2. Data Controller & Contact Information
VISAonlineapply LLC
Corporate Registration: Wyoming Organization ID 2026-001983981
Registered Address: 30 N Gould St, STE R, Sheridan, WY 82801, USA
Email: info@visaonlineapply.com
Data Protection Inquiries: privacy@visaonlineapply.com
3. What Personal Data We Collect for US ESTA
To prepare, validate, and submit your ESTA application under the U.S. Visa Waiver Program (VWP), we collect only the necessary information mandated by U.S. Customs and Border Protection:
3.1 Applicant Identity & Personal Details
- Full legal name (Family name and First/Given name exactly as displayed on machine-readable passport)
- Any other names, aliases, or maiden names used
- Date of birth, city of birth, and country of birth
- Gender and national identification number (where applicable)
- Names of parents (father and mother)
3.2 Passport & Citizenship Information
- Passport number, issuing country, date of issuance, and expiration date
- Citizenship and country of nationality
- Information regarding dual citizenship, other passports, or past nationalities
- High-resolution biometric passport bio-page scan/image
3.3 Contact, Residential & Employment Information
- Valid email address (used for submission status and ETA confirmation delivery)
- Primary telephone number and country calling code
- Current residential street address, city, state/province, and postal code
- Current or previous employment information (employer name, address, phone number, job title)
3.4 U.S. Travel & Emergency Contact Details
- U.S. Point of Contact information (individual name, hotel, or organization and address)
- Address while staying in the United States
- Emergency contact information (name, email address, telephone) inside or outside the U.S.
- Transit indicator (whether your travel is in transit to another country)
3.5 Statutory VWP Eligibility Questions
- Responses to CBP statutory security questionnaires concerning physical or mental disorders, communicable diseases, criminal arrest/conviction history, controlled substance violations, espionage, immigration fraud, past visa denials, overstays, and travel history to designated high-risk countries (e.g., Cuba, Iran, Iraq, Syria, Sudan, North Korea, Libya, Somalia, Yemen).
3.6 Payment Information
Payment processing is handled via certified PCI-DSS Level 1 compliant payment gateways (e.g., Stripe). VISAonlineapply LLC does not view, store, or log raw credit/debit card numbers, security codes (CVV), or banking PINs.
4. Purposes of Data Processing
We process your personal data for the following specific purposes:
- Application Verification & Pre-Check: Reviewing applicant entries for spelling errors, formatting mismatches, and completeness before official submission.
- Government Submission: Securely transmitting your verified data to the U.S. Customs and Border Protection (CBP) ESTA processing system.
- Status Monitoring & Delivery: Tracking application status and delivering your official ESTA approval notification, reference number, and PDF confirmation.
- Customer Support: Responding to client inquiries, application amendments, and recovery requests.
- Legal & Financial Compliance: Maintaining accounting, tax, fraud-prevention, and transactional records in compliance with applicable law.
5. Legal Basis for Processing
Under applicable international privacy regulations (including GDPR/UK GDPR Art. 6):
- Contract Performance (Art. 6(1)(b)): Processing is necessary to perform the agreement between you and VISAonlineapply LLC for providing ESTA submission services.
- Explicit Consent (Art. 6(1)(a)): You explicitly authorize us to handle your passport data and transmit it to U.S. authorities.
- Legal Obligation (Art. 6(1)(c)): Retaining transaction and invoice records to meet financial, tax, and regulatory requirements.
- Legitimate Interests (Art. 6(1)(f)): Protecting our portal against fraudulent activities, security intrusions, and unauthorized access.
6. International Data Transfers & U.S. CBP / DHS
By submitting an application through our portal, you acknowledge and agree that your personal data is transmitted directly to the United States Department of Homeland Security (DHS) and U.S. Customs and Border Protection (CBP).
Once transmitted, your data is governed by the United States Government's published System of Records Notices (SORN) for ESTA and the DHS privacy policy. We have no authority over the internal data handling, retention, law-enforcement sharing, or decision-making processes of the United States Government.
U.S. government privacy policies can be reviewed at https://www.dhs.gov/privacy and https://www.cbp.gov/site-policy-notices/privacy-policy.
7. Data Retention & Automatic Purging
We retain your personal applicant information only as long as necessary to fulfill the requested travel authorization service:
- Active Application Data: Retained during the processing and validation lifecycle until an official ESTA decision is rendered.
- Sensitive Passport Images: Passport scans and uploaded documents are purged from active web servers following verification and delivery of results.
- Transaction & Invoicing Records: Basic order metadata (reference code, applicant name, payment amount, and timestamp) is archived in compliance with U.S. corporate and tax record retention requirements.
8. Data Security Measures
We employ robust technical and organizational security controls designed to safeguard your information against loss, unauthorized access, misuse, or alteration:
256-Bit SSL/TLS Encryption
All data in transit is encrypted using current TLS cryptographic protocols.
PCI-DSS Level 1 Compliance
Billing operations are handled exclusively by certified payment processors.
Role-Based Access Control
Strict least-privilege administrative access controls protect customer data.
Continuous Vulnerability Scanning
Automated firewalls, DDoS mitigation, and intrusion prevention monitoring.
9. Your Privacy Rights
Depending on your jurisdiction (including EU/EEA, UK, and applicable U.S. state laws), you possess the following rights regarding your personal data:
- Right of Access: Request a copy of the personal information we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete personal details prior to government submission.
- Right to Erasure ("Right to Be Forgotten"): Request deletion of your personal records from our databases, subject to legal record retention requirements.
- Right to Restrict Processing: Request temporary restriction of data handling under specific dispute scenarios.
- Right to Data Portability: Obtain an electronic export of your submitted information.
To exercise any of these rights, please email our privacy compliance team at privacy@visaonlineapply.com. We respond to all verified requests within thirty (30) business days.
10. Modifications to This Policy
We reserve the right to amend this Privacy Policy periodically to reflect changes in legal frameworks, technological updates, or US government ESTA requirements. The latest version will always be accessible at www.visaonlineapply.com/united-states/privacy-policy/ with the updated revision date.