Privacy Policy

Last updated: [DATE — review with legal counsel before launch]

What we collect

To prepare and submit your ESTA application we collect the information the application requires: identity and passport details, contact details, travel information, and answers to the CBP eligibility questions. We also collect payment details (processed by our payment provider — we do not store full card numbers) and standard technical data such as IP address and browser type.

How we use it

We do not sell your personal data, and we do not use your application data for marketing.

Sharing

Your application data is shared with U.S. Customs and Border Protection as part of submitting your ESTA, with our payment processor to take payment, and with service providers who host our infrastructure under confidentiality obligations.

Retention and your rights

We retain application records only as long as needed to provide the service and meet legal requirements. You may request access to, correction of, or deletion of your personal data by emailing support@.... Depending on your location, you may have additional rights under laws such as the GDPR or UK GDPR.

Template notice: this policy is a starting draft. Have it reviewed by a lawyer for your operating jurisdiction (and GDPR compliance if you serve EU travelers) before going live.