Notice of Collection
Effective and last updated: 7 October 2026 · Version 2026-10-07
This notice applies at or before collection on visaviza.com and all current and future VisaViza product subdomains. It is the same notice maintained at Privacy Policy — Notice of Collection.
Categories, sources, purposes, recipients and retention
| Category | Source | Purpose | Lawful basis | Recipients | International transfer | Retention | Advertising / analytics | Rights | Sensitive? |
|---|---|---|---|---|---|---|---|---|---|
| Identity and contact data | Applicant, purchaser, parent/guardian or authorised person | Create and manage the application; communicate about the order; support and legal records | Contract; legal obligation; legitimate interests | Government authorities and their contractors; hosting, communications and support providers; professional advisers where necessary | Yes, including the destination country | Drafts normally 30 days and completed files normally 180 days under current configurable retention jobs; longer where required for accounting, disputes, fraud or law | No advertising or behavioural analytics use | Access, correction, deletion, restriction, objection, portability and applicable regional rights | May include national identifiers |
| Passport, identity-document and photograph data | Applicant or authorised person | Prepare, check, format and, where permitted, submit the requested travel document application | Contract; explicit consent or substantial public-interest/legal grounds where required | Relevant authorities, governmental contractors and document-processing/hosting providers acting under instructions | Yes | Application lifecycle plus justified contractual, security and legal retention; uploaded files are subject to scheduled deletion controls | No | Same rights, subject to authority records and legal exemptions | Yes: passport number, identity image and facial photograph |
| Travel, accommodation and immigration data | Applicant; companions; prior application records supplied by the applicant | Eligibility assessment, form preparation, submission, status management and support | Contract; legal obligation; legitimate interests | Destination authorities, consulates, governmental contractors and necessary service providers | Yes | According to application lifecycle and legal/claims needs | No | Same rights, with limits where authority processing is independent | May include immigration history |
| Family, education and employment data | Applicant or authorised person | Complete fields required by the relevant authority and answer follow-up requests | Contract; legal obligation | Relevant authorities and processors strictly needed to deliver the service | Yes | Only as long as necessary for service, support and legal records | No | Same rights | May reveal protected characteristics indirectly |
| Health, biometric, religion, ethnicity, criminal-conviction and security information | Applicant or authorised person, only where the selected authority/application requires it | Complete legally required eligibility and security questions; transmit supporting evidence | Explicit consent and/or other lawful condition for special-category or criminal-offence data; contract is not relied on alone where law requires an additional condition | Relevant governmental authority and strictly necessary processors | Yes | Minimised and retained only for the justified application/legal period | No | Same rights, subject to legal restrictions | Yes; collected only depending on application requirements |
| Order, service and transaction records | Purchaser, VisaViza systems and Stripe status responses | Order fulfilment, payment reconciliation, refunds, accounting, tax, fraud prevention and disputes | Contract; legal obligation; legitimate interests | Stripe/payment processors, accounting/professional advisers and authorities where legally required | Possible | Accounting/tax and claims limitation periods; card data is handled by Stripe and not stored by VisaViza | No | Access, correction and applicable deletion/objection rights | Payment status may be sensitive in context; full card data is not stored |
| Messages and support records | You and VisaViza support personnel | Respond to enquiries, request missing documents, send transactional updates and maintain evidence | Contract; legitimate interests; legal obligation | Email/communications and hosting providers; advisers where needed | Possible | For support, service evidence, security and legal claims; then deleted or anonymised | No marketing pixels are implemented in the repository | Applicable privacy rights | May contain sensitive information you include |
| Device, server-log and security data | Browser, hosting environment and security controls | Deliver pages, preserve sessions and language, protect CSRF, rate-limit abuse, diagnose errors and evidence consent | Legitimate interests; legal obligation; consent only where non-essential technology is later introduced | Hosting, security and infrastructure providers; law enforcement where lawfully required | Possible | Short operational/security periods unless needed to investigate an incident or claim | No current behavioural advertising or third-party analytics | Access, objection and applicable opt-out rights | IP address and hashed technical evidence may be personal information |
| Consent and contractual evidence | Checkout selections and system-generated records | Prove the Terms, Agreement and immediate-performance request accepted for a specific order and version | Contract; legal obligation; legitimate interests | Hosting/database providers, advisers, courts and regulators where necessary | Possible | For the contract, statutory recordkeeping and limitation periods | No | Access, correction and objection where applicable; deletion may be limited by legal claims | Includes IP and user-agent hashes, not raw values, when available |
| Unsupported destination demand and aggregate operational data | Your country selections and VisaViza systems | Understand unsupported demand and improve products; generate statistics after aggregation/de-identification | Legitimate interests | Internal personnel and technical providers | Possible | Minimised; aggregate/de-identified data may be retained where it no longer identifies a person | No behavioural advertising | Objection and other applicable rights while identifiable | No by design |
Sensitive personal information
Depending on the selected governmental application, VisaViza may collect passport and national identifiers, identity images, facial photographs, precise application information, account/order credentials, racial or ethnic origin, religion, health or medical information, biometric-related information, criminal-conviction or offence information and security answers. These categories are not collected for every product. They are used only for application preparation/submission, security, compliance and legal claims, and not for advertising or to infer characteristics unrelated to the requested service.
Sale, sharing, advertising and profiling
VisaViza does not currently sell personal information, share it for cross-context behavioural advertising, use targeted-advertising or behavioural-analytics tags, or conduct profiling that produces legal or similarly significant effects. If that changes, notice, consent and opt-out mechanisms will be introduced where required.
Your rights
Depending on your jurisdiction, you may request access, correction, deletion, restriction, portability, objection, information about categories/sources/purposes/recipients, or appeal a denial. California and covered U.S. state residents may use authorised agents where law permits. EEA/UK persons may withdraw consent and complain to a competent supervisory authority. Exceptions apply for law, authority procedures, fraud, accounting and legal claims.
How to exercise a right
Use the contact form, preferably from the email used for the application. We may verify identity and authority proportionately. Read the complete Privacy Policy for legal bases, international transfers, security, minors and regional detail.