Privacy Policy

Information the application uses

The application assistance form can collect passport details, a photo of the applicant, a photo of the passport information page, travel destination, phone number, home address, nationality and employment information, criminal-conviction information, security declarations and acknowledgements. This information is sensitive and is used only to save and prepare the requested application service.

How information is stored

Application answers are stored in Google Firebase Cloud Firestore. Applicant and passport photos are stored separately in Firebase Storage and are not saved as Base64 data in the database. An anonymous Firebase account protects the application, and access rules are designed so the current authenticated owner can access only their own application.

The browser stores only the application document ID in localStorage. Firebase may also retain authentication data in the browser so the same person can resume their application. Passport details, addresses, answers and photos are not stored in localStorage.

Analytics and advertising tags

ETA-UK.info uses Google Analytics and a Google Ads tag on its pages. These services may receive page, device and network information under Google's terms. The application code does not send passport details, dates of birth, contact details, addresses, photos, criminal-history answers, security declarations or individual form answers to analytics events.

Payments, sharing and government submission

Information is processed through Firebase to operate the form. Card details entered on the payment page are sent directly to Authorize.net for tokenisation and payment processing; ETA-UK.info receives a single-use payment token and does not store the full card number or security code. Payment status, amount, time and the processor transaction reference are saved with the application.

Application information is not sold through the form and is not submitted to the UK Government during the application or payment stage. Payment for the independent assistance service is made to ETA-UK.info and not to the UK Government.

Retention and deletion

A production retention and deletion schedule must be published and automated before this application is opened for live personal-data collection. Until that operational policy is configured, this form should be treated as a pre-launch implementation and should not be used to submit real applicant information.

Your choices

You can stop before finalising the form. Requests to access or delete information require the application ID and verification that the request comes from the application owner. The site's operator must publish a verified privacy contact before live launch.

Security

The implementation uses authenticated owner-only access rules, private Storage paths, JPEG type and size restrictions, and client-side metadata removal where practical. No internet service can guarantee absolute security. Do not send personal information by email or place it in URLs.