Privacy Policy
Last updated: 2026-08-28
What we collect, why, who sees it, and how to make us delete it. Passport data is sensitive and we treat it that way.
What we collect
Only what the official ETA application requires, plus what we need to contact you.
- Identity and passport data: full name, date of birth, nationality, passport number and expiry date.
- Contact data: email address and mobile number.
- Suitability data: your answers about criminal convictions, visa refusals and immigration history. This is sensitive data and is visible only to the caseworker assigned to your file.
- Technical data: IP address and basic analytics, used to keep the site secure and to understand which pages are useful.
What we never hold
Your card details. Payment is processed entirely by Stripe on their own hosted page; the card number never passes through our servers and we cannot see it. We receive only a payment reference and the last four digits.
Why we are allowed to hold it
We process your identity, passport and contact data because it is necessary to perform the contract you entered into with us. We process suitability data with your explicit consent, given when you submit the application, because it is necessary for a claim relating to your immigration status. We keep limited records afterwards to meet accounting and anti-fraud obligations.
Who we share it with
Three parties, and no others. The UK Home Office, because that is the point of the service. Stripe, which processes your payment. Our hosting and database provider, which stores the data encrypted on our behalf. We do not sell data, we do not share it with advertisers, and we do not send it to anyone who asks without a lawful basis.
How long we keep it
Application and suitability data is deleted 24 months after your ETA is decided, which covers the validity period of the authorisation itself. Financial records are kept for seven years because tax law requires it. You can ask us to delete your data sooner and we will, unless we are legally required to keep a specific record.
Your rights
You can ask for a copy of everything we hold about you, ask us to correct it, ask us to delete it, ask us to stop processing it, or withdraw your consent for the suitability data. Email us and we will respond within 30 days. If you are unhappy with our response you can complain to the data protection authority where you live — in the UK that is the Information Commissioner's Office.
Contact
AvalVisa Immigration Services Inc., Toronto, Ontario, Canada. info@uketagateway.com