Privacy Policy

Information you provide

• Full name, date of birth, sex, nationality and country of birth

• Passport number, issuing country, issue and expiry dates, and the machine-readable zone (MRZ) read from your passport

• The passport image you upload or photograph, and the facial photograph submitted with the application

• Email address, telephone number and residential address

• Travel details relevant to the application

• Answers to the security and suitability questions that the UK authorities require applicants to declare, which may include criminal convictions

• Payment reference details (card payments are processed by our payment provider; we do not store your full card number)

• The content of enquiries you send to our support address

Information collected automatically

• IP address and approximate location, browser and device information, pages viewed, time on site, referring URL, and cookie data (see section 4)

• Preparing, checking and submitting your ETA application — performance of our contract with you

• Reading your passport to fill in the application accurately — performance of our contract

• Submitting declarations required by the UK authorities, including any criminal record declaration — necessary for the application you have asked us to make, and for compliance with the requirements of the receiving authority

• Processing your payment and issuing receipts — performance of our contract and legal obligation

• Contacting you about your application and its outcome — performance of our contract

• Meeting accounting, tax and other legal obligations — legal obligation

• Preventing fraud and keeping our systems secure — our legitimate interests

• Measuring and improving the website — your consent, where required, or our legitimate interests

• Sending marketing messages — your consent, which you may withdraw at any time

• Your passport image and facial photograph are collected solely to complete and submit your application and to check that they meet the published requirements before submission.

• Passport scanning runs in your own browser using a licensed scanning component. The details read from the passport are used to fill in the application form.

• These images are never used for advertising, profiling, or any purpose beyond your application.

• Access is limited to the personnel directly involved in handling your application.

• Where a check is automated, it supports our staff rather than replacing them. Decisions on your ETA are made by the UK authorities, not by automated processing on our side.

• Strictly necessary cookies keep your session active while you complete an application and allow payment to be processed. These cannot be switched off.

• Analytics and advertising cookies are set by Google Analytics and Google Ads so that we can see how visitors use the site and measure our advertising.

• You can delete or block cookies through your browser settings. Blocking strictly necessary cookies may prevent the application form or payment from working.

• The UK authorities — your application and its supporting details are submitted to the UK Home Office ETA service. This is the core purpose of the service you purchase.

• Our payment provider (Payletter) — to take and, where applicable, refund your payment.

• Our hosting and infrastructure provider (Amazon Web Services) — our servers and stored data are hosted on this infrastructure.

• Email and communication providers — to send you confirmations, status updates and support replies.

• Analytics and advertising providers (Google) — as described in section 4.

• Legal and professional advisers, law enforcement and regulators — where required by law or to establish or defend legal claims.

We do not sell your personal data.

Providing the service necessarily involves sending your application data to the United Kingdom. Our company is registered in Cambodia and our service providers may process data in other countries. Where personal data is transferred out of the UK or the European Economic Area, we rely on an appropriate transfer mechanism recognised under applicable law, and we apply the same protections described in this policy regardless of where the data is processed.

• We keep personal data only for as long as it is needed for the purpose it was collected for.

• Application data is retained while your application is being handled and for a limited period afterwards so that we can answer follow-up questions, re-issue an approval notice, or deal with a refund or dispute.

• Passport images and photographs are retained no longer than is necessary for the application and any related enquiry, and are then deleted.

• Payment and transaction records are kept for the period required by accounting and tax law.

• Data subject to a legal hold, such as an investigation or a claim, is retained for the duration of that hold.

• We may keep anonymised or aggregated statistics that can no longer identify you.

• Data is transmitted over encrypted connections and stored on access-controlled systems.

• Access is limited to personnel who need it to handle your application.

• We do not store full payment card numbers; card data is handled by our payment provider.

• If a personal data breach occurs that is likely to present a risk to your rights, we will notify the competent supervisory authority and, where required, the individuals affected.

Our services are not directed at children using them on their own. Where a child is included in an application, their details must be submitted by a parent, legal guardian or authorised representative, who confirms they are entitled to do so. A child's data is processed for that application only, with the same protections and retention rules as any other applicant.

• Request access to the personal data we hold about you

• Ask us to correct inaccurate or incomplete data

• Ask us to delete data we no longer need to keep

• Ask us to restrict or object to certain processing

• Request a copy of data you provided in a portable format

• Withdraw consent where processing is based on consent

To exercise any of these rights, contact support@worldtravelservice.com. We may need to verify your identity before we act on a request. Some data cannot be deleted while it is still required for a submitted application or by law, and we will explain if that applies. If you are in the UK or the EEA, you also have the right to complain to your national data protection authority.

We send marketing messages only where you have agreed to receive them. You can opt out at any time using the unsubscribe link in the message or by emailing support@worldtravelservice.com. Essential messages about an application you have placed will still be sent.

We may update this Privacy Policy to reflect changes in the law, our services or our practices. The current version is always published on this page with the date it was last updated, and we will highlight significant changes on the website.

For any privacy question or to exercise your rights:

HANCOMMUNICATION (WORLD TRAVEL SERVICE)

Email: support@worldtravelservice.com

Customer Support: +855 61 3200 11

Address: 27–29 Street 75, Sangkat Srah Chak, Khan Daun Penh, Phnom Penh 12251, Cambodia

Business Registration Number: 763-33-00040