An ESTA application involves sensitive information: your passport, your ID photo, your contact details and your travel plans. This article summarises our privacy policy, published on our website, which remains the full reference.
The short version
Your documents are sent and stored over encrypted connections and protected against unauthorised access
They are used only to check and complete your ESTA application, and for nothing else
Only the members of our team handling your file can see them
Until your application is submitted to the US authorities, you can replace or delete your documents yourself from your tracking area
Your passport scan and ID photo are deleted automatically 48 hours after your ESTA is approved
We never sell, rent or trade your documents or your data
What we collect
Only what your application needs: your name, contact details, date and place of birth, passport details, and the information the official ESTA form asks for, including your travel history and plans. If you choose to provide them, a scan of your passport and an ID photo.
We also collect standard technical information about how the site is used, such as device, browser and pages visited, and use cookies to remember your preferences and measure site use. You can refuse cookies in your browser settings, though some features may then work less well.
Who it is shared with
The US authorities, the Department of Homeland Security and Customs and Border Protection, because submitting your application to them is the purpose of the service. Once your file is filed with the federal government, some information may become public records under US rules, and that part is outside our control.
Providers working on our behalf, such as hosting, secure payment and customer support, under our responsibility and bound by our policy
Authorities, where the law requires it
We never sell, trade, rent or share your data for marketing without your explicit consent.
Your payment details
Card payments are processed by Stripe, our certified payment provider. We never store your card details on our servers.
How long we keep it
Passport scan and ID photo: kept only as long as needed to check and submit your file, then deleted automatically within 48 hours of your ESTA being approved. After that, nobody on our team can access them.
Your other personal data, such as your name, contact details and file information: kept while your application is processed, then for 6 months after our last interaction with you, unless the law requires longer.
Your rights
You can ask for a copy of the data we hold about you, ask for a correction, ask for your data to be deleted, and unsubscribe from marketing emails at any time. Deletion is subject to legal retention obligations, for example those linked to processing your ESTA application. If we cannot act on a request, we tell you why.
If you live in the European Union, you also have the right to object to processing and to data portability. To exercise any of these rights, write to [email protected] from the email address on your file, quoting your file number.
No automated decisions
We use no automated decision-making and no profiling on your data.
Applying for a child
A parent or legal guardian can apply for their child. The data is then collected from the parent or guardian, with the same security measures as any other application.
Keeping your own file safe
Your tracking area opens with your file number and your email address, so treat your file number as private. We never ask for card details by message, and never ask for your passport by message when you can upload it yourself.