Privacy Policy
1. Data controller
The data controller for personal data processed through etaentry.co.uk is Web-Weave, Horizon 55, 7891CJ, Klazienaveen, The Netherlands, registration number 67651194. For all data-protection matters, contact us at info@etaentry.co.uk.
2. What data we collect
To process your UK ETA application we collect:
- Contact details: your email address and phone number
- Personal details for each traveller: full name, date of birth, sex, nationality, residential address
- Passport details: passport number, country of issue, issue date and expiry date
- Travel details: intended arrival date, purpose of visit
- Background declarations: criminal record declaration as required by the UK ETA application
- Uploaded documents: passport biographical-page scan and a recent photograph
- Payment metadata: payment method, transaction ID, amount, currency, status (the full card or bank details never reach our servers — they are handled exclusively by our payment provider, Mollie)
- Technical data: IP address, browser type, and basic usage logs for security and fraud prevention
3. Why we process this data, and the lawful basis
| Purpose | Lawful basis (UK GDPR / GDPR Art. 6) |
|---|---|
| Performing the service you ordered (preparing and submitting your ETA application) | Contract (Art. 6(1)(b)) |
| Taking payment | Contract (Art. 6(1)(b)) |
| Sending transactional emails about your order | Contract (Art. 6(1)(b)) |
| Meeting our legal record-keeping and tax obligations | Legal obligation (Art. 6(1)(c)) |
| Security, fraud prevention and abuse logging | Legitimate interests (Art. 6(1)(f)) |
Criminal-record declarations are processed under Art. 10 UK GDPR on the basis that the processing is necessary for the establishment, exercise or defence of legal claims (the UK ETA scheme), and only the minimum information needed to complete the application is collected.
4. Who we share data with
- UK Home Office, to submit your ETA application
- Mollie B.V., our payment processor (privacy policy: mollie.com/privacy)
- Our email delivery provider, to send you transactional emails
- Our hosting provider (Laravel Cloud), which stores your data on EU servers
- Tax authorities and auditors, where legally required
We do not sell your data, and we do not use it for marketing.
5. International transfers
All operational data is stored within the European Union. The UK Home Office is in the United Kingdom; under the UK Adequacy Decision the European Commission considers the UK to provide an adequate level of data protection. Where any other transfer becomes necessary, we rely on Standard Contractual Clauses.
6. How long we keep your data
- Order, billing and contact data: 7 years after the order, to meet statutory accounting retention requirements
- Uploaded passport scans and photographs: kept until the ETA is delivered to you; we then retain them only as long as necessary to handle any follow-up queries (no longer than 90 days after delivery in normal circumstances) — please contact us at info@etaentry.co.uk to request earlier deletion
- Technical security logs: 12 months
7. Your rights
Under UK GDPR / GDPR you have the right to:
- Access the personal data we hold about you
- Have inaccurate data corrected
- Have your data erased, where one of the grounds in Art. 17 applies
- Restrict or object to certain processing
- Data portability for data you provided to us
- Lodge a complaint with a supervisory authority — in the UK, the Information Commissioner's Office (ico.org.uk); in the Netherlands, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl)
To exercise any of these rights, email info@etaentry.co.uk. We will respond within one month.
8. Cookies
We use a small number of strictly necessary cookies — see our Cookie Policy for details.
9. Changes to this policy
We may update this policy from time to time. The version in force at the time of your order applies to your order.
Last updated: May 2026 — questions? info@etaentry.co.uk