Privacy Policy

1. Who we are (data controller)

TechnoDucks Inc (5348 Vegas Drive # 1485, Las Vegas, NV 89108, USA) is the data controller responsible for the personal data you submit when you use Apply for ESTA at apply-for-esta.com. You can reach us at [email protected] for any privacy-related request.

2. What data we collect

We collect only the data needed to prepare and submit your ESTA application and to operate our Service:

• Applicant identity and passport data: full name, date and place of birth, nationality, sex, passport number, issuing country, and passport issue and expiry dates.
• Travel and eligibility information required by the ESTA application, including contact details, address while in the U.S. (if known), and the eligibility questions mandated by the U.S. authorities.
• Contact details: email address and, where provided, phone number, used to deliver your confirmation and provide support.
• Payment data processed by our PCI-compliant payment provider. We do not store full card numbers on our own systems.
• Technical data: IP address, browser user-agent, and referrer, and marketing attribution parameters (UTM tags) when present in the URL.

3. Why we use your data and legal bases

• To prepare, review, and submit your ESTA application to the official U.S. ESTA system (performance of our contract with you).
• To process payment and send your receipt and confirmation (performance of our contract).
• To provide customer support and respond to your requests (performance of our contract and our legitimate interests).
• To prevent fraud and secure our Service (legitimate interests).
• To comply with tax, accounting, and other legal obligations (legal obligation).

4. Passport and sensitive data handling

Passport and application data are treated as confidential. Access is limited to staff and processors who need it to deliver the Service, and data is transmitted over encrypted connections. We use this data only to complete your ESTA application and for the purposes described in this policy.

5. Who we share data with

• The official U.S. ESTA system operated by the U.S. authorities, to submit your application.
• Our PCI-compliant payment provider, to process your payment.
• Our email and hosting providers, to deliver confirmations and operate the Service.
• Authorities or courts, only where legally required.

We do not sell your personal data to third parties.

6. Data retention

We keep order and application data only as long as necessary for the purposes above and to meet legal, tax, and accounting obligations (typically several years, as required by applicable law). After that period, data is deleted or anonymized. Passport data that is no longer required is removed on a routine basis.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal data, and to restrict or object to certain processing. If you are in the EU/EEA or the UK, these rights arise under the GDPR (or UK GDPR), including the right to lodge a complaint with your local supervisory authority. To exercise your rights, contact us at [email protected]. We may ask you to verify your identity before we act on a request.

8. International transfers

Submitting an ESTA application necessarily involves transferring your data to the United States. Some of our service providers may also be located outside your country. Where required, such transfers are covered by appropriate safeguards, such as Standard Contractual Clauses under GDPR Article 46 or equivalent measures.

9. Cookies

We use a limited set of cookies and similar technologies. See our Cookie Policy for details.

10. Contact

For any privacy question or request, write to [email protected]. Data controller: TechnoDucks Inc, 5348 Vegas Drive # 1485, Las Vegas, NV 89108, USA.