General
Canada eTA Services is committed to protecting your personal data and complying with applicable privacy laws. This Privacy Policy explains how we collect, use, store, protect, and share personal data when you use our website or services.
By paying for our professional services, you become a Customer and agree to our Terms and Conditions. We may update this Privacy Policy when required by law, regulatory developments, or business needs. Changes become effective when published on our website, so we recommend reviewing this Policy regularly.
You must be an adult with legal capacity to use our services, subject to applicable laws. This Privacy Policy does not form part of your contract with us and does not limit your statutory rights.
What Is Personal Data?
Personal data means information that identifies you or can reasonably be used to identify you, including your name, date and place of birth, email or postal address, signature, IP address, website activity, and other information you provide.
Who Controls Your Personal Data?
The Company identified in our Terms and Conditions is the controller of personal data collected when you use our website, submit an Electronic Travel Authorization application, contact Customer Service, or otherwise use our services.
Our website may contain links to third-party websites. We do not control these websites and are not responsible for their content, services, or privacy practices. Their own privacy and cookie policies apply.
What Personal Data Do We Collect?
We may collect:
- Information you provide through application and contact forms or by email, telephone, chat, post, or other support channels.
- Automatically collected information such as IP address, pages visited, time spent on our website, and similar information through cookies and related technologies.
- Payment information, which is securely transferred to certified payment providers for transaction authorization and fraud prevention. We do not access or store complete credit or debit card details.
You should only provide information necessary for the stated purposes. You are responsible for ensuring that all information submitted is accurate, complete, and up to date.
If you provide another person's personal data, you confirm that you have informed them and obtained the required consent. For a minor, you confirm that you are the parent or legal guardian.
Where personal data is provided without the required consent or by someone who is not authorized to provide a minor's information, we may request confirmation or correction or cancel the application where necessary.
How Do We Use Your Personal Data?
We may use your personal data to:
- Assist with completing, reviewing, and submitting your Electronic Travel Authorization application.
- Request missing or incorrect information or documents when necessary.
- Provide application updates and communicate government decisions or requests for additional information.
- Respond to questions, complaints, cancellation, and refund requests.
- Process payments, billing, accounting, and fraud-prevention checks.
- Comply with legal, judicial, administrative, or law-enforcement requirements.
- Improve our website, services, customer support, and user experience.
- Detect and prevent fraudulent, unauthorized, or illegal activity.
Legal Basis for Processing
We process personal data only where a lawful basis exists, including:
- Contract: To provide and manage our services and communicate about your application.
- Consent: Where you have given consent for a specific purpose.
- Legal obligations: To comply with applicable laws and official requirements.
- Legitimate interests: To verify payments, prevent fraud, handle claims, operate and improve our website and services, and protect the security of our systems.
How Long Do We Keep Your Data?
We retain personal data only for as long as necessary for the purposes for which it was collected and for applicable legal, accounting, dispute-resolution, or fraud-prevention requirements.
After the applicable retention period ends, data will be securely deleted or otherwise handled in accordance with applicable law.
Where processing is based on consent, you may withdraw your consent at any time. This does not affect processing that was lawful before withdrawal.
Who May Receive Your Personal Data?
Where necessary, personal data may be shared with:
- The relevant government authority responsible for processing the Electronic Travel Authorization.
- Payment providers, banks, and card companies for payment processing, fraud prevention, or charge disputes.
- Technology, hosting, and service providers supporting our systems and operations.
- Government, judicial, administrative, or law-enforcement authorities where legally required.
- Relevant parties where necessary to protect our legitimate interests or address claims.
Some service providers may be located outside the European Economic Area. Where international transfers occur, we will use the safeguards required by applicable data-protection laws.
How Do We Protect Your Data?
We use reasonable technical and organizational measures designed to protect personal data against unauthorized access, unlawful processing, loss, destruction, or damage.
Staff, suppliers, and partners who have access to personal data are expected to follow appropriate confidentiality and data-protection requirements.
You should also take reasonable precautions, including avoiding the submission of sensitive information through fraudulent emails, messages, or websites.
Your Privacy Rights
Subject to applicable law, you may have the right to:
- Access your personal data.
- Correct inaccurate or incomplete information.
- Request deletion of your data.
- Restrict or object to certain processing.
- Request portability of your data.
- Withdraw consent where processing is based on consent.
Requests can be submitted to info@canadaetaservice.org or through our Contact Form.
We generally respond to valid data-protection requests within one month. Where legally permitted, this period may be extended by up to two additional months due to the complexity or number of requests, and we will notify you when applicable.
You may also manage cookie preferences through your browser settings or available "Do Not Track" tools.
If you believe your data-protection rights have not been properly addressed, you may lodge a complaint with the appropriate data-protection supervisory authority.
For questions about this Privacy Policy or the handling of your personal data, contact info@canadaetaservice.org.