1. Who We Are

UK ETA Service ("UK ETA Visa Application Service") operates the website at https://ukgazete.com. We provide assistance with UK Electronic Travel Authorisation (ETA) applications. We are an independent third-party service and are not affiliated with the UK Government.

2. Data We Collect

To process your ETA application, we collect the following personal data:

• Full name, date of birth, gender, and nationality
• Passport number, issue date, expiry date, and issuing authority
• Country of birth and country of residence
• Residential address
• Email address and phone number
• Passport photo page image and face photo (selfie)
• Responses to background questions (criminal, immigration, terrorism)
• Payment information (processed by Stripe — we do not store card details)

3. How We Use Your Data

We use your personal data exclusively for:

• Processing and submitting your UK ETA application to UK authorities
• Communicating with you about your application status
• Responding to customer support enquiries
• Complying with legal obligations

We do not use your data for marketing without your explicit consent, and we never sell your data to third parties.

4. Legal Basis for Processing

We process your data under the following legal bases (UK GDPR):

• Contract performance: to deliver the service you have purchased
• Legal obligation: where required by law
• Legitimate interests: for fraud prevention and service improvement

5. Data Sharing

Your data is shared only with:

• UK Home Office / UKVI: to submit your ETA application
• Stripe: to process payments (subject to Stripe's privacy policy)
• Resend: to send transactional emails
• Firebase / Google Cloud: for secure data storage

All third-party processors are contractually bound to protect your data.

6. Data Retention

We retain your application data for up to 12 months after your application is processed. Passport images and face photos are deleted from our systems within 30 days of the final decision. You may request earlier deletion (see Section 8).

7. Data Security

We protect your data using 256-bit SSL/TLS encryption in transit and AES-256 encryption at rest. Access to personal data is restricted to authorised personnel only. Document images are stored in private cloud storage with signed URL access — they are never publicly accessible.

8. Your Rights

Under UK GDPR, you have the right to:

• Access: request a copy of the data we hold about you
• Rectification: request correction of inaccurate data
• Erasure: request deletion of your data ("right to be forgotten")
• Restriction: request that we limit processing of your data
• Portability: receive your data in a machine-readable format
• Objection: object to processing based on legitimate interests

To exercise any of these rights, contact us at privacy@ukgazete.com. We will respond within 30 days.

9. Cookies

We use essential cookies only — for session management and security (Cloudflare Turnstile). We do not use advertising or tracking cookies. You can disable cookies in your browser settings, but this may affect site functionality.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified by email to active applicants. Continued use of the service after changes constitutes acceptance of the updated policy.

11. Contact

For privacy-related enquiries: privacy@ukgazete.com