This Privacy Policy explains how myevisa.com collects, uses, and protects your personal information. We believe you deserve to know exactly what happens with your data — no fine print, no surprises.
Who is responsible for your data?
Company: SOLSTICE APPLICATIONS LTD (data controller)
Registration number: HE 474008
Registered office: Vrysoudion 132, HOUSE 1, Paralimni, 5295, Famagusta, Cyprus
Data protection enquiries: [email protected]
This email address handles GDPR and data protection queries only. For general questions, please visit our support portal or contact [email protected].
What data do we collect?
To process your requests, we collect several types of information.
Directly from you:
- Identity Data: Full name, place of birth, date of birth, gender, and nationality/ies, occupational status, current occupation, or employer details (as required by the specific visa application).
- Documentary Data: Passport details (number, expiry and issue dates, scans), and digital photos.
- Contact Data: Email address, phone number, and residential address (address line, city, ZIP code, country).
- Sensitive Data: Depending on the specific visa requirements of certain countries, we may process information such as criminal history and security declarations or health status, but only when strictly mandated by the issuing government. Such information, as well as any passport copies (if and when required) and other identification documents uploaded to our platform are treated as highly sensitive data. These files are stored in an encrypted format and are accessed only by authorized personnel (operators) strictly for the purpose of completing your visa application. Once the service is fully performed and the retention period expires, these sensitive files are securely deleted.
- Travel details: destination, other travel details (depending on the place of visit), information on your flights and where you will stay etc.
- Additional data for minors: Name and surname of parent or legal guardian.
- Payment information: To process your service fees and government visa charges, we collect payment-related information. This includes your billing address and payment method details. Please note that all credit/debit card transactions are processed through secure, third-party payment gateways (such as Stripe). We do not store or have access to your full credit card numbers or security codes (CVV) on our servers. All payment data is encrypted and handled in accordance with the Payment Card Industry Data Security Standard (PCI DSS).
Indirectly (automatically):
- Technical Data: IP address, browser type, connection logs, cookies, and payment records.
Third parties personal data
If you provide us with personal data of third parties, whether other adults or minors, you represent and warrant that you have informed them of the purposes for which their data will be processed and that you have obtained their prior, express, and informed consent to share their data with us.
Why do we collect your data?
We only collect data that serves a clear purpose. Under the General Data Protection Regulation (GDPR), we process your information for the following reasons:
To respond to you. When you reach out through our contact forms or support channels, we use your details to get back to you e.g., in case on incomplete application, to provide you with status updates etc.
To manage your browsing experience. We track basic navigation data to keep the site running smoothly and improve how it works for you.
To keep you informed. With your permission, we send updates about our services and relevant offers.
To process your orders. When you purchase a visa processing service, we need your details to manage the transaction and deliver the service.
To handle visa applications. The core of our service — we collect and process your personal and travel information to prepare and submit visa and travel document applications on your behalf.
When you register on our site, the form you complete gives us the legal basis to provide you with the services you’ve requested.
If we ever need to use your data for a purpose beyond what’s listed here, we’ll ask for your explicit consent first. In addition, we do not use any tools to perform “automated decision-making” or “profiling” that produces legal effects for you.
What gives us the right to process your data?
We don’t just collect data because we can. Every piece of information we process has a legal basis:
Contractual necessity (Article 6.1(b) of the GDPR) – This is our primary basis for core services. We process your data because it is impossible to perform our agreement (i.e. our Terms and Conditions) without it. This includes preparing and submitting your visa or travel document applications to government authorities, processing your transactions, communicating with you regarding the status of your order etc.
By law (Article 6.1(c) of the GDPR) – In many cases, we are required by law to retain certain data (such as transaction records, financial and tax information, statutory record-keeping requirements for regulated services etc.) to comply with our statutory obligations under Cyprus and EU law.
Your consent (Article 6.1(a) of the GDPR) – You’ve given us clear permission to process your data for the stated purposes, in line with, e.g. in cases such as placing non-essential cookies, marketing information etc.
Unsolicited Personal Data
If you provide us with personal information through free-text communication channels (such as contact forms, emails etc.) that has not been explicitly requested by us and is not necessary for the provision of our services, we will not store or process such data. Any such unsolicited personal information will be immediately and securely deleted upon discovery. We encourage you to provide only the information strictly required for your application to ensure the highest level of data protection.
Do we share your data with anyone?
We do not sell, rent, or trade your personal data.
We share information when legally required to do so, or when it’s necessary to deliver the services you’ve requested (for example, submitting your application to the relevant government authority).
We might need to share your personal data with our Partners and Service Providers. To keep our platform running, we share data with trusted third-party providers:
- Payment Processors: To securely handle your transactions (e.g., Stripe).
- Cloud Infrastructure: Secure hosting services (e.g., Amazon Web Services).
- Government Authorities: The respective immigration departments to which your visa application is submitted. Further, we may disclose information as necessary to comply with our legal obligations, such as to respond to government requests, tax and law enforcement inquiries, legal processes, subpoenas, and court orders.
- Legal Process and Protection of our Rights: We may disclose information when we believe it is necessary to investigate, prevent, or respond to illegal, fraudulent, or injurious actions or security incidents that may cause harm to us or others. We may also disclose information to our consultants (such as legal and/or tax advisers) in good faith where necessary to investigate or enforce a violation of this Privacy Policy, our terms, or any legal rights.
International Data Transfers
Since our services involve obtaining visas for various countries worldwide, in some cases, your personal data must be transferred to government authorities and immigration departments located outside the European Economic Area (EEA).
Please be aware that these countries may not offer the same level of data protection as the GDPR. However, these transfers are legally permitted as they are necessary for the performance of the contract between you and SOLSTICE APPLICATIONS LTD (i.e., to process your visa).
How long do we keep your data?
If you’re a customer: We retain your personal and transaction data for a minimum of 5 to 7 years. This period is necessary to comply with our statutory obligations under Cyprus tax and accounting laws, and to ensure we have records available should any legal claims or audits arise within the applicable limitation periods.
If you’re not a customer: We keep your data only as long as necessary to manage the reason you contacted us. Once that purpose is fulfilled, it’s deleted.
What are your rights?
The GDPR gives you significant control over your personal data. Here’s what you can do:
Access. Ask us to confirm whether we hold data about you, and request a copy of it.
Rectification. If anything we have on file is inaccurate or incomplete, tell us and we’ll fix it.
Erasure. Ask us to delete your data when it’s no longer needed for the purpose it was collected — sometimes called the “right to be forgotten.”
Restriction. In certain situations, you can ask us to limit how we process your data. We’ll still store it, but only use it for legal claims or with your renewed consent.
Objection. You can object to processing based on your specific situation. We’ll stop unless we have a compelling legal reason to continue.
Portability. Request your data in a structured, machine-readable format so you can take it elsewhere.
Please note that not all of these rights are absolute, and they do not apply in all circumstances. There may be situations where we cannot grant your request, for example if you make a request and we cannot verify your identity, or if you request deletion of personal information but we have a legal obligation to keep your personal information. Where we deny your request in whole or in part, we will take steps to inform you of the denial and provide an explanation of our actions and the reasons for the denial.
To exercise any of these rights, email us at [email protected] or write to us at: Vrysoudion 132, HOUSE 1, Paralimni, 5295, Famagusta, Cyprus.
Are minors protected?
If any of our services are directed at individuals under 16 years of age, we require consent from a parent or legal guardian before collecting or processing personal data, in accordance with Article 8 of the GDPR.
How do we keep your data safe?
You are responsible for the accuracy of the information you provide. We can’t verify data you submit, so please make sure it’s correct and up to date.
On our end, all data is processed confidentially using appropriate technical and organisational security measures to prevent unauthorised access, loss, or alteration.
We reserve the right to update, modify, or remove content on this website at any time. We are not liable for information sourced from third parties that we haven’t produced ourselves.
Not satisfied? You can file a complaint.
If you believe your data protection rights haven’t been properly addressed, you have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus. More information is available at www.dataprotection.gov.cy.