Last updated: 29 October 2026
Who processes your data
The controller of your data is the owner of this site, whose company details are listed under Legal information at the end of the terms and conditions. The site is https://visapply.net and the contact address is support@visapply.net.
For anything related to this policy, write to that address. You will get a reply from a person on our team.
What we process, and why
The application form
Your name and your email address, and the language you were browsing in. Nothing else: the form does not ask for your passport or your travel details.
Why: so that our team can get in touch with you about your ESTA application. Legal basis: steps taken at your request before entering into a contract.
If you go ahead with your application
To prepare and submit your ESTA, our team will ask you for the information the official form requires: identity and passport details, contact details, travel details and the answers to the eligibility questions.
Why: to submit your application to the US authorities on your behalf and keep you informed. Legal basis: performance of the contract.
Submitting the application means sending that information to US Customs and Border Protection (CBP), in the United States. That transfer is necessary to provide the service you ask us for.
When you write to us
Whatever you write to us by email.
Why: to answer you. Legal basis: our legitimate interest in providing support, and performance of the contract if you are a customer.
When you visit the site
Like any website, our server receives your IP address and your browser's user agent with each request, and records them in its logs for security and to fix errors. We do not use analytics tools, advertising pixels or tracking cookies.
Legal basis: our legitimate interest in keeping the site secure and working.
How long we keep it
| How long | |
|---|---|
| Name and email from the form | While we handle your request. You can ask us to delete them at any time |
| Application data | While we handle your application, and afterwards only what we are required to keep |
| Invoices and tax records | 6 years, by legal obligation |
| Emails | While we handle your request |
We do not sell your data and we do not use it for anything other than what is described here.
Who else is involved
| Provider | What for | Where |
|---|---|---|
| OVHcloud | Hosting the website and its logs | France (EU) |
| US Customs and Border Protection | Deciding on your ESTA, if you go ahead with the application | USA |
Your rights
You have the right to ask us for access, rectification, erasure, objection, restriction and portability of your data, and to withdraw consent wherever consent is the basis of the processing.
Write to support@visapply.net. The maximum time to reply is a month, though we normally answer well before that. We may ask you to verify your identity, so that we do not hand your data to the wrong person.
If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (aepd.es). We would appreciate it if you wrote to us first: almost everything can be resolved with an email.
How we protect it
Encryption in transit, with HTTPS across the whole site. Server access is by cryptographic key only, with no passwords.
No system is infallible. If a breach occurred that put your rights at risk, we would notify you and the supervisory authority within the deadlines set by the GDPR.
Minors
Applications for minors must be made by a parent or legal guardian, who provides the minor's data solely so that their application can be processed.
Changes
If we make a significant change, the date at the top of this page will show it.