Privacy Policy

What we collect

What we collect depends on which of our services you use.

• •eVisa applications: full name, date of birth, sex, nationality, passport number and expiry, email, phone, your travel details (entry date, port of entry, purpose), a scan or photo of your passport data page, and a portrait photo.
• •Consultation enquiries (work permit, temporary residence card, FDI, corporate filings, corporate tax): your name, email, phone, nationality, whatever you choose to tell us about your situation, and — if you answer the optional question — where you first heard about us.
• •Company-formation dossiers: the company details you enter, plus, for every member, owner, and legal representative you list, their full name, date of birth, sex, Vietnamese identity-document (CCCD/CMND) number with its issue date and place, contact address, and capital contribution.
• •Payment confirmation details for PayPal or bank transfer. We do not collect or store card numbers.

Why we collect it

We use your data solely to prepare, lodge, and track your application or dossier, to answer your enquiry and quote for it, to communicate with you about it, to process payment, and to meet legal and compliance obligations. We do not sell your data or use it for third-party marketing.

If you send us other people's data

The company-formation form asks you for personal data about other people — members, owners, and the legal representative — who are not filling the form themselves. By submitting it you confirm that you are authorised to give us their details for the purpose of registering the company, and that you have told them we hold those details. The same applies if you apply for an eVisa on someone else's behalf. If one of those people contacts us, we will deal with them directly about their own data.

Cookies

We use two cookies, and no others. We set no advertising cookies, and we do not use Google Analytics or any other third-party analytics service on this site.

Our forms can also run a Cloudflare Turnstile check to keep automated submissions out. Turnstile is operated by Cloudflare, which is also our hosting provider; the check runs in your browser and is verified by our server.

• •itv_sess — a signed session cookie, set when you start an application. It carries a random identifier and nothing else: no name, no contact details. It is what lets you come back to your own application and to nobody else's. It is strictly necessary for the application form to work, and it lasts 30 days.
• •itv_lang — set when you pick a language from the language switcher, so we do not send you back to English on your next visit. It lasts 12 months.

Website measurement

To see where people give up on the application form, we record one row per visit for each step reached — for example that a speed was chosen, that the details were filled in, or that a passport photo was uploaded. Each row holds the random identifier from the itv_sess cookie, the name of the step, the language you are using, and the time. It holds no name, contact details, passport data, or IP address.

If you do not go on to submit an application, that record stays anonymous to us. If you do submit one, the same random identifier is what links the application to you.

How we store and protect it

Your data is stored on secure Cloudflare infrastructure. Passport and portrait images are kept in a private storage bucket, never on a public URL, and are accessed only by authorised staff and only through links that expire about two minutes after they are created. Data is encrypted in transit (HTTPS).

Who we share it with

To lodge an eVisa application we pass it to a Vietnam-based processing partner working for us under contract, which submits the file through the official channel. The partner receives the application record — the identity and passport details listed above, together with your email and phone so the file can be queried — and short-lived links to your passport and portrait images. The links expire about two minutes after they are created, so the partner downloads the images and we do not hand out a permanent address for them.

That hand-off currently happens through a messaging service rather than a system of our own, which means the operator of that messaging service carries the message while it is in transit.

Payment is made through PayPal or by bank transfer, so payment confirmation may be visible to PayPal, to our bank, and to SePay, which matches incoming bank transfers to orders for us.

We do not share your data with anyone else except where required by law, and we never sell it or use it for third-party marketing.

How long we keep it

We keep your data only as long as we need it to provide the service and to meet legal and accounting obligations.

You can ask us to delete your personal data at any time and we will do it. That request is the deletion route we operate today, and it covers eVisa files, consultation enquiries, and company-formation dossiers alike. Automatic deletion of identity data and passport and portrait images from closed eVisa files is built but not yet scheduled; while that is the case, deletion happens on request, and we will state the timetable here once it runs on one.

Records that carry no identity data are kept for longer: the order reference, amount and status of a transaction, which we need for accounting, and the anonymous website-measurement rows described above.

Your rights

You may ask us to access, correct, or delete your personal data, and you may ask us what we hold and who we have sent it to. Contact us at contact@intimevisa.com and we will respond within a reasonable time. If the data is about you but somebody else gave it to us — for example because you are named as a member in a company-formation dossier — you have the same rights, and you can contact us directly.

Contact

Questions about your privacy: contact@intimevisa.com.