Privacy Policy
Last updated: February 20, 2026
1. Information We Collect
When you apply for a Vietnam e-Visa through Visa-WayJet, we collect personal information necessary to process your application, including your full legal name, date of birth, nationality, passport number, passport expiration date, and contact details (email address and phone number). We also collect passport-page photographs and portrait photos that you upload as part of the visa application requirements. Additionally, we automatically collect technical data such as your IP address, browser type, device identifiers, and usage patterns when you interact with our platform.
2. How We Use Your Data
We use your personal data primarily to process and submit your Vietnam e-Visa application to the Vietnamese immigration authorities on your behalf. Your information is also used to communicate application status updates, send e-Visa approval documents, process payments, provide customer support, and comply with legal obligations. We may use anonymized, aggregated data to improve our services, analyze platform performance, and enhance the user experience. We do not sell your personal information to third parties for marketing purposes.
3. Data Security
We implement industry-leading security measures to protect your sensitive personal data. All passport numbers and identity document data are encrypted at rest using AES-256-GCM encryption. All data transmitted between your browser and our servers is protected using TLS 1.3 encryption. Our infrastructure undergoes regular security audits and penetration testing. Access to personal data is restricted to authorized personnel on a need-to-know basis, and all access events are logged and monitored.
4. Third-Party Services
We integrate with trusted third-party service providers to deliver our platform. Payment processing is handled by Stripe, which is PCI-DSS Level 1 certified — the highest level of payment security compliance. User authentication may be facilitated through Google OAuth. Uploaded files, including passport photos and portrait images, are stored securely on Cloudflare R2 infrastructure. Transactional emails are delivered via SendGrid. Each third-party provider is contractually bound to handle your data in accordance with applicable privacy regulations.
5. Data Retention
We retain your personal visa application data for a period of 12 months after your visa's expiration date to support re-application, customer service inquiries, and dispute resolution. Payment records are retained for 7 years as required by financial regulations and tax law. After the applicable retention period expires, your personal data is securely deleted or irreversibly anonymized. You may request early deletion of your data at any time, subject to our legal retention obligations.
6. Your Rights (GDPR & Data Protection)
Regardless of your location, we extend GDPR-level data protection rights to all Visa-WayJet users. You have the right to access, correct, or delete your personal data; the right to data portability; the right to restrict or object to processing; and the right to withdraw consent at any time. To exercise any of these rights, please contact our Data Protection Officer at dpo@visa.wayjet.io. We will respond to verified requests within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority.
7. Cookies & Tracking Technologies
Visa-WayJet uses essential cookies to maintain your session and ensure the platform functions correctly. We also use analytics cookies (such as Google Analytics) to understand how users interact with our platform, which helps us improve our services. You can manage your cookie preferences through your browser settings or via our cookie consent banner. Disabling essential cookies may impair platform functionality, including the visa application process. We do not use cookies for third-party advertising or cross-site tracking.
8. International Data Transfers
Visa-WayJet serves users from over 120 countries and territories. Your personal data may be transferred to and processed in jurisdictions outside your country of residence, including Vietnam, the United States, and the European Union. When transferring data internationally, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission, or other lawful transfer mechanisms, to ensure your data receives an adequate level of protection regardless of where it is processed.
9. Children's Privacy
Visa-WayJet's services are not directed at children under the age of 16. We do not knowingly collect personal data from children under 16 without verified parental or guardian consent. Visa applications for minors must be submitted by a parent or legal guardian, who assumes responsibility for the accuracy of the data provided. If we discover that we have inadvertently collected data from a child without proper consent, we will promptly delete that information.
10. Contact & Data Protection Officer
If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact us at privacy@visa.wayjet.io. Our designated Data Protection Officer (DPO) can be reached at dpo@visa.wayjet.io. For general inquiries, you may also write to Visa-WayJet, 42 Le Loi Street, District 1, Ho Chi Minh City, Vietnam. We are committed to resolving any privacy concerns promptly and transparently.