1. Who We Are (Data Controller / Business Operator)

• Legal Entity: A N E Global Travel and Tourism L.L.C (United Arab Emirates)
• Brand: ae.Visa
• Registered Address: Office No. 301, Malik Hisab Real Estate Building, Al Dhagaya, Dubai, UAE
• Privacy Contact: privacy@aevisa.com

For EU/UK users, ae.Visa acts as the data controller under GDPR. For California and other US users, ae.Visa acts as a business/service provider as defined by applicable state privacy laws.

2. How We Collect Information

We collect personal data through:

• Information you provide directly
• Automatic/passive technological collection
• Third-party and affiliated sources

3. Information You Provide Directly

We may collect personal data when you:

• Apply for a visa
• Contact customer support
• Respond to surveys
• Create or manage an account
• Subscribe to communications
• Communicate via email, chat, phone, or messaging platforms

Categories of Personal Data Collected:

• Full name
• Email address
• Phone number
• Residential address
• Date and place of birth
• Nationality and citizenship
• Gender
• Passport information (number, issue date, expiry date, issuing authority, photo)
• Travel details (arrival date, port of entry, purpose of travel)
• Family information
• Occupation and employer details
• Financial/payment information
• Government identification numbers (where legally required)
• Religious data (only where required for particular visa types)

Some information may qualify as sensitive personal data under GDPR, PDPL, or CCPA/CPRA.

4. Information Collected Automatically (Device & Usage Data)

We may automatically collect:

• IP address
• Device identifiers
• Browser type
• Operating system
• Mobile carrier
• General location (derived from IP)
• Usage behavior (pages viewed, time spent, navigation patterns)
• Referring URLs
• Error logs
• Interaction metrics

We may also collect mouse movement and scroll behavior, but we do not capture keystrokes.

5. Cookies, Tracking & Similar Technologies

We use:

• First-party cookies
• Third-party cookies
• Tracking pixels and web beacons
• Analytics and session tools

These are used for:

• Platform functionality
• Security
• User experience
• Analytics
• Marketing performance

You may control cookies through your browser settings. Blocking cookies may limit certain functionalities.

Where legally required (EU/UK/UAE), cookie consent tools are activated.

6. Information From Third Parties

We may receive data from:

• Social media platforms
• Payment processors
• Identity verification providers
• Immigration service partners
• Marketing and analytics providers

We may combine this information with data collected directly from you.

We do not control third-party privacy practices.

7. Legal Basis for Processing

We process personal data based on:

• Contractual necessity
• Legal obligations
• Explicit consent
• Legitimate business interests

As required under:

• UAE PDPL
• GDPR (EU/UK)
• US state privacy laws

8. How We Use Your Information

We use personal data to:

• Provide visa facilitation services
• Process payments
• Communicate regarding applications
• Deliver customer support
• Prevent fraud and misuse
• Improve infrastructure and services
• Conduct analytics and performance measurement
• Communicate marketing (where consent is granted)
• Enforce contracts and legal rights

We may use aggregated or anonymised data for research and business analytics.

9. Disclosure of Personal Data

We may disclose data to:

• Embassies and immigration authorities
• Payment processors and banks
• Biometric appointment centers
• Shipping/courier services
• IT, hosting, cybersecurity vendors
• Legal and regulatory bodies
• Asset buyers in the event of mergers or acquisitions
• Marketing and advertising partners (only de-identified where required)

We do not sell personal data in the commercial sense.

10. Online Analytics & Targeted Advertising

We use analytics platforms such as Google Analytics and advertising technologies for:

• Website optimization
• Marketing performance tracking
• Conversion analysis

Users may opt out via:

• Browser controls
• NAI and DAA tools
• Google ad settings

Even when opted out, non-targeted advertising may still be displayed.

11. Your Privacy Choices & Rights

Depending on your jurisdiction, you may:

• Access your personal data
• Correct inaccurate data
• Request deletion
• Restrict processing
• Object to marketing
• Request portability
• Withdraw consent
• Appeal data-handling decisions

Verification of identity is required before fulfilling requests.

12. Data Retention

We retain data only as long as necessary for:

• Service delivery
• Regulatory compliance
• Fraud prevention
• Dispute resolution
• Financial record-keeping

13. Data Security Measures

We use:

• Encrypted data transmission (TLS/SSL)
• Secure servers
• Role-based access controls
• Internal confidentiality policies
• Continuous monitoring

No digital system can guarantee absolute security.

14. International Data Transfers

Data may be transferred outside your country for:

• Visa processing
• Secure storage
• Vendor services

We apply safeguards consistent with:

• UAE PDPL
• GDPR adequacy standards
• Contractual data-processing agreements

15. Children’s Privacy

Our Services are not intended for individuals under 18 without legal guardian consent. We delete minor data upon verified notice.

16. Links to External Sites

We are not responsible for privacy practices of third-party websites linked through ae.Visa.

17. Changes to This Policy

We may update this Policy to reflect:

• Legal changes
• Technology changes
• Operational changes

Continued use constitutes acceptance of updates.

Region-Specific Privacy Rights

🇪🇺 European Union & United Kingdom (GDPR)

Legal bases include:

• Contract
• Consent
• Legitimate interests
• Legal compliance

You may:

• Access, rectify, erase
• Restrict processing
• Object to profiling
• Request portability
• Withdraw consent

You may lodge a complaint with your supervisory authority.

🇺🇸 California & US State Privacy Rights (CCPA/CPRA + Other States)

In the last 12 months, we may have collected:

• Identifiers
• Commercial data
• Financial data
• Device/network activity
• Employment data
• Inference data
• Biometric/visual data
• Protected classification data
• Sensitive personal data (passport, ID)

Consumers may:

• Request access
• Request deletion
• Request correction
• Opt out of targeted advertising
• Appeal decisions

We do not knowingly sell data of minors under 16.