Introduction

Travelisa (hereinafter “Travelisa”, “we”, “us”, “our”), with registered office at 21-25 rue Balzac 75008 Paris, is committed to protecting the privacy and security of the customers (hereinafter “Customers”, “you”, “your”) who use Travelisa website and services. The purpose of this Privacy Notice (hereinafter the “Privacy Notice) is to explain how and why we use your personal data and to ensure you remain informed and in control of your personal data at all times.

Travelisa processes personal data in compliance with the applicable legal requirements, in particular, the REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, commonly referred to as “GDPR”.

Any questions you have in relation to this Privacy Notice or how we use your personal data should be sent to our Data Protection Officer at the following email address: dataprivacy@travelisa.com

About Travelisa

Travelisa offers visa assistance services tailored to different types of travelers. We provide services designed to make the visa application process as smooth as possible.

How we collect your personal data

Personal data is collected from our customers when provided in forms, documents, and other sources when customers directly provide Personal Data to Travelisa.

What personal data we collect?

We collect the following categories of personal data:

1) Basic personal details (e.g. name, username, email address, telephone number, and home, business, and billing addressees)

2) Travel details

3) Birth date and gender

4) Geolocation based on IP address.

6) Personal Data obtained from communications with us

7) Searches you conduct, transactions, and other interactions with you on our website

8) Identity and visa documentation including but not limited to:

• Passport and identification details
• Visa application documents
• Supporting documentation for visa applications
• Photos submitted for visa purposes
• Medical Records
• Criminal Certification
• Financial statements
• Studies and employment information

Depending on the service chosen, we will create an email address on your behalf that will be used to register on the official Government website. You will have the opportunity to change the password. Any email received will be automatically forwarded to your personal email address.

How your personal data is used?

We use your personal information for various purposes described below:

Your Use of Online Site:

• Provide information and services (such as Visa Assistance) related to your travel plans and visa application needs.
• Create, maintain, and update user accounts on our platform and authenticate you as a user.
• Maintain your travel and visa application history and visa requirements, and other related information about your interactions with Travelisa’s platform and services, as detailed in this Privacy Notice.

Communications and Marketing:

• Respond to your questions, requests for information, and process information choices.
• Contact you (such as by text message, email, phone calls, mail, push notifications, or messages on other communication platforms) to provide information like travel updates, for marketing purposes, or for other purposes as described in this Privacy Statement.
• Market our products and services.
• Analyse information such as browsing and/or purchase history and use the result to optimise our information and services in accordance with your interests and preferences.
• Measure and analyse the effectiveness of our marketing and promotions.
• Administer promotions like contests, sweepstakes, and similar giveaways.

Other Business Purposes and Compliance:

• Conduct surveys, market research, and data analytics.
• Maintain, improve, research, and measure the effectiveness of our sites, activities, tools, and services.
• Create aggregated or otherwise anonymized or deidentified data, which we may use and disclose without restriction where permissible.
• Promote security, verify identity of our customers, prevent and investigate fraud and
  unauthorised activities, defend against claims and other liabilities, and manage other risks.
• Comply with applicable laws, protect our and our users’ rights and interest, defend ourselves, and respond to law enforcement, other legal authorities, and requests that are part of a legal process.
• Comply with applicable security and anti-terrorism, anti-bribery, and other such due diligence laws and requirements.
• Operate our business using lawful business purposes and as permitted by law.

The legal basis for processing personal data

We process personal data as necessary for the compliance of legal obligation or as necessary to fulfil a contract or service under applicable privacy and data protection laws. If consent is required (for marketing communication, for instance) you can withdraw it at any time through the contact details above.

How long we store personal data

Your personal data will be retained for no longer than is necessary for the purpose for which it was obtained. Specifically:

• Account information will be retained for the duration of your account plus 10 days after account closure.
• Visa documentation and validation results will be retained according to your travel date, unless you decide otherwise by requesting to delete the documents submitted and/or your account.
• Communication records will be kept for 12 months

After these periods, your data will be securely deleted or anonymized, except where retention is required to comply with legal obligations, resolve disputes, or enforce our agreements.

Access to your personal data

Third Parties

Your personal data will be shared with the respective Government Entity depending on the service chosen.

Your personal data may also be shared with third parties to comply with any legal obligations and respond to requests from government agencies, including law enforcement and other public authorities.

Third party service providers working on our behalf

We may pass your personal data to our commercial and technological service providers (as for example, payment gateway provider or our cloud storage supplier). Before sharing any personal data, we make sure that all service providers are contractually obliged to and can prove that your personal data:

• Will be kept secure and confidential;
• Is stored for only as long as required to process service;
• Will never be used for anything other than to process the requested service;
• Will never be used for any marketing purpose by the third party except to the extent you consent upon this.

Nuron AI - Our Document Validation Partner

We partner with Nuron AI to provide document validation and automated filling services. When you submit documents, they are processed by Nuron AI's AI-powered technology platform. Nuron AI acts as our data processor and only processes your documents for the purpose of validating their authenticity, format and compliance with visa requirements and also for filling in visa forms. Nuron AI is contractually obligated to maintain the confidentiality and security of your personal data.

Overseas transfer of your personal data

If we transfer your personal data to other countries in which applicable laws do not offer the same level of data privacy and protection, we take measures to provide an appropriate level of data privacy and protection by using our Binding Corporate Rules or by entering into Standard Contractual Clauses approved by the European Commission with the data importers or through other legal mechanisms available under applicable data protection and privacy laws.

Keeping you in control

We want to ensure you remain in control of your personal data. Part of this is making sure you understand your rights, which are as follows:

• Access – the right to access your personal data, obtain a copy of your personal data that we currently hold.
• Rectify – the right to have your personal data rectified.
• Erase – the right to have your data erased (however, this is not an absolute right and Travelisa may have legal or legitimate grounds for retaining such personal data).
• Restrict – in some cases, the right to restrict processing of your personal data.
• Object – the right to object to the processing of your personal data for direct marketing, or in any other situation in compliance with local laws.
• Portability – the right to receive your personal data in a structured, commonly used and machine-readable format and the right to transmit that data to another controller. This right only applies when the processing of the personal data is based on your consent or on a contract and such processing is carried out automatically.
• Withdraw – you may withdraw your consent, at any time, for the processing of your personal data for which you have previously provided consent by following the Subject Access Request described in this Privacy Notice. Please note that withdrawing your consent or failing to provide personal data described in this Privacy Notice may stop the processing of any services that you requested or are currently enrolled in.

To exercise your rights to your personal data, contact our Data Protection Officer on the email address provided above.

All requests are free of charge.

Although we hope to resolve your concerns directly, you have the right to complain to the Data Protection Authority via the French Supervisor Authority (“CNIL”) by clicking on the following link: https://www.cnil.fr.

Automated Processing and AI

Our document validation services utilize artificial intelligence (AI) technology provided by our partner Nuron AI. This technology automatically processes your submitted documents to:

• Verify document authenticity
• Validate format and completeness
• Ensure compliance with visa requirements
• Auto-parse information from user’s documents to prefill visa forms

This automated processing helps identify potential issues with documentation faster and more accurately than manual review alone.

Changes to this Privacy Notice

We will amend this Privacy Notice from time to time to ensure it remains up-to-date and accurately reflects how and why we use your personal data. The current version of our Privacy Notice is posted on our website. In the case of any material changes we will inform you by appropriate means.

Privacy Notice last updated July, 2025