Our Policies & Commitments

applykenyaeta.com ('we', 'us', 'our') is committed to protecting the privacy and personal data of our users. This Privacy Policy explains how we collect, use, store, and share your information when you use our website and Kenya eTA application services.

1.1 Information We Collect

Personal Identification Information

• Full legal name (as per passport)

• Date of birth and nationality

• Passport number, issue date, and expiry date

• Country of birth and country of residence

• Email address and phone number

• Travel itinerary details (arrival date, departure date, purpose of visit)

• Accommodation details in Kenya

Payment Information

• Credit/debit card details (processed securely via PCI-DSS compliant gateways)

• Third-party payment transaction IDs

• Payment processor references

Technical & Usage Data

• IP address, browser type, and device information

• Pages visited, time spent, and navigation patterns

• Cookies and tracking data (see Cookie Policy below)

1.2 How We Use Your Information

• To process and submit your Kenya eTA application

• To verify your identity and passport details

• To communicate application status updates via email

• To process payments and issue receipts

• To provide customer support and respond to queries

• To comply with applicable legal and regulatory obligations

• To prevent fraud and ensure platform security

• To improve our website, services, and user experience

• To send transactional notifications (not marketing, unless opted in)

1.3 Legal Basis for Processing

• Contract performance: processing your eTA application

• Legal obligation: compliance with anti-fraud and AML laws

• Legitimate interest: platform security and service improvement

• Consent: where you have explicitly agreed (e.g. marketing emails)

1.4 How We Share Your Information

We do not sell, rent, or trade your personal data. We may share your data with:

• Kenya Directorate of Immigration Services — for eTA submission

• Authorised payment processors

• Email and communication service providers

• IT infrastructure and cloud hosting providers

• Legal or regulatory authorities, when required by law

All third-party processors are bound by appropriate data protection agreements.

1.5 Data Retention

We retain your personal data for as long as necessary to fulfil the purposes stated in this Policy, and in accordance with applicable law:

• Application data: retained for 5 years for compliance and dispute resolution

• Payment records: retained for 7 years as required by financial regulations

• Account/communication data: retained for 3 years after last interaction

• You may request deletion of your data, subject to legal retention requirements

1.6 Cookies

We use cookies to improve your browsing experience. Types of cookies we use:

• Essential cookies: required for the website to function

• Analytics cookies: to understand how users interact with our site (e.g. Google Analytics)

• Functional cookies: to remember your preferences

You can control cookies via your browser settings. Disabling essential cookies may impair site functionality.

1.7 Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you

• Request correction of inaccurate data

• Request deletion of your data ('right to be forgotten')

• Object to or restrict certain processing

• Data portability — receive your data in a structured format

• Withdraw consent at any time (where processing is based on consent)

To exercise your rights, contact us at: privacy@applykenyaeta.com

1.8 International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence. We ensure adequate safeguards are in place, including standard contractual clauses where required.

1.9 Data Security

We implement industry-standard security measures including 256-bit SSL encryption, secure servers, access controls, and regular security audits to protect your personal data from unauthorised access, loss, or disclosure.

1.10 Children's Privacy

Our services are not directed at children under 18. If a minor's eTA application is being submitted, it must be done by a parent or legal guardian who takes full responsibility for the data provided.

1.11 Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on our website with a revised effective date. Continued use of our services after changes constitutes acceptance of the updated Policy.