Privacy Policy
Who manages your data
SECURE ONLINE PAYMENT SOP LTD, a private limited company registered under company number BRN 16088714 with Companies House for England and Wales, with registered office at 2a Connaught Avenue, London, United Kingdom, E4 7AA, is the data controller for personal data collected via this site (eta-srilanka.org). This policy describes how this data is processed and the rights you have under applicable data protection law, including the UK GDPR, the Data Protection Act 2018, and the EU General Data Protection Regulation (Regulation (EU) 2016/679) for European residents.
Why we collect it
Data submitted via this site is processed for the following purposes:
- preparing and checking your travel authorization application;
- accounting and billing for the assistance service;
- administrative follow-up of your file and customer support;
- operating and securing this website;
- compliance with applicable legal and regulatory obligations.
We only collect information reasonably necessary for these purposes — typically your name, date of birth, contact details, passport information, and travel information entered in the application form.
Who your data is shared with
Your data is only accessible to authorised staff, and — where strictly necessary to provide the service — to our payment provider and any processor or partner helping to process your application.
Retention period
We only keep personal data for as long as necessary for the purposes described above, and in any case no longer than 60 months after your last interaction with us, unless a longer period is required by law.
Your rights
Subject to proof of identity, you have the following rights:
- access the personal data we hold about you;
- request correction of inaccurate data;
- request deletion of your data, where applicable;
- object to processing based on legitimate interest;
- request a restriction of processing;
- request portability of the data you provided us.
To exercise any of these rights, write to privacy@eta-srilanka.org.
If you believe your rights have not been respected, you have the right to lodge a complaint with your country's data protection authority — in France, the CNIL (cnil.fr); in the UK, the ICO at ico.org.uk.
Security
We implement reasonable technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure or alteration.
International transfers
Where personal data is transferred outside the United Kingdom or the European Economic Area, we take appropriate steps to ensure it benefits from an adequate level of protection, such as standard contractual clauses or an applicable adequacy decision.
Cookies
When you visit this site, cookies may be placed on your browser to:
- establish visit statistics;
- adapt the site's display to the device you are using;
- remember information you have entered in a form (for example, a partially completed application);
- apply security measures.
A cookie does not identify you personally on its own; it records information about your browsing on this site. Cookie data is not kept beyond 60 months.
You can manage or refuse cookies through your browser settings. For guidance on controlling cookies, see the UK ICO's recommendations at ico.org.uk/for-the-public/online/cookies.
Updates
We may update this privacy policy from time to time. The version published on this page is always the one in effect.