Skip to content
MyVisaPort

Privacy notice

Operator (controller). MyVisaPort is run by Amiel Pereira, United Kingdom, who is the controller of the personal data described here under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Contact: [email protected].

No accounts, no tracking cookies, no third-party analytics. MyVisaPort has no accounts and no comment or newsletter forms; the only sign-up is the optional route-change email alert (see below), and runs no advertising or third-party analytics scripts. The site sets no cookies. We count page views, visa searches, clicks to external sites, alert sign-ups, travel report downloads and the country visits come from, anonymously and only in total (see “Anonymous usage counts” below).

Your search stays in your browser. The passport, residence, destination and purpose you pick are used in your browser to open the matching page. They appear in the page address (for example ?r=…&purpose=work) but we don't store them separately.

Hosting and server logs. The site is delivered through Cloudflare (Cloudflare, Inc.), which acts as our content delivery network and as the secure tunnel to our server. Cloudflare processes your IP address and request details to deliver and protect the site and may set strictly necessary security cookies. Our web server keeps standard access logs (IP address, date and time, page requested, browser type). We keep these logs for up to 14 days; they are then deleted automatically by log rotation. Our lawful basis is our legitimate interests in running the site securely and investigating abuse or faults (UK GDPR Article 6(1)(f)).

Anonymous usage counts

To see which pages and routes are useful and improve the site, a small script from our own server tells our server when a page is viewed, when the visa search is used, when you open a link to an official or other external site, when an alert sign-up or confirmation page is shown, and when a travel report is downloaded. Each message contains only the type of event, the public page address parts that describe the route (for example passport “indian” and destination “thailand”) or the name of the external website, and the time. It contains no cookie, no identifier, nothing you type and no IP address or browser details: our server records these messages in a separate file without your IP address or browser type, so we cannot tell visitors apart or recognise a returning visitor. We record the country your visit comes from (worked out by Cloudflare), never your IP address; in our reports, countries with fewer than 5 visits are grouped together as “Other”. Raw messages are deleted after 14 days; we keep only daily totals (for example “120 searches for Indian passport to Thailand”). Nobody else receives this data. This is collection for statistical purposes about how the website is used, with a view to improving it (Privacy and Electronic Communications Regulations, Schedule A1 paragraph 5); to the extent any of it is personal data, our lawful basis is our legitimate interests in improving the site (UK GDPR Article 6(1)(f)).

How to object. Nothing is sent if your browser has “Do Not Track” or Global Privacy Control switched on, or if JavaScript is off. You can also switch it off for this browser here; this stores a single setting (“off”) in your browser and nothing else.

Maps. Pages with a map load map tiles from OpenStreetMap (tile.openstreetmap.org), so your browser sends your IP address to the OpenStreetMap Foundation when the map is shown.

Travel report (PDF). The travel report is created in your browser; we don't receive or store it. The optional travel dates you enter are used only inside the PDF. The PDF's QR link contains only the rule's status (visa type and check date) so the page can tell you whether the result changed; it contains no personal data and is removed from the address bar when you open it.

Guide suggestions. If you send a suggestion from a country guide, we store the text, the optional name you give, the page and the time. We don't ask for an email address, and we don't store your IP address: to stop abuse our automation server keeps a short-lived, non-reversible fingerprint of it in memory for at most a day. Suggestions are held in our own content database, emailed to the site owner for review, and never published automatically. They are kept until the site operator deletes them. Our legal basis is our legitimate interest in improving the guides (UK GDPR Article 6(1)(f)). To have a suggestion deleted, email us with its text and roughly when you sent it.

Route-change email alerts. If you sign up for an alert on a route page, we store your email address, the route (passport, country of residence if the page has one, destination and trip purpose), the kinds of change you picked, which version of the consent wording you agreed to, and when you signed up, confirmed and unsubscribed. We don't ask for or store passport or ID numbers. To stop misuse we keep keyed hashes (not the addresses themselves) of your IP address and email address for 2 days. The data is held in our own database and handled by our own automation server to send the emails. Emails are delivered by Resend (Plus Five Five, Inc., USA), which processes your email address and the message for us and may do so in the United States (Resend privacy policy). We rely on your consent (UK GDPR Article 6(1)(a)). You can withdraw it at any time with the one-click unsubscribe link in every alert or by emailing us. Sign-ups that aren't confirmed within 7 days are deleted, and your address for a route is deleted 30 days after you unsubscribe. We only send an alert after we have reviewed the change.

Cookies and consent. MyVisaPort itself sets no cookies and uses no advertising or tracking technologies. The only script that sends anything back is the anonymous usage counter described above, which the law allows without consent because it only produces aggregate statistics to improve the site and you can object at any time; so there is no cookie consent banner (Cloudflare’s strictly necessary security cookies, if set, do not need consent either). The only consent we ask for is the explicit opt-in for route-change email alerts.

Who processes data for us. Cloudflare, Inc. (content delivery, security, the tunnel to our server and email routing) and Resend (Plus Five Five, Inc., sending alert emails). Both may process data outside the UK, including in the United States, under the transfer safeguards in their data processing terms.

Links to other sites. Official sources, travel advice and other links open sites that have their own privacy policies.

Email. If you email [email protected], we use your message and address only to reply and to check the issue you reported (legitimate interests, UK GDPR Article 6(1)(f)). Mail to that address is received through Cloudflare Email Routing.

Your rights under the UK GDPR

You have the right to:

  • access the personal data we hold about you and get a copy of it;
  • rectification: have inaccurate data corrected;
  • erasure: have your data deleted;
  • restriction: ask us to limit how we use your data;
  • objection: object to processing based on our legitimate interests (such as server logs);
  • portability: receive data you gave us with your consent (your alert sign-ups) in a machine-readable format;
  • withdraw consent at any time, for example with the unsubscribe link in every alert email. This does not affect processing before you withdrew.

How to exercise them. Email [email protected] saying which right you want to use. We may ask for information to confirm it is you (for alerts, a message from the address you signed up with is enough). We reply within one month, and there is no charge.

Complaints. If you are unhappy with how we handle your data, please contact us first. You also have the right to complain to the UK Information Commissioner’s Office (ICO), ico.org.uk/make-a-complaint, telephone 0303 123 1113, or, if you live elsewhere, to your local data-protection authority.