Privacy Policy

1. Who is responsible for your information

A Group Holdings South LLC, a Florida limited liability company headquartered in Miami, Florida, is the controller of personal information collected through the Service. Where we submit your application to a government, that government becomes an independent controller of the information it receives, under its own laws and privacy rules.

E Passport Online Center is strictly an independent, third-party facilitation service. We are not affiliated with, endorsed by, or acting on behalf of the government of any country, and we do not represent or imitate any government agency or official visa-processing service. Information you give us is shared with a government only because you have asked us to submit an application to it.

If you are in the European Economic Area or the United Kingdom, our representative for data-protection purposes is [EU/UK representative name and address, if appointed].

2. Information we collect

2.1 Information you provide

Identity and contact details: full name, date and place of birth, gender, nationality, email address, phone number, and mailing address.

Travel-document information: passport number, issue and expiry dates, issuing country, previous passport details, national ID numbers, and details of prior visas or travel authorizations.

Application details: the information required by the government form you are applying for, which may include employment, education, address history, travel history, family details, criminal-history declarations, health declarations, and answers to security questions.

Documents and images: passport scans, photographs, signatures, supporting documents (such as invitation letters, itineraries, bank statements, or employment letters), and, where a government requires it, biometric photos.

Payment information: billing name, billing address, and payment card details. Card numbers are collected directly by our payment processor and are never stored on our systems; we retain only the card type, last four digits, and transaction records.

Communications: emails, chat transcripts, call recordings (where permitted and disclosed), and support tickets.

Account details: username, password (stored hashed), and preferences.

2.2 Information we collect automatically

When you use our website we collect device and usage information such as IP address, browser type, operating system, referring pages, pages viewed, time on page, clicks, and approximate location derived from IP address, using cookies and similar technologies (see Section 9).

2.3 Information from third parties

We may receive information from: payment processors (transaction status, fraud signals); identity-verification and fraud-prevention providers; couriers (delivery status); government portals (application status and decisions); and, where you were referred to us, the referring partner.

2.4 Information about other people

If you place an order for someone else, you must have their permission to give us their information and to receive updates about their application. You are responsible for informing them of this Policy.

3. How we use information

We use personal information to:

• Provide the Service — prepare, review, submit, pay for, and monitor applications; arrange courier delivery; and communicate with you about your order.
• Process payments and prevent fraud — verify identity, detect and prevent fraudulent orders, respond to chargebacks, and comply with payment-network rules.
• Provide support — answer your questions, resolve problems, and process refunds.
• Comply with law — meet legal, regulatory, tax, and record-keeping obligations; respond to lawful requests from authorities; and establish, exercise, or defend legal claims.
• Improve and secure the Service — analyze usage, test features, monitor for security threats, and maintain backups.
• Send marketing — with your consent where required, tell you about services we think may interest you. You can opt out at any time.

We do not sell personal information, and we do not use application data (such as passport details or answers on government forms) for advertising or profiling.

4. Legal bases (EEA, UK, and similar jurisdictions)

Where data-protection law requires a legal basis, we rely on:

5. How we share information

We share personal information only as needed to provide the Service and as described here. We do not sell it.

Governments and their agents. We submit your application, documents, and payment to the relevant government, embassy, consulate, or authorized visa-application center. Once submitted, that information is governed by that government's laws and policies, which may differ from ours.

Payment processors and financial partners. Payment providers and banks process your payment, handle refunds and disputes, and screen for fraud. Where we pay government fees on your behalf using our own accounts, our banks and card issuers see the government transaction but not your application contents.

Service providers. We use vetted providers for customer support (including outsourced support agents who act under our instructions and confidentiality obligations), cloud hosting and storage, email and SMS delivery, identity verification, analytics, and website operation. They may access information only to perform services for us.

Couriers. Where physical documents are handled, couriers receive your name, address, phone number, and tracking details.

Professional advisers and authorities. We may disclose information to lawyers, accountants, auditors, insurers, regulators, law enforcement, or courts where required by law, to protect our rights, or to prevent fraud or harm.

Business transfers. If we sell, merge, or reorganize our business, information may be transferred to the successor, who must honor this Policy.

With your direction. We share information with others when you ask us to.

6. International transfers

We operate from the United States, and the governments to which we submit applications may be anywhere in the world. Your information will therefore be transferred to, and processed in, countries that may not provide the same level of data protection as your home country.

Where we transfer information from the EEA, UK, or Switzerland to a service provider outside those regions, we use safeguards recognized under applicable law, such as the European Commission's Standard Contractual Clauses or the UK International Data Transfer Addendum. Transfers to a government for the purpose of your application are necessary for the performance of your contract with us and are made at your request.

7. How long we keep information

You may request earlier deletion (Section 8); we will honor it unless we must keep the information for a legal reason, in which case we will tell you.

8. Your rights and choices

Depending on where you live, you may have the right to:

• Access the personal information we hold about you and receive a copy;
• Correct inaccurate or incomplete information;
• Delete your information, subject to legal retention requirements;
• Restrict or object to certain processing, including processing based on legitimate interests;
• Port your information to another provider in a structured, machine-readable format;
• Withdraw consent at any time, without affecting processing that occurred before withdrawal;
• Opt out of marketing by clicking "unsubscribe" in any marketing email, replying STOP to any marketing SMS, or contacting us;
• Not be discriminated against for exercising your rights;
• Lodge a complaint with a supervisory authority (see Section 12).

To exercise these rights, email privacy@epassportonlinecenter.com or use the request form in your account. We will verify your identity before acting — for a service that handles passport data, this may include asking you to confirm details we already hold or to log in to your account. We respond within 30 days (45 days for California requests), and will tell you if we need longer. You may authorize an agent to make a request on your behalf; we will require proof of that authorization.

Please note: we cannot recall or delete information that has already been submitted to a government. Requests concerning that information must be directed to the relevant government.

9. Cookies and tracking

We use cookies and similar technologies for:

• Essential functions — keeping you logged in, remembering your cart, securing checkout, and preventing fraud. These cannot be switched off.
• Analytics — understanding how the site is used so we can improve it.
• Marketing — measuring the effectiveness of our advertising and, where you consent, showing you relevant ads on other sites.

Where required by law, we ask for your consent to non-essential cookies through a banner when you first visit, and you can change your choices at any time via the "Cookie settings" link in our footer. You can also control cookies through your browser settings. We honor Global Privacy Control signals where legally required.

10. Security

We protect personal information using administrative, technical, and physical safeguards appropriate to its sensitivity, including encryption of data in transit (TLS) and at rest, access controls and least-privilege permissions, logging and monitoring, staff confidentiality obligations and training, vendor security reviews, and regular backups. Payment card data is handled by PCI DSS–compliant processors and never stored on our systems.

No system is perfectly secure. If we become aware of a breach affecting your personal information, we will notify you and the relevant authorities as required by law. You can help by using a strong, unique password and by sending documents only through the secure upload in your account rather than by email.

11. Children

The Service is intended for adults. We do not knowingly collect information directly from children under 16 (or the applicable age in your jurisdiction). We do process information about minors when a parent or legal guardian places an order for a child's passport or visa; that information is handled with the same care as all application data and used only for that application. If you believe a child has provided us information without appropriate consent, contact us and we will delete it.

12. Region-specific disclosures

12.1 European Economic Area, United Kingdom, and Switzerland

You have the rights described in Section 8 under the GDPR, UK GDPR, and Swiss FADP. You may lodge a complaint with your local supervisory authority; in the UK this is the Information Commissioner's Office (ico.org.uk). Special-category data (such as health or criminal-history declarations required by a government form, or biometric photographs) is processed only with your explicit consent or where necessary for legal claims, and only to complete the application you have requested.

12.2 California (CCPA/CPRA)

In the last 12 months we have collected the categories of personal information described in Section 2, used them for the purposes in Section 3, and disclosed them for business purposes to the categories of recipients in Section 5. We have not sold personal information and do not share it for cross-context behavioral advertising, other than through advertising cookies you can opt out of under Section 9. We do not use or disclose sensitive personal information (such as passport numbers) for purposes other than providing the Service, which is permitted under the CPRA without a "limit use" right. California residents may exercise the rights in Section 8, including the right to know, delete, correct, and opt out, and may designate an authorized agent. We do not discriminate against you for exercising your rights.

12.3 Other U.S. states

Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states with comprehensive privacy laws have similar rights to access, correct, delete, port, and opt out of targeted advertising and profiling, and may appeal a denied request by replying to our response.

12.4 Canada

We comply with PIPEDA and applicable provincial laws. You may withdraw consent subject to legal and contractual restrictions, and may complain to the Office of the Privacy Commissioner of Canada.

12.5 Australia

We comply with the Australian Privacy Principles. Information may be disclosed overseas as described in Section 6. You may complain to us and, if unsatisfied, to the Office of the Australian Information Commissioner.

13. Text messaging (SMS)

By providing your mobile number at checkout you agree to receive transactional SMS messages about your order (confirmations, status updates, document requests, delivery notifications). Message frequency varies by order. Message and data rates may apply. Reply STOP to opt out and HELP for help. Opting out may limit our ability to update you on time-sensitive matters; we will then use email. We do not share your mobile number with third parties for their own marketing. Marketing texts are sent only with your separate consent.

14. Do Not Track and Global Privacy Control

Our site does not respond to browser "Do Not Track" signals, for which there is no common standard. We honor Global Privacy Control (GPC) signals as an opt-out of sale or sharing where required by law.

15. Changes to this Policy

We may update this Policy from time to time. We will post the updated version with a new "Last updated" date and, for material changes, notify you by email or a prominent notice on the site before they take effect. Your continued use after the effective date constitutes acceptance.

16. Contact us

A Group Holdings South LLC d/b/a E Passport Online Center
Attn: Privacy
2500 Biscayne Blvd
Miami, FL 33137, United States

privacy@epassportonlinecenter.com
+1 385-567-1008

EU/UK representative (if appointed): [Name, address, email]