Privacy policy

Current version: August 13, 2026

Controller

Leadeator LLC, 8206 Louisiana Blvd NE, Ste B #10035, Albuquerque, New Mexico 87113, United States, telephone +1 (505) 796-6000, email contacto@etravelapplication.com. Leadeator LLC determines the purposes and means of processing through eTravel Application.

Scope and principles

This policy covers visitors, applicants, customers and companions whose details are supplied. Where the GDPR applies, data is processed lawfully, fairly and transparently, with purpose limitation, minimisation, accuracy, storage limitation, integrity and confidentiality.

Data we process

• Identity and contact information, including name, email, telephone and order details.
• Passport and travel data, including nationality, birth details, address, flights, accommodation, companions, migration responses and issued PDF or QR copy.
• Service choices, communications, changes, support, consent records and complaints.
• Payment amount, currency, status and transaction reference. Full card credentials should be handled by the payment provider and not stored by us.
• Technical data such as IP address, browser, device, security logs and cookie preferences.

Purposes and legal bases

• Preparing and delivering the service: pre-contractual steps and contract performance.
• Submitting information to the requested official portal: contract performance and the customer’s instruction.
• Support, changes and recovery: contract performance and legitimate interests in documenting assistance.
• Accounting, tax and claims: legal obligation and legitimate interests.
• Security and fraud prevention: legitimate interests and legal obligations where applicable.
• Optional analytics or advertising: consent, withdrawable through Cookie settings.

Required information

Mandatory fields are needed to perform the engagement. Missing or inconsistent information may cause the service to be paused or declined. Travel documents will not be reused for incompatible purposes.

Companions and children

A person providing another traveller’s data confirms sufficient authority and that the traveller has been informed. A child’s data must be supplied by a legal guardian or an expressly authorised person.

Recipients

Access may be granted only as needed to hosting, email, support, form, security, backup and payment providers; confidential advisers; and authorities or public portals where required for the service or by law. Providers must be restricted by contract, purpose and need-to-know access.

International transfers

Leadeator LLC is established in the United States and providers may operate outside the EEA. Where the GDPR applies, transfers will rely on an adequacy decision, Standard Contractual Clauses or another valid safeguard, with supplementary measures where needed. You may request information about the applicable mechanism.

Retention

Incomplete applications are deleted or anonymised when no longer needed. Completed files and copies are retained for the storage period shown when ordering, then only as required for claims or legal duties. Accounting records follow statutory periods. Data is securely deleted, anonymised or restricted when each period ends.

Your rights

You may request access, correction, deletion, objection, restriction, portability and consent withdrawal through contacto@etravelapplication.com. We may verify identity using information supplied with the order. Where the GDPR applies, you may complain to the supervisory authority of your habitual residence, workplace or the place of the alleged infringement.

Security and incidents

Risk-based measures include access controls, least privilege, encrypted communications, activity logging, protected backups, system updates, confidentiality and controlled deletion. No system is infallible; report suspected exposure immediately.

Automated decisions

We do not make decisions producing legal effects based solely on automated processing. Immigration decisions belong exclusively to the competent authorities.

Representation and changes

If applicable law requires an EU representative or data protection officer, their details will be published here. Material changes will be communicated where required.