Privacy Policy

Privacy Policy

Please read the following statements carefully, as they address the rules of engagement between us.

Your privacy is critically important to us. We want to assure you we respect your data protection rights in compliance with the latest EU General Data Protection Regulation (GDPR) requirements as of 25th May 2018.

This Website is owned and operated by Sri Lanka Visa. The following terms and conditions govern your use of this site and all other Sri Lanka Visa products, some of which (but not all) are listed herein.

For the purpose of this agreement and for ease of use, any reference to “the Company” shall be a reference to Sri Lanka Visa and any reference to “the Website” shall be a reference to:, its respective products, and its employees and agents.

By accessing this Website and any of the Company’s properties, you are acknowledging and accepting the conditions of this Privacy Policy for all of the Company’s properties.

These terms of use are subject to change at any time at the discretion of the Company without notice. Your use of any of the Company’s Website after any changes are implemented constitutes your acceptance of the changes. As a result, we encourage you to consult the terms and conditions herein frequently.


We have a few fundamental principles:

  • We do not actively collect sensitive information about you, including information about your health, racial or ethnic origin, political opinions, religious beliefs, sexual orientation or criminal history. We will take steps to appropriately protect any sensitive information we do receive.
  • We don’t share your personal information with anyone except to comply with the law, develop our products, or protect our rights.
  • We don’t store personal information on our servers unless required for the on-going operation and delivery of our services to you.
  • We store personal information only for as long as we have a reason to keep it.
  • In our email communications we give you explicit options to not receive individual messages you’re not interested in. We also give you the option to unsubscribe from email communications with us at any time from the unsubscribe link at the bottom of our emails.


When and how we collect data

From the first moment you interact with us, we are collecting data. Sometimes you provide us with data, sometimes data about you is collected automatically.

Data is collected about you when:
> you browse any page of our website
> you place an order with us

You provide us with data when:
> you place an order with us
> you send us an email


Types of data we collect

Contact details

Your name, address, telephone number, email address…

Financial information

Your bank account number, credit/debit card details…

Data that identifies you

Your IP address, login information, browser type and version, time zone setting, browser plug-in types, geolocation information about where you might be, operating system and version…

Data on how you use our website

Your URL clickstreams (the path you take through our site), products/services viewed, page response times, download errors, how long you stay on our pages, what you do on those pages, how often, and other actions…

What about really sensitive data?

We don’t collect any “sensitive data” about you (like racial or ethnic origin, political opinions, religious/philosophical beliefs, trade union membership, genetic data, biometric data, health data, data about your sexual life or orientation, and offences or alleged offences) except when we have your specific consent, or when we have to to comply with the law.

What about children’s data? is a service directed to and intended for use only by those who are 18 years of age or over. We do not target at children, and we do not knowingly collect any personal data from any person under 16 years of age, unless when submitted by a parent or caretaker.

If you have reason to believe we may have unrightfully received personal information from a child under the age of 16, please immediately submit details through our Support page.


How and why we use your data

Data protection law means that we can only use your data for certain reasons and where we have a legal basis to do so. Here are the reasons for which we process your data:

Keeping running

Managing and processing your orders, remembering your settings, processing payments, hosting and back-end infrastructure.

Legal basis:    legitimate interests


Testing features, interacting with feedback platforms and questionnaires, managing landing pages, traffic optimization and data analysis and research.

Legal basis for this data usage:   legitimate interests

Customer support

Notifying you of any changes to our service, solving issues via phone or email including any bug fixing.

Legal basis for this data usage: legitimate interests


Here is what this “legal basis” means:

Legitimate interests

Processing your data is necessary for our legitimate interests or the legitimate interests of a third party, provided those interests are not outweighed by your rights and interests. These legitimate interests are:

  • processing and delivering the order that you have placed with us
  • gaining insights from your behaviour on our website
  • delivering, developing and improving the service
  • enabling us to enhance, customise or modify our services and communications
  • determining whether marketing campaigns are effective
  • enhancing data security

In each case, these legitimate interests are only valid if they are not outweighed by your rights.


How secure is the data we collect?

We have physical, electronic, and managerial procedures to safeguard and secure the information we collect. But please remember:

  • You provide personal data at your own risk: unfortunately, no data transmission is guaranteed to be 100% secure
  • If you believe your privacy has been breached, please contact us immediately on


Where do we store the data?

The personal data we collect is processed and stored on our servers in the Netherlands and in any data processing facilities operated by the third parties identified below.

By submitting your personal data, you agree to this transfer, storing or processing by us. If we transfer or store your information outside the EEA in this way, we will take steps to ensure that your privacy rights continue to be protected as outlined in this Privacy Policy.


How long do we store your data?

We will archive and stop actively using any personal identifiable information about you as soon as your order with has been completed. We will delete your personal data from our archives no later than 6 years from the last time you used or ordered a visa.


Third parties who process your data

Businesses often use third parties to help them host their application, communicate with customers, power their emails etc. We partner with third parties who we believe are the best in their field at what they do.

When we do this, sometimes it is necessary for us to share your data with them in order to get these services to work well. Your data is shared only when strictly necessary and according to the safeguards and good practices detailed in this Privacy Policy.

Here are the details of our main third-party service providers, and what data they collect or we share with them, where they store the data and why they need it:



Service provider Data collected or shared Purpose Place of processing
VPSget > Contact details
> Data from your ETA visa orders
> Data that identifies you
This is a web hosting provider:
we use it to store contracts and
other data you generate by using the service securely in the cloud.
EU (the Netherlands)



Service provider Data collected or shared Purpose Place of processing
Google Analytics > Contact details
> How you use
> Data that identifies you
> Cookies
Google Analytics is a web
analytics service: we use it
to track your use of the website (e.g. time spent on a page,…)



Service provider Data collected or shared Purpose Place of processing
VPSget > Contact details We use this service for sending, storing and tracking emails. EU (The Netherlands)
Gmail > Contact details We use this service for sending, storing and tracking emails. US & EU
Mailchimp > Contact details We use this service for sending, storing and tracking emails. US



Service provider Data collected or shared Purpose Place of processing
Easy Digital Downloads > Contact details
> Financial information
> Cookies
This service processes payments for us. US
Heidelpay > Contact details
> Financial information
> Cookies
This service processes payments for us. EU (Germany)
PayPal > Contact details
> Financial information
> Cookies
This service processes payments for us. US




We use cookies. Unless you adjust your browser settings to refuse cookies, we (and these third parties) will issue cookies when you interact with These may be ‘session’ cookies, meaning they delete themselves when you leave, or ‘persistent’ cookies which do not delete themselves and help us recognise you when you return so we can provide a tailored service.


How can I block cookies?

You can block cookies by activating a setting on your browser allowing you to refuse the setting of cookies. You can also delete cookies through your browser settings. If you use your browser settings to disable, reject, or block cookies (including essential cookies), certain parts of our website will not function fully. In some cases, our website may not be accessible at all. Please note that where third parties use cookies we have no control over how those third parties use those cookies.


Which specific cookies do we use?

Service provider Data collected  or shared Purpose
Google, Inc. _ga Google Analytics uses cookies allows us to see information on the activities of visitors to our website and users of our service, including page views, source and time spent on The information is depersonalized and is displayed as numbers, meaning it cannot be tracked back to individuals. This will help to protect your privacy.

To opt out of being tracked by Google Analytics across all websites (using a browser add-on) click here.

If you’re a mobile user and cannot use the browser add-on, you can click here to opt-out of Google Analytics for this website.


Your privacy choices and rights

Your choices

You can choose not to provide us with personal data

If you choose to do this, you can continue to use the website and browse its pages, but  without personal data we will not be able to process a visa for you.

You can turn off cookies in your browser by changing its settings

You can block cookies by activating a setting on your browser allowing you to refuse cookies. You can also delete cookies through your browser settings. If you turn off cookies, you can continue to use the website and browse its pages, but will not work effectively.


You can ask us not to use your data for marketing

We will inform you (before collecting your data) if we intend to use your data for marketing and if third parties are involved. You may choose to stop receiving our newsletter or marketing emails at any time, by following the unsubscribe instructions included in any of our emails, by updating your communications preferences via our email service provider, or you can contact us at


Your rights

You can exercise your rights by sending us an email at


You have the right to access information we hold about you

This includes the right to ask us supplementary information about:

  • the categories of data we’re processing
  • the purposes of data processing
  • the categories of third parties to whom the data may be disclosed
  • how long the data will be stored (or the criteria used to determine that period)
  • your other rights regarding our use of your data

We will provide you with the information within one month of your request, unless doing so would adversely affect the rights and freedoms of other (e.g. another person’s confidentiality or intellectual property rights). We’ll tell you if we can’t meet your request for that reason.


You have the right to make us correct any inaccurate personal data about you


You can object to us using your data for profiling you or making automated decisions about you

We may use your data to determine whether we should let you know information that might be relevant to you (for example, tailoring emails to you based on your behaviour). Otherwise, the only circumstances in which we will do this is to provide the service to you.


You have the right to port your data to another service

We will give you a copy of your data in CSV or JSON so that you can provide it to another service. If you ask us and it is technically possible, we will directly transfer the data to the other service for you. We will not do so to the extent that this involves disclosing data about any other individual.


You have the right to be ‘forgotten’ by us

You can do this by asking us to erase any personal data we hold about you, if it is no longer necessary for us to hold the data for purposes of your use of


You have the right to lodge a complaint regarding our use of your data

Please tell us first, so we have a chance to address your concerns. If we fail in this, you can address any complaint to the the French data protection authority. Please read here:


You have rights too!

If you have ordered a visa through and you wish to exercise your rights, please contact us at



If you provide us with a testimonial, you give us your consent for the use of your name and the Service to be displayed on our Website, or in our other marketing materials, together with the content of the testimonial that you provide.


About this privacy policy

The entire contents of this Privacy Policy should be read in conjunction with our Terms of Services page.

If you do not understand any of the contents in this Privacy Policy, or if you have any questions or comments, we invite you to contact us via our Support page.


This Privacy Policy was last updated May 2018.


Visa für Sri Lanka