1. Introduction
Welcome to VisaPal.
VisaPal is an independent online travel document assistance service. We help travellers prepare and submit Thailand Digital Arrival Card (TDAC) applications. We collect the information you provide, prepare your application, submit it when eligible, and deliver the completed TDAC to you by email.
VisaPal is not operated by, affiliated with, endorsed by, or acting on behalf of the Government of Thailand or Thailand Immigration.
This Privacy Policy explains how we collect, use, protect and store your personal information when you use our website and services.
By using VisaPal, you acknowledge that you have read this Privacy Policy.
2. Who We Are
VisaPal is operated by a sole trader based in the United Kingdom.
For any questions about this Privacy Policy or how your personal information is handled, please contact:
VisaPal is the data controller for the personal information described in this Privacy Policy.
3. The Service We Provide
VisaPal provides a paid travel document assistance service.
Our service includes:
- checking whether your arrival date is eligible for submission
- securely collecting the information required for your TDAC application
- securely storing your information while your application is being processed
- submitting your TDAC application when eligible
- emailing your completed TDAC to you
- providing customer support relating to your application
VisaPal does not issue visas, make immigration decisions or guarantee entry into Thailand.
4. Information We Collect
Identity information
- full name
- date of birth
- nationality
- gender
- passport number
Contact information
- email address
- telephone number
- country of residence
- city or region of residence
Travel information
- arrival date
- departure date
- country of departure
- purpose of travel
- transport details
- accommodation details within Thailand
Health declaration information
Where required for the TDAC application, we collect the countries or territories you have visited during the fourteen days before arrival.
We do not currently collect vaccination certificates or medical records.
Payment information
Payments are processed securely through Stripe.
VisaPal does not receive or store your full payment card details.
We receive limited payment information from Stripe, including:
- payment status
- payment identifier
- payment date
- payment amount
Communications
If you contact us, we may keep copies of emails and other correspondence so we can respond to your enquiry and improve our service.
5. Special Category Data
Some information required for a TDAC application may be considered more sensitive than ordinary personal information.
VisaPal only processes this information where necessary to provide the service you have requested and to prepare your TDAC application.
Sensitive application information is encrypted before it is stored.
6. How We Use Your Information
We use your information to:
- provide the VisaPal service
- prepare your TDAC application
- submit your application when eligible
- deliver your completed TDAC
- process payments
- verify completed payments
- communicate with you about your application
- provide customer support
- maintain the security of our systems
- detect fraud or misuse of our services
- comply with legal and regulatory obligations
We do not sell your personal information.
7. Lawful Basis for Processing
Depending on the circumstances, we rely on one or more lawful bases under UK GDPR.
Performance of a contract
To provide the VisaPal service that you request.
Legal obligation
Where we must comply with legal, accounting or regulatory obligations.
Legitimate interests
To protect our systems, prevent fraud, improve our services and maintain appropriate business records, provided those interests do not override your rights and freedoms.
9. International Transfers
Some of our service providers may process personal information outside the United Kingdom.
Where personal information is transferred internationally, VisaPal takes reasonable steps to ensure appropriate safeguards are in place in accordance with applicable UK data protection law.
10. How We Protect Your Information
VisaPal uses technical and organisational security measures including:
- encryption of sensitive application information before storage
- secure HTTPS connections
- restricted administrator access
- multi-factor authentication for administrative accounts
- secure payment processing through Stripe
- limited access to personal information
Although no internet-based service can guarantee absolute security, VisaPal takes reasonable steps to protect your information.
11. How Long We Keep Your Information
VisaPal is designed to minimise the amount of personal information retained.
Sensitive application information
Sensitive TDAC application information is retained only for as long as necessary to provide the VisaPal service.
Following completion of your application, sensitive application information is scheduled for permanent deletion seven days after VisaPal's submission.
This includes encrypted application information and completed TDAC files stored by VisaPal.
Operational records
VisaPal retains limited operational information where necessary for legitimate business purposes, accounting, fraud prevention and legal compliance.
This may include:
- VisaPal reference numbers
- payment status
- payment identifiers
- booking status
- service level
- timestamps
- limited operational records relating to your order
These records do not include the encrypted TDAC application once it has been deleted.
If you request deletion before the automatic deletion date, VisaPal will consider your request in accordance with applicable law and any legal obligations requiring retention.
12. Emails
VisaPal currently sends service-related emails only, including:
- payment confirmations
- booking updates
- completed TDAC delivery
- customer support responses
VisaPal does not currently send marketing emails.
If marketing communications are introduced in the future, this Privacy Policy will be updated before those communications begin and, where required by law, consent will be obtained.
14. Your Rights
Subject to applicable law, you may have the right to:
- request access to your personal information
- request correction of inaccurate information
- request deletion of your personal information
- request restriction of processing
- object to certain processing
- request a portable copy of information you have provided where applicable
- withdraw consent where processing is based on consent
To exercise your rights, contact:
If you are not satisfied with VisaPal's response, you may complain to the UK Information Commissioner's Office (ICO).
15. Children's Privacy
VisaPal is intended for adults and travellers legally able to submit travel documentation.
VisaPal does not knowingly provide services directly to children without the involvement of a parent, guardian or another legally responsible person.
16. Changes to This Privacy Policy
VisaPal may update this Privacy Policy from time to time to reflect changes to the service, legal requirements or data processing practices.
Any significant changes will be published on this page together with an updated revision date.
17. Contact Us
If you have any questions about this Privacy Policy or how VisaPal processes your personal information, contact: