Privacy Policy

1. Introduction

This Privacy Policy explains how VISAonlineapply LLC ("we," "us," "our") collects, uses, shares, and protects your personal data when you use the South Korea K-ETA application service at www.visaonlineapply.com/korea.

We operate from 30 N Gould St, STE R, Sheridan, WY 82801, USA, 82801, Sheridan, United States.

This Policy is supplemental to our main Privacy Policy at www.visaonlineapply.com/privacy and should be read together with our Korea Terms and Conditions, Korea Cookie Policy, and Korea Refund and Cancellation Policy, all published on this portal.

We process data in line with the EU GDPR, UK GDPR, and (where applicable) the Korean Personal Information Protection Act (PIPA).

2. Data Controller

3. What Personal Data We Collect for Your K-ETA

4. Special Category Data and Criminal Offence Data

The K-ETA form requires answers about criminal records (criminal offence data under Article 10 GDPR) and infectious disease history (special category data — health data under Article 9 GDPR). We process this data only because it is strictly necessary to submit a valid K-ETA application on your behalf to the Korean Ministry of Justice.

5. Why We Use Your Personal Data and the Legal Basis

6. How We Collect Personal Data

• Directly from you when you fill in our online application form;
• Automatically through cookies and similar tracking technologies;
• From third parties, such as payment providers and the Korean K-ETA system (official status updates).

7. Sharing Your Data — Especially with the Korean Government

8. International Data Transfers

Your data is transferred to:

• South Korea — for the K-ETA application (essential and unavoidable);
• United States — where VISAonlineapply LLC is registered and operated;
• Other countries where our service providers operate.

For transfers outside the UK / EEA without an adequacy decision, we rely on Standard Contractual Clauses (SCCs), the UK International Data Transfer Agreement / Addendum, or your explicit consent under Art. 49(1)(a) GDPR for the transfer to South Korea.

9. Data Retention

We cannot delete data already submitted to Korean authorities.

10. Security

• TLS/SSL encryption for data in transit;
• Encrypted storage for sensitive files;
• Access controls and audit logging;
• Reputable cloud infrastructure providers;
• Regular security reviews and updates.

If a breach occurs that risks your rights, we will notify the relevant authority within 72 hours and notify you where required by law.

11. Your Rights

Under applicable data protection laws, you have the right to access, rectify, erase (subject to legal limits), restrict, object, port your data, withdraw consent at any time, and lodge a complaint.

To exercise your rights, email info@visaonlineapply.com. We respond to verified requests within one month.

12. Complaints

Please contact info@visaonlineapply.com first so we can resolve your issue directly. You also have the right to lodge a complaint with your supervisory authority:

• UK: Information Commissioner's Office (ICO) — ico.org.uk
• EU/EEA: Your local national data protection authority
• South Korea: Personal Information Protection Commission (PIPC) under PIPA
• Other countries: Your national privacy regulator

13. Children's Privacy

Where the applicant is a minor, the application must be submitted and authorized by a parent or legal guardian.

14. Cookies

See our dedicated Cookie Policy for the Korea Portal at www.visaonlineapply.com/korea/cookies for full details on our use of tracking technologies.

15. Automated Decision-Making

We do not subject you to fully automated decisions that produce legal or similarly significant effects. Human review is involved at the application-checking stage of our Service.

Note, however, that the destination country's government systems (such as automated risk-screening at immigration authorities) may use automated decision-making processes outside our control. Information about those processes is published by the relevant authority on its official portal.

16. Data Minimisation

We collect only the personal data that is necessary to deliver the Service and meet our legal obligations. Where a destination country's official application form does not require a particular field, we do not collect it. Where consent has been provided for marketing or analytics, you can withdraw it at any time.

17. Data Accuracy and Applicant Responsibility

You are responsible for ensuring that all personal data you submit through the Korea K-ETA application is accurate, complete, and truthful. We rely on the information you provide in order to prepare and submit your application. We are not responsible for delays, refusals, or other adverse decisions resulting from inaccurate, incomplete, or misleading information you submitted.

18. Relationship With Other Policies and Terms

This Privacy Policy forms part of the legal framework governing your use of this service, together with our Korea Terms and Conditions and any other policy published on this portal. In the event of any inconsistency between this Privacy Policy and our Korea Terms and Conditions, the Korea Terms and Conditions shall prevail, unless expressly stated otherwise in this Privacy Policy.

19. Changes

We may update this Policy from time to time. Material changes will be notified via the Website or directly by email.

20. Contact Us