Privacy policy · EntryPass

1. What we collect

To prepare and, where authorized, file your entry document, we collect: contact details (name, email), passport information (name, date of birth, nationality, passport number and expiry), an optional photo of your passport if you choose to upload one, travel details (destination, dates, flight number, accommodation address), and payment information (processed by our payment provider, PayPal — we do not store full card numbers).

2. How we protect it

Passport numbers are encrypted at rest. Uploaded passport photos are stored with private access only — they are not publicly reachable by URL and can only be viewed by authenticated staff processing your order. Access to your data is limited to personnel who need it to review or file your order. Data is transmitted over encrypted (TLS) connections.

3. How we use it, and our legal basis

We use your information solely to prepare, review, and (where you have authorized us to) submit your travel document, to communicate with you about your order, and to comply with legal and payment-processing obligations. We do not sell your personal information or use it for advertising. Where GDPR/UK GDPR applies, our legal basis is contract performance for order processing, your explicit consent for the submission authorization, and legitimate interest or legal obligation for fraud prevention and tax/accounting records.

4. International data transfer

Because our travelers and infrastructure providers are located in different countries, your information may be processed outside your home country, including in the country where EntryPass or its service providers operate. We take reasonable steps to protect information transferred this way, consistent with this policy.

5. Retention

Uploaded passport photos are deleted automatically as soon as your order is marked complete or refunded — we don't keep a copy of your passport photo after we no longer need it. Other order and passport information is retained for up to 5 years after your trip, in line with Korean e-commerce recordkeeping requirements, after which it is deleted or anonymized, unless you request earlier deletion and we are not legally required to retain it.

6. Your rights

Depending on where you live, you may have the right to access, correct, or delete your personal information, or to object to its processing. Contact us at tilguks@gmail.com to exercise these rights.

7. Children's data

Our service is not directed at children, but a parent or guardian may submit an order that includes travel document information for a minor traveling with them. By doing so, the adult placing the order confirms they are that minor's parent or legal guardian and are providing the minor's information with authority to do so.

8. Third parties

We share information with service providers strictly as needed to deliver the service: our payment processor (PayPal), email provider (Resend), file storage provider (Vercel Blob), hosting/infrastructure providers, and — with your authorization — the relevant government portal for the destination you're traveling to.

9. Cookies

We use only the cookies necessary to keep you signed in to an order session and to protect staff/admin access to the site. We do not use advertising or cross-site tracking cookies.

10. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by an updated "Last updated" date above.