Last updated
Information we process
KurdVisa may process contact details, passport and identity information, travel information, uploaded supporting documents, application history, customer communications, appointment details and payment-status information needed to provide requested services.
Why we process information
Information is used to provide visa application and travel document services, communicate with customers, manage cases, protect the website, comply with legal obligations and maintain service records.
Document and account security
Uploaded documents are not intended for direct public access. KurdVisa uses authenticated download routes, server-side validation, access logging, revocable sessions and optional two-factor authentication.
Security logs
Limited sign-in and security-event records may be kept to prevent abuse, investigate suspicious access and protect accounts. Passwords and authentication secrets are not written to these logs.
Retention and customer rights
Retention periods should reflect business, contractual and legal requirements. Where applicable, customers may request access, correction, restriction or deletion subject to legal and accounting obligations. Signed-in customers can use the Privacy Centre.
Consent-based first-party analytics events are automatically deleted after 180 days. This setting does not override longer retention that may be required for separate legal, accounting or case records.
Privacy contact
Privacy requests can be submitted through the signed-in Privacy Centre or by email.
