Privacy Policy

1. Data Controller

The data controller responsible for your personal information is:

eVisa Services Center LLC
Azerbaijan, Sumqayit City, Mah 42, Apt 15, Man 18.
Registration Number: 2907874011

Contact for Privacy Inquiries:
Email: [email protected]
Phone: +994 50 597 43 00

2. Information We Collect

2.1 Personal Information

When you use our services, we may collect the following categories of personal information:

Identity Information:

• Full name (as it appears on passport)
• Date of birth
• Place of birth
• Gender
• Nationality
• Occupation

Passport & Travel Documents:

• Passport number
• Passport expiry date
• Travel document type
• A scan of the passport data page

Contact Information:

• Email address
• Phone number
• Residential address

Travel Information:

• Intended arrival date
• Purpose of visit
• Accommodation details

Payment Information:

• Transaction records
• Payment confirmation details

Note: card details are entered on our payment provider’s own payment page. We do not receive them, and no card number, expiry date or security code is stored on our servers.

2.2 Technical Information

When you submit an application we record a one-way hash of the IP address and of the browser identifier it was made from. A hash cannot be turned back into the original value; we keep it so that an application can be linked to the session that created it if a question of fraud or misuse arises.

Separately, the analytics service described in section 5 collects usage information about visits to this website.

2.3 Communication Records

We retain records of:

• Email correspondence with our support team
• The emails our system sends you about your application, including the address they were sent to and their content

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

4. How We Use Your Information

We use the collected information for the following purposes:

Service Delivery:

• Process and submit your Azerbaijan e-Visa application
• Communicate application status and updates
• Provide customer support and respond to inquiries
• Send confirmation emails and receipts
• Send you the secure link used to reach your application and download your e-Visa

Payment Processing:

• Take payment through our payment service provider
• Generate transaction records
• Handle refund requests

Security & Fraud Prevention:

• Verify applicant identity
• Detect and prevent fraudulent applications
• Protect against unauthorized access
• Comply with sanctions screening requirements

Website Improvement:

• Analyze website usage patterns
• Improve user experience and website functionality

Legal Compliance:

• Comply with applicable laws and regulations
• Respond to legal requests and court orders
• Defend legal claims

5. Cookies and Tracking Technologies

5.1 What Are Cookies?

Cookies are small text files stored on your device when you visit our website. They help us provide a better user experience and analyze website usage.

5.2 Cookies Used on This Site

Browsing the public pages of this site does not require you to accept any cookie from us. The application cookie is essential to the application itself: if you block it, you will not be able to return to an unfinished application in the same browser.

5.3 Third-Party Services

The following third-party services are used on this website:

• Google Analytics: website traffic and usage analysis
• Cloudflare: security, performance and content delivery

5.4 Managing Cookies

You can control cookies through your browser settings:

• Chrome: Settings → Privacy and Security → Cookies
• Firefox: Options → Privacy & Security → Cookies
• Safari: Preferences → Privacy → Cookies
• Edge: Settings → Privacy → Cookies

6. Data Sharing and Third Parties

6.1 When We Share Your Data

We may share your personal information with:

Government Authorities:

• The Republic of Azerbaijan government for e-Visa processing
• Immigration and border control authorities
• Law enforcement agencies (when legally required)

Service Providers:

• Our payment service provider, which handles the payment itself
• Our hosting provider, on whose servers the website and application data reside
• The email service used to deliver messages about your application

Legal Requirements:

• Court orders and legal proceedings
• Regulatory authorities
• Fraud investigation agencies

6.2 We Do NOT Sell Your Data

evisa.co.az does not sell, rent, or trade your personal information to third parties for marketing purposes.

6.3 Third-Party Service Standards

Third-party service providers acting on our behalf are expected to maintain appropriate security measures, to process data only as instructed, and to comply with applicable data protection laws.

7. International Data Transfers

Your application data is processed in Azerbaijan, and it is submitted to the Azerbaijani authorities as part of the e-Visa process. Some of the service providers named in section 6 operate outside Azerbaijan, so your data may be processed in other countries.

Where data is transferred internationally we take reasonable steps to ensure it remains protected to a comparable standard.

8. Data Retention

Retention is applied automatically by our application system, which runs a retention sweep once a day. How long an application is kept depends on what happened to it:

When an application reaches the end of its retention period the system anonymises it rather than deleting the record. In a single operation it:

• revokes every access link that was issued for the application;
• deletes the uploaded document files, in every version, including any that were replaced;
• removes the personal details held on the application and on each traveller — names, passport numbers, addresses and contact details;
• removes the recipient address and message content stored against the emails we sent;
• removes personal details recorded in the application’s audit history.

What deliberately remains afterwards is the commercial and accounting record: the application reference, the government reference, payment records, amounts, currency, payment attempts and refunds. Once anonymisation has run, that record no longer identifies you.

The two retention periods above are settings that an administrator can change. The periods in force at the time are the ones the system applies.

9. Your Rights (GDPR & Data Protection)

If you are located in the European Economic Area (EEA), United Kingdom, or other jurisdictions with similar data protection laws, you have the following rights:

Right to Access

Request a copy of the personal data we hold about you.

Right to Rectification

Request correction of inaccurate or incomplete personal data.

Right to Erasure (“Right to be Forgotten”)

Request deletion of your personal data, subject to legal retention requirements.

Right to Restriction

Request limitation of how we process your data.

Right to Data Portability

Receive your data in a structured, machine-readable format.

Right to Object

Object to processing based on legitimate interests.

Right to Lodge a Complaint

File a complaint with your local data protection authority.

To exercise your rights, contact us at: [email protected]

We will respond to your request within 30 days.

10. Data Security

We take reasonable measures to protect the information you give us. We would rather describe what we actually do than list guarantees we cannot demonstrate:

• The website is served over HTTPS, so information is encrypted in transit between your browser and us.
• Card details are entered on our payment provider’s own page. We never receive or store them.
• The secure links we email you are stored only as a hash. The link itself cannot be recovered from our records, only replaced. Each link works for one purpose, expires, and is cancelled when a newer one is issued.
• Uploaded documents are restricted by file type and size, are never published on the website, and can only be retrieved through an authorised request.
• Administrative access is limited to named staff accounts with role-based permissions.
• Actions taken on an application are recorded in an audit history.

No system can be guaranteed completely secure, and we do not claim otherwise.

11. Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms:

• We will notify affected individuals without undue delay
• We will inform the relevant supervisory authorities where the law requires it
• We will take immediate steps to contain and mitigate the breach
• We will provide information on steps you can take to protect yourself

12. Applications for Minors

An e-Visa application may be made for a traveller of any age, and an application covering a minor must be submitted by a parent or legal guardian.

Where an application includes a minor, the parent or legal guardian making it provides the minor’s information, consents to it being processed for the purposes described in this policy, and is responsible for its accuracy.

We do not knowingly collect personal information directly from a child, and we do not market to children.

13. Our Emails

The emails we send are about your application: confirmation, payment, requests for missing information, status changes, and the secure link used to reach your e-Visa. These are necessary to provide the service and cannot be unsubscribed from while an application is open.

We do not run marketing mailings and do not add applicants to a marketing list.

14. Links to Third-Party Websites

Our website may contain links to external websites, including the official Azerbaijan eVisa portal. We are not responsible for the privacy practices of these third-party sites. We encourage you to read the privacy policies of any website you visit.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date.

For significant changes, we may notify you via email or through a prominent notice on our website.

Your continued use of evisa.co.az after any changes constitutes acceptance of the updated Privacy Policy.

16. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

eVisa Services Center LLC

Email: [email protected]
Phone: +994 50 597 43 00
Address: Azerbaijan, Sumqayit City, Mah 42, Apt 15, Man 18.

Response Time: We aim to respond to all inquiries within 48 hours.

17. Supervisory Authority

If you are not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with the data protection authority for your country of residence.

For UK Residents:
Information Commissioner’s Office (ICO)
Website: ico.org.uk

For EU Residents:
Contact your national Data Protection Authority

By using evisa.co.az, you acknowledge that you have read and understood this Privacy Policy.

Last updated: 1 September 2026