Privacy Policy

Effective date: 18 August 2026

1. Who we are

TASHIRA E-Visa & Tourism LLC-FZ, Meydan Free Zone, Dubai, UAE, is a private visa/application service provider. Privacy requests: admin@tashiraev.com.

2. Data we process

We may process names and contact details; passport information and copies; photographs; residency and supporting documents; travel, visa and application information; applicant relationships; operational status/history; communications; security/audit data; and payment, invoice and transaction metadata.

3. Payment-card data

Stripe processes payment-card information. TASHIRA does not store full card numbers or CVC values. We may retain limited payment metadata such as status, amount, currency and Stripe transaction references.

4. Purposes

We use data to create, review, process, recover and track applications; communicate; make authorized submissions; process and evidence payments; issue invoices; prevent abuse; secure the Service; and meet accounting, dispute and legal obligations.

5. Sharing and providers

Data may be shared as reasonably necessary with relevant authorities and suppliers; Stripe; Resend; hosting, infrastructure and technical providers; professional advisers; and parties required by law. Documents are currently stored on access-controlled server filesystem infrastructure. Providers receive only data needed for their function.

6. Security

We use access controls, authorization checks, audit records and appropriate technical and organizational safeguards. No online system can be guaranteed completely secure.

7. Retention

• Sensitive passport, photograph, residency and supporting-document files: 90 days after closure/completion, then eligible for secure deletion.
• Operational application records: 2 years, with minimization where practical.
• Financial, payment, invoice and accounting records: 7 years; this does not extend passport/photo file retention to seven years.
• Security and audit logs: 2 years.

A legal hold, active dispute, chargeback or lawful requirement may extend retention only for related data. Normal deletion resumes when the hold ends.

8. Correction and deletion

You may request access, correction, replacement or deletion where applicable. After payment, audit/version history may be preserved; after processing starts, controlled replacement requests apply. Deletion may be limited by legal, accounting, tax, dispute, chargeback, claim or legal-hold obligations. Changes after authority submission cannot be guaranteed.

9. Cookies and future analytics

Essential cookies support security, sessions, language and application functions. Analytics or advertising technologies, including Google services, may be used only when enabled and subject to applicable notice and consent requirements. They are not activated by this policy.

10. Contact

Email admin@tashiraev.com for privacy, correction or deletion requests. We may verify identity before acting.