Privacy policy
Last updated: 3 November 2026
1. Who we are
ArrivalCardHelp (arrivalcardhelp.com) is operated by Vetrax Group LLC (Delaware LLC, File No. 10812990), 8 The Green, Ste B, Dover, DE 19901, USA, info@vetraxgroup.net ("we", "us"). We are the data controller for the personal data described in this policy. Contact: support@arrivalcardhelp.com.
We help travellers with these travel documents: the Thailand Digital Arrival Card (TDAC), the India e-Visa and India e-Arrival card, the All Indonesia arrival card, the Indonesia e-VOA (electronic visa on arrival) and the Bali tourist levy (together: "travel documents").
2. What data we collect
- Identity and passport data of each traveller: full name, sex, date of birth, nationality, passport number and expiry, occupation, a copy of the passport photo page.
- Visa data (India e-Visa, Indonesia e-VOA only): a recent facial photo and the other information the official application form asks for, for example address, profession, previous travel and the answers to the official declaration questions.
- Trip data: arrival date, flight or transport details, country of departure, address of accommodation in the destination country, length of stay.
- Contact data: email address and, if you give it, phone number.
- Payment data: handled directly by our payment provider. We do not see or store your full card number.
- Technical data: IP address, browser type and basic logs needed to keep the site secure.
If you submit data for other travellers (family members, children, group members), you must confirm, with a separate tick box in the order form, that you are legally allowed to act for them (for children: that you are their parent or legal guardian, or have the guardians' permission) and that you have informed them of this policy.
3. Why we use your data (legal basis)
- To check your details and submit the travel documents you ordered on your behalf, as you asked: performance of a contract (GDPR art. 6(1)(b)).
- To send you your documents, updates and support messages: performance of a contract.
- To keep your data for a future trip, only if you tick the box: consent (art. 6(1)(a)). You can withdraw it at any time.
- To keep invoices and accounting records: legal obligation (art. 6(1)(c)).
- To protect the site against fraud and abuse: legitimate interest (art. 6(1)(f)).
We do not sell your data and we do not use it for advertising profiles.
4. Who receives your data
- The authorities of your destination country, through their official systems, because submitting your application is the service you ordered: the Immigration Bureau of Thailand (TDAC); the Government of India (e-Visa and e-Arrival card); the Directorate General of Immigration of Indonesia (All Indonesia arrival card and e-VOA); the Provincial Government of Bali (Bali levy). Each one receives only the data needed for the document you ordered.
- Our staff who check and submit your form, bound by confidentiality.
- Payment providers: Stripe (card payments) and PayPal, if you choose it. They process your payment data under their own privacy policies. We never see your full card number, and they do not receive your passport data.
- Service providers who work for us: website hosting and email delivery. They may only use the data to provide their service to us.
5. Transfers outside the EU/EEA
We store your data on servers located in the European Union.
Your data is sent to the country you travel to (Thailand, India or Indonesia), because this is required to submit your application on the official government website, and it is viewed by our staff member based in Thailand who checks and submits your form. This transfer is necessary for the contract you asked for (GDPR art. 49(1)(b)). Our staff is bound by confidentiality.
6. How long we keep your data
- Passport and trip data: deleted 30 days after your arrival date, unless you asked us to keep it for a future trip.
- Passport photo page copy and facial photo: deleted right after your document is issued or refused (visas) or right after submission (arrival cards and Bali levy).
- Invoices and payment records: kept as long as tax law requires.
7. Your rights
You can ask us to access, correct or delete your data, to limit or object to its use, and to receive it in a portable format. Write to support@arrivalcardhelp.com; we answer within 30 days. You also have the right to complain to the data protection authority of your country.
8. Security
All pages use encrypted connections (HTTPS). Access to traveller data is limited to the staff who need it. Data is stored encrypted.
9. Cookies
We only use cookies that are needed for the site and the payment to work. We do not use advertising cookies. If this changes, we will ask for your consent first.
10. Changes
We may update this policy. The date at the top shows the latest version.