Privacy Policy

1. Who we are

MyTDAC ("we", "us", "our") is a TDAC application assistance service. We help individuals submit travel TDAC applications on their behalf. Our website is mytdac.vercel.app. For any privacy queries contact us at support@mytdac.co.uk.

2. What data we collect

When you submit a TDAC application through our platform, we collect:

• Full name, date of birth, nationality
• Email address and phone number
• Passport number, expiry date, issuing country
• Travel dates and accommodation details
• Payment information (processed securely by Stripe — we never store card details)
• Passport scan images (used solely to auto-fill your application, not stored after processing)

3. How we use your data

We use your personal data solely to:

• Process and submit your TDAC application
• Communicate with you about your application status
• Send your approved TDAC to your email address
• Comply with legal obligations

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Passport scan data

If you use our passport scan feature, the image is sent to an AI processing service (Anthropic via OpenRouter) solely to extract your passport details and auto-fill your application form. The image is not stored by us or retained by the AI provider beyond the instant of processing. By using this feature you consent to this temporary processing.

5. Data storage

Your application data is stored securely in our database (Supabase) hosted on encrypted servers in the EU. Payment processing is handled by Stripe, which is PCI-DSS compliant. We retain application data for up to 2 years for legal and operational purposes.

6. Your rights

You have the right to access, correct, or delete your personal data at any time. To exercise these rights, email us at support@mytdac.co.uk. We will respond within 30 days.

7. Cookies & advertising

We use cookies on our website for the following purposes:

• Essential cookies — required for the website to function (e.g. session management)
• Analytics cookies — Google Analytics to understand how visitors use our site
• Advertising cookies — Google Ads to measure the performance of our advertising campaigns and show relevant ads to people who have visited our site (remarketing)

We use Google Ads conversion tracking to measure when someone completes an application after clicking one of our ads. Google may use cookies to serve ads based on your prior visits to our website. You can opt out of personalised advertising by visiting Google's Ad Settings.

You can accept or decline non-essential cookies via the cookie banner on our website. Declining will not affect your ability to use the service.

8. Third-party services

We use the following third-party services which may process your data:

• Stripe — payment processing (PCI-DSS compliant)
• Supabase — secure database storage (EU servers)
• Google Ads & Analytics — advertising and analytics
• Vercel — website hosting

Each of these providers has their own privacy policy and data processing terms.

9. Changes to this policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated date.

10. Contact

For any privacy queries contact us at support@mytdac.co.uk.