Privacy

Effective date: 2026-06-08

What we collect

• Name, date of birth, nationality, passport number (optional), national driving licence number + categories, country of issue, contact phone (optional).
• Selfie photo and (if uploaded) a photo of your national licence.
• Email address for order delivery + receipts.
• Hashed (not raw) IP + user-agent on verification lookups for abuse monitoring.

Lawful basis (GDPR Art. 6)

We process your data on two bases: (a) performance of a contract — your name, date of birth, licence details and photo are required to produce the document you purchased; and (b) your explicit consent, given at checkout, for processing your uploaded photo. You may withdraw consent at any time (see "Your rights"), though we cannot un-issue a permit already delivered.

How we store it

Customer data is stored in Cloudflare D1 (application data) and Cloudflare R2 (photos + rendered PDFs) on Cloudflare's global edge. Payment card details are handled entirely by Stripe and never touch our servers.

Data retention

Uploaded photos and licence images are deleted within 90 days of permit expiry. Order records (name, email, amount, permit id) are retained for 6 years to meet tax and accounting obligations, then deleted. Hashed verification-lookup logs are retained 12 months for abuse monitoring.

International transfers

Cloudflare and Stripe are our sub-processors. Data may be processed outside your country of residence (including the United States) under Standard Contractual Clauses and the relevant data-transfer frameworks each provider maintains.

Cookies

We use only essential cookies required for the checkout to function (Stripe). We do not set advertising or third-party tracking cookies without your consent. Analytics, where enabled, run in a consent-gated, IP-anonymised mode.

Public verification page

The /verify page deliberately shows minimal information — first-and-last initials only, no full name, photo, date of birth, or licence number — so border officers and rental agencies can confirm a permit is genuine without exposing your personal data.

Your rights

You have the right to access, correct, delete, or port your data, and to object to or restrict its processing. Email support@easyinternationalpermit.com with any request; we respond within 30 days. You may also lodge a complaint with your local data-protection authority.