Last Updated: October 1, 2025
This Privacy Policy (the “Policy”) explains how Xiamen Shareko Travel Service Co., Ltd. (“we”, “us”, “our”) collects, uses, stores, and protects your personal information when you use our website www.kvisa.cloud (the “Website”), apply for our visa services, or interact with us (collectively, the “Services”). We are registered and operate in the People’s Republic of China (“PRC”) and comply with the Personal Information Protection Law of the PRC, Cybersecurity Law of the PRC, Data Security Law of the PRC, as well as applicable data protection laws of jurisdictions where our Services are provided (including but not limited to the EU General Data Protection Regulation (“GDPR”), California Consumer Privacy Act (“CCPA/CPRA”), and UK GDPR).
In the event of any conflict between the laws of other jurisdictions and the laws of the PRC, the laws of the PRC shall prevail and govern our processing of your personal information, as set forth in our Terms and Conditions.
1. Who We Are
- Name: Xiamen Shareko Travel Service Co., Ltd.
- Address: Suite 2618, JSB., No. 362, Xiahe Rd., SMD., Xiamen/CHINA
- Contact Information: For privacy-related inquiries, please email us at service@kvisa.cloud or write to our registered address.
- Data Protection Office (DPO): DP office, Contact: office@kvisa.cloud
2. What Personal Information We Collect
We only collect personal information that is necessary for providing visa services and fulfilling our obligations under our Terms and Conditions. The types of personal information we collect include:
3. How We Use Your Personal Information
We use your personal information only for the following lawful purposes, consistent with PRC laws and your service needs:
1) Process Visa Applications: To verify your eligibility, submit documents to embassies/consulates, and notify you of application status (lawful basis: performance of a contract under GDPR/PRC Personal Information Protection Law).
2) Facilitate Transactions: To process payments, coordinate logistics (e.g., returning passports), and issue invoices (lawful basis: legitimate interests under GDPR; necessity for service provision under PRC law).
3) Communicate with You: To send service updates (e.g., visa approval notices), respond to your inquiries, and provide customer support (lawful basis: legitimate interests; consent if for non-essential communications).
4) Ensure Security: To prevent fraud (e.g., verifying passport authenticity), protect the Website from cyberattacks, and comply with anti-money laundering regulations (lawful basis: legal obligation under PRC and international laws).
5) Improve Services: To analyze Website usage (via anonymized data, as detailed in our Cookie Policy) and optimize visa application processes (lawful basis: legitimate interests; no impact on your privacy rights).
We will not use your personal information for marketing purposes without your explicit consent, and you may withdraw consent at any time (see Section 6 below).
4. How We Store & Protect Your Personal Information
4.1 Storage
- Location: All your personal information is stored on servers located within the PRC, in compliance with the Data Security Law of the PRC. We do not transfer your personal information outside the PRC unless:
(a) It is necessary for visa processing (e.g., sharing with embassies/consulates);
(b) We have obtained your explicit consent; and
(c) The transfer complies with PRC law (e.g., via Standard Contractual Clauses approved by the PRC Cyberspace Administration, or security assessment if required).
- Retention Period: We retain your personal information only for as long as necessary:
- Visa application data: 7 years after visa issuance/denial (to comply with PRC tax and legal obligations);
- Transaction data: 5 years after payment completion;
- Anonymized usage data: Retained indefinitely (no identifying information);
- Consent records: Retained for 2 years after you withdraw consent.
4.2 Security Measures
We implement technical and organizational safeguards to protect your personal information from unauthorized access, loss, or disclosure:
- Encryption: Data transmitted via the Website is encrypted using SSL/TLS; stored data is protected with AES-256 encryption.
- Access Control: Only authorized employees (e.g., visa consultants, customer service) have access to your data, with role-based permissions.
- Regular Audits: We conduct annual security audits and update measures to address emerging risks (e.g., phishing, data breaches).
In the event of a data breach that may harm your rights, we will notify you and the PRC regulatory authorities within 72 hours, as required by the PRC Personal Information Protection Law.
5. Third-Party Service Providers
We may share your personal information with third parties only to fulfill visa services, and these parties are required to comply with this Policy and applicable laws. Third parties we work with include:
- Payment Processors: PayPal, Stripe (to process payments; we do not store full credit card details);
- Logistics Providers: DHL, FedEx (to deliver passports/visa documents);
- Verification Partners: Embassies/consulates, identity verification services (to confirm passport authenticity);
- Website Tools: As detailed in our Cookie Policy (e.g., Google reCAPTCHA for security, self-hosted Google Fonts for Website functionality).
We do not sell, rent, or lease your personal information to third parties for marketing purposes. For more details on third-party practices, see our Terms and Conditions Section 6.
6. Your Data Rights
Depending on your jurisdiction, you have the following rights regarding your personal information. To exercise these rights, please contact us at service@kvisa.cloud with your full name, passport number, and registered email address:
|
Right
|
Description
|
How We Respond
|
|
Access
|
Request a copy of the personal information we hold about you
|
Response within 15 working days (PRC law requirement); free of charge for the first request
|
|
Rectification
|
Correct inaccurate or incomplete data (e.g., update your email address)
|
Response within 10 working days; confirmation via email
|
|
Erasure (“Right to be Forgotten”)
|
Request deletion of your data (if no legal obligation to retain it)
|
Response within 15 working days; deletion confirmation provided
|
|
Withdraw Consent
|
Opt out of non-essential data uses (e.g., marketing communications)
|
Immediate effect; no impact on service-related data uses
|
|
Data Portability
|
Request your data in a structured, machine-readable format (e.g., CSV)
|
Response within 20 working days (for GDPR/CCPA applicants)
|
|
Restrict Processing
|
Ask us to stop processing your data (e.g., if you dispute its accuracy)
|
Effective immediately; we will notify you when restrictions are lifted
|
- CCPA-Specific Rights (California Residents): You have the right to opt out of the “sale” of your personal information. We do not sell your data, and you may confirm this by contacting us at service@kvisa.cloud.
- GDPR-Specific Rights (EEA/UK Residents): You may lodge a complaint with your local data protection authority (e.g., ICO in the UK, CNIL in France) if you believe we have violated your rights.
7. Cookies & Similar Technologies
Our use of cookies and similar technologies (e.g., web beacons) is governed by our Cookie Policy. By using the Website, you acknowledge and agree to the terms of that Policy, including:
- We use “necessary cookies” for basic functionality (e.g., maintaining your visa application session) and “analytical cookies” for Website improvement (anonymized data only);
- You may manage or disable non-essential cookies via your browser settings (see our Cookie Policy for instructions);
- We do not use marketing cookies without your explicit consent.
8. Children’s Privacy
We do not provide visa services to individuals under the age of 18 (“Children”) without the consent of a parent or legal guardian. We will not intentionally collect personal information from Children. If we discover we have collected data from a Child without guardian consent, we will delete it immediately.
9. Policy Updates
We may update this Policy to comply with new laws (e.g., amendments to the PRC Personal Information Protection Law) or changes to our services. When we make material changes:
- We will post the updated Policy on the Website (with a new “Last Updated” date);
- We will notify you via email (if you have an account with us) or via a pop-up notice on the Website;
- Changes will take effect 7 days after posting, unless a shorter period is required by law.
Your continued use of the Services after changes take effect constitutes acceptance of the updated Policy. You may view previous versions of this Policy by contacting us at service@kvisa.cloud.
10. Governing Law & Jurisdiction
This Policy is governed by the laws of the PRC, as set forth in our Terms and Conditions Section 26. Any disputes arising from this Policy shall be subject to the exclusive jurisdiction of the courts of Xiamen/CHINA.
If any provision of this Policy is found to be invalid or unenforceable under applicable law, the remaining provisions shall remain in full force and effect.
11. Contact Us
For questions, complaints, or to exercise your data rights, please contact us at:
- Email: service@kvisa.cloud
- Mailing Address: Suite 2618, JSB., No. 362, Xiahe Rd., SMD., Xiamen/CHINA
- Worldline: +86 138 060 88500