Privacy Policy

Welcome to the website of eTourist, operated by Ticket Me OOD ("eTourist," "we," "us," or "our"). This Privacy Policy (the "Policy") describes how we collect, use, and disclose the information we collect from our websites, our travel documentation services, and other online services (collectively with the website, the "Services"), as well as information we collect offline.

Before using the Services or otherwise providing us with information, please carefully review this Policy. By accessing or using any part of the Services, or otherwise providing us with information, you acknowledge the applicability of this Policy.

Information We Collect

We may collect information in different ways:

• When you provide information directly to us.
• When we passively collect information from you (such as through a browser or device).
• From third parties.

Information You Provide Directly to Us

We may collect information from you when you provide such information directly to us, including in the following situations:

• When you contact us with inquiries.
• When you respond to one of our surveys.
• When you register for access to our Services, or use or purchase certain of our Services (e.g., applying for travel documentation).
• When you otherwise communicate with us, including through our support channels (email, online chat, or phone).
• When you request certain features (e.g., newsletters, updates).
• When you otherwise provide us with information.

The type of information requested may depend on how you use our Services. For example, the type of travel document you request and local governmental requirements may determine which details we collect.

Information you provide may include (but is not limited to):

• Name
• Email
• Phone number
• Travel details (arrival date, port of arrival, reason for travel)
• Address
• Date of birth
• City and country of birth
• Citizenship
• Gender
• Passport information (passport number, issue/expiration date, photo, place of issue)
• Social security number (if required by local authorities)
• Religion (if required by local authorities)
• Family information (e.g., names of family members)
• Professional details (occupation, employer name)
• Financial information (payment-related information you provide to us and/or our payment processors)

Information That Is Passively or Automatically Collected

Device/Usage Information

We may automatically collect certain information about the devices you use to access the Services (including computers, mobile devices, or tablets). This may include:

• IP addresses
• General location information (e.g., inferred from an IP address)
• Unique device identifiers (e.g., IMEI, TCP/IP address)
• Browser types and language
• Operating system
• Mobile device carrier information
• The state or country from which you accessed the Services

We may also collect information about how you interact with the Services, including:

• Referring and exit web pages and URLs
• Platform type
• Number of clicks
• Domain names
• Landing pages
• Pages and content viewed, and the order of those pages
• Statistical information about usage
• Time spent on particular pages
• Date and time you used the Services
• Frequency of use
• Error logs

For example, we and/or our vendors may collect mouse movements and scrolling behavior on our website, but we do not collect keystroke data.

Cookies and Other Electronic Technologies

We may collect data through technologies such as server logs, cookies, and tracking pixels.

• Cookies are small text files placed on your computer when you visit a site. They allow us to:
  • Recognize your device.
  • Store your preferences.
  • Understand which pages you visit.
  • Enhance your experience with tailored content.
  • Perform analytics.
  • Support security and administrative functions.
• Tracking pixels (web beacons/clear GIFs) are tiny electronic tags that provide information such as ad impressions or clicks, measure the popularity of Services and associated advertising, and access user cookies.

As new technologies emerge, we may use additional tools to collect data.

Your choices: You can change your browser settings to block or manage cookies. However, blocking cookies may limit your access to certain features of our Services.

Information Collected from Unaffiliated Parties

We may obtain information about you from unaffiliated third parties, such as social media companies or other websites. For example:

• You may access the Services through a third-party account (e.g., Google, Facebook).
• You may "like" or interact with us on social media pages.

If you do so, we may gain access to information in your social media profile, including:

• Name
• Profile picture
• Gender
• Networks
• User IDs
• List of friends
• Location
• Date of birth
• Email address
• Photos, videos, posts, likes, and followers

These third-party sites have their own privacy policies, which you should review.

We may also combine the information collected from these third parties with data we collect directly from you, and use it in accordance with this Policy.

Our Use of Your Personal Data and Other Information We Collect

We may use the information we collect from and about you for the following purposes:

• To provide the Services.
• To respond to your questions and inquiries.
• To monitor your use of the Services.
• To request your feedback.
• To communicate with you about transactions initiated with us.
• To improve the Services or develop new products and features.
• To contact you with advertising, surveys, or other information that may be of interest to you.
• To personalize the Services.
• To enforce the legal terms that govern your use of the Services.
• To protect eTourist, our employees, or third parties.
• To administer and troubleshoot the Services.

We may also aggregate and/or de-identify information collected through the Services. De-identified and/or aggregated data may be used for any purpose, including research, product development, and marketing, and may be disclosed to third parties (e.g., advertisers, promotional partners, sponsors).

Our Disclosure of Your Personal Data and Other Information

We may disclose the information we collect in the following circumstances:

1. Business Transfers

As we develop our business, we may buy, sell, or transfer businesses or assets. In the event of a merger, acquisition, reorganization, or similar event, or during negotiations in contemplation of such an event, the information we collect may be disclosed or transferred as part of the business assets.

2. Related Companies

We may share your information with our affiliates and related companies for purposes consistent with this Policy.

3. Agents, Consultants, and Third-Party Vendors

We may engage third parties to perform services on our behalf. Examples include:

• Mailing documents (e.g., DHL, UPS).
• Using travel agents to visit embassies.
• Maintaining databases.
• Processing payments.

4. Consent

We may disclose your information to third parties if you have provided consent.

5. Legal Requirements

We may disclose your information if required by law or in the good-faith belief that such action is necessary to:

• Comply with a legal obligation.
• Protect and defend the rights or property of eTourist.
• Act in urgent circumstances to protect the safety of our users or the public.
• Protect against legal liability.

Online Analytics and Tailored Advertising

Online Analytics

We may use third-party analytics services such as Google Analytics. These services use cookies and similar technologies to help us analyze how users interact with the Services.

For example:

• They may track which website referred you to us.
• They may measure how you navigate and use our site.
• They may collect IP addresses and related data.

To opt out of Google Analytics, you can install the Google Analytics Opt-out Browser Add-on.

If you receive emails from us, we may use tools such as clear GIFs to track when you open our messages or click links. This helps us evaluate the effectiveness of our communications.

Tailored Advertising

The Services may use third-party advertising technologies that deliver relevant ads based on your browsing behavior.

Cookies and tracking technologies may be placed on your device to:

• Deliver targeted marketing content.
• Report on ad impressions and effectiveness.

Third parties (e.g., ad networks such as Google Ads) may also place cookies to provide tailored marketing.

We do not control how these third parties use cookies or collect data. Their activities are governed by their own privacy policies.

Opt-out options:

• Visit the Network Advertising Initiative (NAI) Consumer Opt-Out Link.
• Visit the Digital Advertising Alliance (DAA) Consumer Opt-Out Link.
• Manage your Google Ads Settings.

Your Choices

Subject to applicable laws, you may have certain choices regarding how we handle your information:

• Account Information: You may access, modify, or delete certain personal information by editing your account profile.
• Marketing Emails: You may opt out of marketing emails by clicking the "unsubscribe" link. Please note: you may still receive transactional emails (e.g., regarding your travel document status).
• Cookies & Analytics: You may opt out of certain cookie-based or analytics tracking as described in this Policy.
• Region-Specific Choices: Please see the section below for EU, UK, California, and other U.S. state-specific rights.

Retention of the Information We Collect

We retain your information as long as reasonably necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements.

If you delete or modify your information, we may retain certain data as required by law or for legitimate business purposes (e.g., fraud prevention, audits).

Security

We implement administrative, technical, and physical security measures to protect against loss, misuse, or alteration of your data. These safeguards vary based on the sensitivity of the information.

Consent to Transfer Information

We maintain systems in Bulgaria and may use third-party vendors who process data in other countries.

Your personal information may therefore be transferred to, stored in, and processed in countries outside your country of residence, including the United States and the European Union.

These countries may have different data protection laws. Where required, we implement appropriate safeguards (such as EU Standard Contractual Clauses) to protect your data.

By using our Services, you consent to these transfers and processing activities.

Children's Privacy

The Services are not intended for minors under 18 years of age.

• If you are under 18, please do not submit any personal information.
• If we learn that we have collected personal data from a child under 18 without appropriate consent, we will delete it.
• Parents/guardians who believe their child has submitted personal information should contact us immediately.

Links to Other Websites and Services

Our Services may contain links to external websites or services not operated by eTourist.

• We are not responsible for the privacy practices of third-party sites.
• Inclusion of links does not imply endorsement.
• We encourage you to review the privacy policies of any third-party site you visit.

Changes to this Policy

We may update this Policy from time to time to reflect:

• Changes in law.
• Our data practices.
• Technological developments.

We will post updates on this page with a revised "Last Updated" date.

If we make material changes, we will notify you through our Services or via email where required.

Your continued use of the Services after changes are posted indicates your acceptance of those changes.

Contact Us

If you have questions, concerns, or requests regarding this Policy, you may contact us:

We will attempt to respond promptly after receiving your inquiry.

Region-Specific Notices and Choices

Residents of the European Economic Area (EEA) and the United Kingdom

Under applicable law, eTourist is considered the data controller of the personal data handled under this Policy.

Our legal grounds for using your data include:

• Contractual Commitments: To provide Services (e.g., processing travel documentation requests).
• Consent: Where required by law. You may withdraw consent at any time.
• Legitimate Interests: For activities such as fraud prevention, customer service, improving Services, and security.
• Legal Compliance: To meet regulatory obligations (e.g., accounting, reporting, or required disclosures).

Your rights under GDPR and UK law may include:

• Access to and a copy of your personal information.
• Correction of inaccurate or outdated information.
• Deletion of certain information.
• Restriction of processing.
• Objection to processing for direct marketing purposes.
• Data portability (transfer of your information to another provider).
• Withdrawal of consent (where processing is based on consent).

You also have the right to lodge a complaint with your local data protection authority, though we encourage you to contact us first to resolve concerns.

California Residents (CCPA/CPRA)

The California Consumer Privacy Act ("CCPA"), as amended by the California Privacy Rights Act ("CPRA"), provides certain rights to California residents.

Categories of Information Collected in the Past 12 Months:

• Identifiers (e.g., name, address, email).
• Commercial information (e.g., transaction history).
• Financial data (e.g., credit card information).
• Internet/network activity (e.g., IP address, browsing behavior).
• Professional/employment details.
• Inferences (e.g., user preferences).
• Audio/visual information (e.g., call recordings).
• Protected classifications (e.g., ethnicity, religion, where required).
• Sensitive personal information (e.g., passport number, SSN, account login credentials).

Your Rights under California Law:

• Request details about categories and specific pieces of personal data collected.
• Request correction or deletion of your personal data.
• Request information about data sharing, selling, or disclosure.
• Opt out of the "sale" or "sharing" of personal data for targeted advertising.
• Limit the use of sensitive personal information.
• Non-discrimination for exercising your rights.

Exercising Your Rights:

• Submit a request through our Contact Us page.
• We may require identity verification before fulfilling requests.
• You may designate an authorized agent to submit requests on your behalf with written authorization.

Do Not Track (DNT):

Our Services do not respond to browser-initiated "Do Not Track" signals at this time.

Residents of Other U.S. States with Privacy Laws

Certain other U.S. states (e.g., Virginia, Colorado, Connecticut, Utah, Nebraska, New Jersey, Maryland) also grant residents privacy rights, including the ability to:

• Confirm whether we process your personal data.
• Access and obtain a copy of your data.
• Correct inaccuracies.
• Delete your personal data.
• Opt out of targeted advertising, the sale of personal data, or profiling with legal effects.

If you wish to exercise these rights, please submit a request through our Contact Us page.

If we deny your request, you may appeal by submitting a "Data Request Appeal" through our Contact Us form. We will respond in accordance with applicable state law.

Governing Law and Jurisdiction

This Privacy Policy, and any disputes or claims arising out of or relating to it, shall be governed by and construed in accordance with the laws of Bulgaria.

Any disputes shall be subject to the exclusive jurisdiction of the competent courts of Bulgaria.

Enforcement of This Policy

We reserve the right to enforce this Policy at our sole discretion. Any failure on our part to enforce any portion of this Policy does not constitute a waiver of our rights.

Severability

If any provision of this Policy is held to be invalid or unenforceable, that provision shall be limited or eliminated to the minimum extent necessary so that the remainder of the Policy remains in full force and effect.

Entire Agreement

This Privacy Policy, together with our Terms and Conditions and any other policies we may post from time to time, constitute the entire agreement between you and eTourist / Ticket Me OOD regarding our handling of your personal information.

Updates to this Policy

We may revise this Policy from time to time. When we do, we will update the "Last Updated" date at the top. If we make material changes, we will notify you via the Services or, where legally required, by email.

Your continued use of the Services after any updates indicates your acceptance of the revised Policy.