Privacy policy

1. Who we are

This policy explains how Tara Fly (“we”, “us”) handles personal data when you use hellotarafly.com, chat with Tara, apply for a UAE visa, buy a trip plan or work-preparation package, or contact us.

The business responsible for your data (the “controller”) is [Company legal name], [Registered address]. You can reach us about privacy at hello@hellotarafly.com. [Data protection officer / privacy contact, if appointed]

2. Data we collect

You give us:

• Account and contact details — name, email, phone/WhatsApp number, and the profile details asked for at sign-up (such as address, age, birthday and location).
• Visa application data — passport bio-page scan, passport-style photo, nationality, date of birth, passport number and expiry, travel dates, flight and hotel or host details, and any other documents the UAE authorities require for your visa type. If you apply for someone else (for example a child), you confirm you are allowed to share their data.
• Trip and work-preparation details — destinations, dates, budget, travel style, work experience, target roles and CVs you share with us.
• Messages — what you send through our contact form, email, WhatsApp, Facebook, and your chats with Tara.

Collected automatically:

• Technical data — IP address, browser and device type, pages visited, and basic logs needed to run and secure the website.
• Click events — for example, when you tap a WhatsApp button we record the page it was on so we can improve the site.
• Analytics — Google Analytics runs only if you accept analytics cookies in the consent banner.

Payments: card and e-wallet payments (cards, GCash, Maya, GrabPay) are processed by PayMongo. We receive the payment status, amount and a reference — never your full card number.

3. Why we use it

We do not sell your personal data, and we do not use your passport documents for anything other than your application.

4. Who we share it with

• UAE authorities and authorized filing partners — to apply for your visa we submit your application and documents to the competent UAE authorities (such as ICP or GDRFA), directly or through an authorized visa-filing partner. [Name or type of filing partner(s), if any]
• Supabase — database, file storage and sign-in for our platform.
• Resend — sending emails such as confirmations and updates.
• PayMongo — processing payments.
• Anthropic — the messages you send to Tara are processed by Anthropic's Claude AI models to generate her replies. Please don't share passwords, card numbers or passport numbers in the chat.
• Google Analytics — only if you consent to analytics cookies.
• Hosting — [Hosting provider and server location].
• WhatsApp (Meta) and Facebook — when you choose to contact us there, their own privacy policies apply.
• Authorities and advisers — when the law requires it, or to protect our rights, users or the public.

Our service providers may only use your data to provide their service to us.

5. International transfers

Our team and providers may process data in different countries (for example the UAE, the Philippines, the European Union and the United States). When data moves across borders we rely on providers' contractual safeguards (such as standard contractual clauses) and take steps to keep it protected to the standard described in this policy.

6. How long we keep it

• Passport scans, photos and visa documents — only as long as needed to file your application and handle follow-ups, then deleted within [N days] after the visa decision.
• Application records (reference, visa type, status, dates) — [retention period].
• Payment and invoice records — as long as tax and accounting law requires, [e.g. X years].
• Account data — while your account is open; deleted or anonymized within [N days] after you close it.
• Chats with Tara and enquiries — [retention period], unless they are part of an active service.

7. How we protect it

We use encrypted connections (HTTPS), access controls so only team members who need your documents can see them, and reputable providers with their own security programmes. No system is perfectly secure; if a breach affects you, we will tell you and the relevant authorities as the law requires.

8. Your rights

Depending on where you live — including under the EU/UK GDPR, the UAE Personal Data Protection Law (PDPL) and the Philippine Data Privacy Act of 2012 — you can ask us to:

• see the personal data we hold about you and get a copy;
• correct data that is wrong or incomplete;
• delete your data (unless we must keep it, for example for an application in progress or tax records);
• restrict or object to certain uses, including direct marketing;
• receive your data in a portable format;
• withdraw consent at any time (this doesn't affect what we did before).

Email hello@hellotarafly.com from the address linked to your account or application. We may need to confirm your identity, and we aim to reply within 30 days. You can also complain to your local data protection authority — for example the UAE Data Office, the Philippine National Privacy Commission, or your EU/UK supervisory authority.

9. Cookies and local storage

We use essential browser storage to keep you signed in and to remember your cookie choice. Analytics cookies (Google Analytics) are only set after you accept them in the consent banner; you can change your mind by clearing your browser's site data for hellotarafly.com.

10. Children

You must be 18 or older to create an account or buy a service (15–17 year-olds only with a parent's or guardian's permission). Visa applications for children must be submitted by a parent or legal guardian.

11. Changes to this policy

We may update this policy as our services change. The date at the top shows the latest version, and we'll highlight important changes on the website or by email.

12. Contact

Questions or requests about your data: hello@hellotarafly.com · WhatsApp +971 55 932 1870. See also our terms and refund policy.