Privacy Policy

Last Updated: April 2026

Effective Date: April 1, 2026

1. INTRODUCTION

OpenGov Services LLC ("GlobePassHub," "we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (globepasshub.com) or use our optional eTA application assistance services.

This policy is designed to comply with applicable privacy laws including the European Union General Data Protection Regulation (GDPR), the United Kingdom GDPR, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and other applicable U.S. state privacy laws.

A. Information You Provide Directly:

- Personal identification: full legal name, date of birth, place of birth, nationality, gender

- Contact information: email address, phone number, mailing address

- Travel document data: passport number, passport country of issue, passport issue date, passport expiration date

- Travel details: purpose of travel, expected arrival date, departure date, accommodation address

- Payment information: billing name, billing address, partial credit card information (full card data is processed only by our PCI-DSS compliant payment processor and never stored on our servers)

- Communications: any messages or correspondence you send to us

B. Information We Collect Automatically:

- Technical data: IP address, browser type and version, device type, operating system, time zone, language preference

- Usage data: pages visited, time spent on site, click patterns, referring website

- Cookies and similar technologies: see our Cookie Policy for details

We use your personal data only for the following purposes:

- To process your eTA application and submit it to the Government of Canada eTA system

- To communicate with you about your application status

- To provide customer support and respond to inquiries

- To process payments and detect fraudulent transactions

- To comply with legal obligations

- To improve our website and services

- To send service-related notifications (not marketing) about your application

We do NOT sell your personal data to third parties.

For users in the European Economic Area, United Kingdom, or Switzerland, our legal basis for processing your personal data is one or more of the following:

- Performance of a contract: processing necessary to provide the services you requested

- Legal obligation: processing required to comply with applicable laws

- Legitimate interests: improving our services, preventing fraud, and securing our website

- Consent: where you have explicitly consented (you can withdraw consent at any time)

We share your personal data only as follows:

A. Government Authorities:

We submit your application data to the official Government of Canada eTA system as part of providing our service. The Government of Canada then processes the application under its own privacy rules.

B. Service Providers:

We share information with vetted third-party service providers who perform services on our behalf, including:

- Payment processors (e.g., Stripe, PayPal) for payment processing

- Cloud hosting providers for secure data storage

- Email service providers for transactional communications

- Analytics providers (e.g., Google Analytics) for website analytics

All service providers are contractually required to protect your data and use it only for the purposes we specify.

C. Legal Requirements:

We may disclose information if required to do so by law, court order, or governmental request, or to protect our rights, property, or safety.

D. Business Transfers:

If OpenGov Services LLC is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will provide notice before personal data is transferred and becomes subject to a different privacy policy.

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

- Application data: retained for 7 years to comply with tax, accounting, and legal record-keeping obligations

- Payment records: retained as required by financial regulations

- Marketing/analytics data: retained for up to 26 months

- Customer support communications: retained for 3 years

After the retention period, your data is securely deleted or anonymized.

We implement industry-standard technical and organizational measures to protect your personal data, including:

- TLS/SSL encryption for all data transmissions

- Encrypted storage of sensitive data at rest

- Strict access controls limiting employee access to personal data

- Regular security audits and vulnerability assessments

- PCI-DSS compliance for payment data handling

No method of transmission over the Internet is 100% secure, but we use commercially reasonable measures to protect your information.

We are based in the United States. If you access our services from outside the United States, your information may be transferred to and processed in the United States. For transfers from the EEA, UK, or Switzerland to the United States, we rely on appropriate safeguards such as Standard Contractual Clauses approved by the European Commission.

Depending on your jurisdiction, you may have the following rights:

- Right of access: obtain a copy of the personal data we hold about you

- Right of rectification: request correction of inaccurate or incomplete data

- Right of erasure ("right to be forgotten"): request deletion of your data

- Right to restrict processing: request limitation of how we process your data

- Right to data portability: receive your data in a portable format

- Right to object: object to certain types of processing

- Right to withdraw consent: withdraw consent at any time (where consent is the legal basis)

- Right to non-discrimination (CCPA): you will not be discriminated against for exercising your rights

- Right to opt out of the sale of personal information (CCPA): we do not sell your data, but you may still submit this request

- Right to lodge a complaint: file a complaint with your local data protection authority

To exercise any of these rights, contact us at info@globepasshub.com. We will respond within 30 days (or 45 days for California residents under CCPA).

Our services are not directed to children under the age of 16, and we do not knowingly collect personal information from children under 16 without parental consent. If we become aware that we have collected such information, we will promptly delete it.

For information about how we use cookies and similar technologies, please see our Cookie Policy.

We may update this Privacy Policy from time to time. The "Last Updated" date at the top of this page indicates when the policy was last revised. We encourage you to review this policy periodically.

For questions about this Privacy Policy or to exercise your privacy rights:

OpenGov Services LLC

Attn: Privacy Officer

500 4TH ST NW, SUITE 102

Albuquerque, NM 87102

United States

Email: info@globepasshub.com

For EU/UK/Swiss residents, you may also lodge a complaint with your local Data Protection Authority.