Privacy Policy

Last updated: 22 June 2026

1. Introduction

This Privacy Policy explains how we collect, use, and disclose your personal data when you use our website and Services.

By using our Services, you agree to this Privacy Policy.

We may update this Policy from time to time. The updated version applies from the moment it is published on the Website.

2. Data Controller

AExpress Ltd (company number 17186632, registered office: 20 Wenlock Road, London, England, N1 7GU) is the data controller responsible for your personal data.

3. Eligibility

You must be at least 18 years old or have legal capacity to use our Services.

If we become aware that personal data of a minor has been provided without proper authorization, we will take steps to delete it.

4. What Data We Collect

We may collect the following types of personal data:

Identity information

  • Full name
  • Date of birth
  • Gender
  • Citizenship

Contact information

  • Email address
  • Phone number
  • Address

Travel information

  • Arrival details
  • Purpose of travel
  • Accommodation details

Document information

  • Passport details
  • ID numbers

Additional information (if required)

  • Family details
  • Employment information

Payment information

  • Processed securely via third-party providers
  • We do not store full card details

We only collect data necessary to provide our Services.

5. How We Use Your Data

We use your data to:

  • Process your order and the application you submit
  • Send you updates about your order
  • Respond to inquiries
  • Prevent fraud and verify payments
  • Comply with legal obligations
  • Improve our website and Services

We may also use anonymized data for analytics and improvement purposes.

6. Legal Basis for Processing

We process your personal data based on:

  • Your consent
  • Performance of a contract
  • Legal obligations
  • Legitimate business interests

7. Data Sharing

We may share your data with:

  • The Government of the Republic of Azerbaijan, which decides on and issues the travel document
  • Payment providers
  • Technical service providers
  • Affiliates or related companies

We may also disclose data if required by law.

We do not sell your personal data.

8. International Transfers

Your data may be transferred outside your country of residence.

We take reasonable steps to ensure that such transfers comply with applicable data protection laws.

9. Third-Party Websites

Our Website may contain links to third-party websites.

We are not responsible for their content or privacy practices.

10. Data Security

We use appropriate technical and organizational measures to protect your personal data.

However, no system is completely secure, and we cannot guarantee absolute security.

11. Data Retention

We keep your personal data only for as long as necessary for the purposes described in this Policy. In practice:

  • Application and order information (the details you submit, payment references, and correspondence about your order): kept for as long as needed to provide the service, and afterwards for as long as we may reasonably need it to meet our legal, accounting and tax obligations and to defend against disputes or chargebacks. Where the law requires us to keep transaction records for a set period, we keep them for that period.
  • Passport copies and documents you upload: kept only for as long as needed to complete your application, and deleted once it has been processed and delivered.
  • Account, support, analytics and security records: kept only for as long as they remain useful for the purpose they were collected for.

Once your data is no longer needed for these purposes, it is securely deleted or anonymised. Where data is anonymised, it may continue to be used for statistical purposes that do not identify you.

12. Your Rights

Depending on applicable law, you may have the right to:

  • Access your data
  • Correct inaccurate data
  • Request deletion
  • Restrict processing
  • Object to processing
  • Request data portability

To exercise any of these rights, you may contact us via the Website. We will respond within the timeframes required by applicable law.

You may also withdraw your consent at any time where processing is based on consent.

13. Complaints

If you believe your data has been processed unlawfully, you may contact a relevant data protection authority.

If you are located in the United Kingdom, you may contact the Information Commissioner's Office (ICO) at ico.org.uk.

14. Contact

If you have questions about this Privacy Policy or your personal data, please contact our customer service team.