Security

We take the security of our website, customer accounts, and visa application data seriously. This page summarises our practices in plain language. It is not a contract; see our Privacy Policy and Terms & Conditions for full legal terms.

1. How we protect your information

• Encryption in transit: Our public site is served over HTTPS (TLS). Data sent between your browser and our servers is encrypted in transit.
• Access control: Dashboard and application areas require sign-in. Staff access is limited by role (passenger, agency, admin).
• Document handling: Passport scans and photos are validated on upload and stored using our configured storage provider (local disk or cloud, depending on environment). Upload size and file-type limits reduce abuse.
• Rate limiting: Sensitive actions such as login and document upload are throttled to reduce brute-force and automated abuse.
• Infrastructure: Production servers use firewall rules, security headers, and monitoring appropriate to our hosting setup.

2. Your responsibilities

• Use a strong, unique password and do not share your login.
• Sign out on shared or public devices.
• Upload documents only through our secure application forms, not via unsecured email unless we ask you to.
• Report suspicious emails or messages claiming to be from us to the contact below.

3. Payments

Card and payment details are handled by our payment partners where applicable. We do not store full card numbers on our application servers. Always verify you are on our official domain before entering payment information.

4. Cookies and sessions

We use session cookies and similar technologies for sign-in and security. Optional analytics and marketing cookies are off unless you opt in — see our Cookie Policy.

5. Responsible disclosure

If you believe you have found a security vulnerability in Vietnam Urgent Visa, please report it responsibly so we can investigate and fix it before public disclosure.

• Email: visa@sakkarwaltravels.com with subject line “Security report — [short summary]”.
• Include steps to reproduce, impact, and any proof-of-concept if safe to share.
• Do not access, modify, or delete other users' data.
• Do not perform denial-of-service, social engineering, or physical attacks.
• Allow reasonable time for us to respond before public discussion.

We do not operate a public bug-bounty programme unless stated otherwise. We appreciate coordinated disclosure and will acknowledge valid reports where appropriate.

6. Data breaches

If we become aware of a breach that affects your personal data, we will take steps to contain it, investigate, and notify you or regulators where required by applicable law.

7. Contact

Security and privacy enquiries: visa@sakkarwaltravels.com. For general support, email us or see our Help page.