Privacy policy

This Privacy Policy ("Policy") describes how eSIMZI ("Company," "we," "us," or "our") collects, uses, discloses, and protects information obtained from users ("you" or "your") of the website located at esimzi.com (the "Site"). By accessing or using the Site, you consent to the data practices described in this Policy. If you do not agree with the terms of this Policy, you must discontinue use of the Site immediately.

1. INFORMATION WE COLLECT

1.1. Information You Provide Directly

  • Transaction Information: Email address (required for product delivery), name (if provided during payment), and payment method details (processed by third-party payment processors; we do not store full payment card numbers).
  • Communication Data: Any information you provide when contacting us via WhatsApp, Messenger, or other communication channels, including message content and contact identifiers.

1.2. Information Collected Automatically

  • Device and Browser Information: IP address, browser type and version, operating system, device type, screen resolution, and language preferences.
  • Usage Data: Pages visited, time spent on pages, referring URLs, click patterns, and other interaction data.
  • Cookies and Similar Technologies: We use cookies, local storage, and similar tracking technologies to enhance functionality, analyze usage, and improve the user experience.

1.3. Information from Third Parties

  • Payment Processors: Transaction status, payment confirmation, and limited payment details (last four digits, transaction ID) from our payment partners.
  • Analytics Providers: Aggregated and anonymized usage statistics.

2. HOW WE USE YOUR INFORMATION

We use the information we collect for the following purposes:

  • Order Fulfillment: Processing, delivering, and confirming your Digital Product purchases.
  • Customer Support: Responding to your inquiries, resolving disputes, and providing technical assistance.
  • Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent transactions, unauthorized access, and other illegal activities.
  • Legal Compliance: Complying with applicable laws, regulations, legal processes, and governmental requests.
  • Service Improvement: Analyzing usage patterns to improve the Site, services, and user experience.
  • Communication: Sending order confirmations, delivery notifications, and service-related communications (not marketing).

3. LEGAL BASIS FOR PROCESSING

We process your personal data on the following legal bases:

  • Contractual Necessity: Processing necessary to fulfill our contract with you (order processing and delivery).
  • Legitimate Interests: Processing necessary for our legitimate interests (fraud prevention, security, service improvement) that are not overridden by your rights.
  • Legal Obligation: Processing required to comply with applicable laws and regulations.
  • Consent: Where you have given explicit consent for specific processing activities (e.g., cookies).

4. INFORMATION SHARING AND DISCLOSURE

4.1. We do not sell, rent, lease, or trade your personal information to any third party.

4.2. We may share your information only in the following limited circumstances:

  • Payment Processors: To process your payment transactions. These processors are contractually bound to use your data solely for payment processing.
  • eSIM Providers: To activate and provision your eSIM plan. Only the minimum necessary information is shared.
  • Legal Requirements: When required by law, regulation, legal process, subpoena, court order, or governmental request.
  • Protection of Rights: To protect our rights, property, safety, or the rights, property, or safety of others; to investigate fraud; or to respond to a government request.
  • Law Enforcement: To report fraudulent chargebacks, illegal activities, or other violations to relevant authorities and fraud prevention agencies.
  • Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred as a business asset.

5. DATA RETENTION

5.1. We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including:

  • Transaction Records: Retained for a minimum of five (5) years from the date of transaction, or longer as required by applicable tax, accounting, or anti-fraud laws.
  • Communication Records: Retained for a minimum of two (2) years for dispute resolution and customer support purposes.
  • Technical Logs: Retained for a minimum of one (1) year for security and fraud prevention purposes.

5.2. Upon expiration of the retention period, data will be securely deleted or anonymized. Anonymized data that cannot be linked to an individual may be retained indefinitely for analytical purposes.

6. DATA SECURITY

6.1. We implement commercially reasonable administrative, technical, and physical security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

6.2. These measures include, but are not limited to: encrypted data transmission (SSL/TLS), secure payment processing through PCI-DSS compliant payment processors, access controls, and regular security assessments.

6.3. NOTWITHSTANDING THE FOREGOING, NO METHOD OF TRANSMISSION OVER THE INTERNET OR ELECTRONIC STORAGE IS 100% SECURE. WE CANNOT AND DO NOT GUARANTEE THE ABSOLUTE SECURITY OF YOUR INFORMATION. YOU ACKNOWLEDGE AND ACCEPT THIS INHERENT RISK.

6.4. You are solely responsible for maintaining the confidentiality of your email account and any codes or credentials delivered to you.

7. COOKIES AND TRACKING TECHNOLOGIES

7.1. We use cookies and similar technologies (local storage, session storage) for the following purposes:

  • Essential Cookies: Required for the Site to function properly (cart state, language preference, theme preference).
  • Analytics Cookies: To understand how visitors interact with the Site and improve performance.

7.2. By using the Site, you consent to the use of cookies as described herein. You may disable cookies through your browser settings, but this may impair Site functionality.

8. YOUR RIGHTS

Subject to applicable law, you may have the following rights regarding your personal information:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate or incomplete personal data.
  • Deletion: Request deletion of your personal data, subject to our retention obligations.
  • Objection: Object to certain processing of your personal data.
  • Data Portability: Request your data in a structured, machine-readable format.

To exercise any of these rights, contact us via WhatsApp or Messenger. We will respond within thirty (30) days. We may require verification of your identity before processing your request. Certain requests may be refused where we have a legitimate legal basis to retain or process the data.

9. CHILDREN'S PRIVACY

The Site and Services are not directed to individuals under eighteen (18) years of age. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal information from a child, we will take steps to delete such information promptly.

10. INTERNATIONAL DATA TRANSFERS

Your information may be processed and stored in jurisdictions outside your country of residence, including jurisdictions that may not provide the same level of data protection. By using the Site, you consent to such transfers. We will take reasonable steps to ensure your data receives an adequate level of protection in the jurisdictions in which we process it.

11. THIRD-PARTY LINKS

The Site may contain links to third-party websites or services. We are not responsible for the privacy practices or content of such third parties. We encourage you to review the privacy policies of any third-party sites you visit.

12. CHANGES TO THIS POLICY

We reserve the right to update or modify this Policy at any time by posting the revised version on the Site with an updated "Last Revised" date. Your continued use of the Site after any changes constitutes your acceptance of the revised Policy. It is your responsibility to review this Policy periodically.

13. GOVERNING LAW

This Policy shall be governed by and construed in accordance with the laws of England and Wales, without regard to conflict of law provisions.

14. CONTACT INFORMATION

For any questions, concerns, or requests regarding this Privacy Policy or our data practices, contact us through:

Registered Office Address: 6 Soapmaker Mews, London, E15 2LP, GB. This is our registered business address for official records only and does not accept walk-in visitors or postal correspondence for support purposes.