Privacy policy
Last updated 13 Oct 2026
Draft: requires legal review
This is an initial template, not legal advice. Bracketed placeholders must be completed and the text reviewed by a qualified professional for each market before the store takes real orders.
Controller
[Company legal name] is the controller of personal data described here. Contact: [privacy email].
Data we collect
- Account data: email address, name (optional) and a securely hashed password.
- Order data: items purchased, amounts, order and payment status, and the eSIM identifiers needed to provide the service.
- Payment data is collected and processed by our payment provider. We do not receive or store full card numbers.
- Support messages you send us.
- Technical data needed to run and secure the service, such as cookies for sign-in and cart, and request logs.
- Analytics data only if you consent to analytics cookies.
Why we use it
- To provide the eSIM you ordered and send related emails (contract).
- To keep the service secure and prevent fraud (legitimate interests).
- To meet legal obligations such as accounting record-keeping.
- To understand how the site is used, if you consent.
Who we share it with
Our eSIM supplier (to issue your eSIM), payment provider, email delivery provider and hosting providers, under appropriate agreements. [List processors and any international transfer safeguards.]
Retention
[Set retention periods, e.g. order records for the period required by accounting law, support messages for X months, inactive accounts for X years.]
Your rights
Depending on where you live, you may have rights to access, correct, delete or export your data, and to object to or restrict processing. Contact us to exercise them. You can also complain to your data protection authority.