Information

Privacy Policy

Last updated: August 27, 2026

eSIM.site ("we", "us", "our") respects your privacy. This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and your rights. By using our Service, you consent to the practices described below.

1. Data We Collect

1.1 Information You Provide

  • Account information: Name, email address, phone number, password (hashed).
  • Order information: Products purchased, order history, billing address.
  • Payment information: Card details are processed directly by our payment gateways (Stripe, PayPal, and others). We do not store full card numbers on our servers. We retain only non-sensitive transaction identifiers.
  • Identity documents (KYC): Where a destination, Provider, or fraud review requires identity verification, we collect the identification documents you upload (such as a passport or national ID). These are stored securely, used only for the verification, and retained only as long as needed for that purpose and any legal record-keeping obligations.
  • Support tickets: Messages, attachments, and metadata you submit through our support ticket system.
  • Reviews and referrals: Review text, ratings, and display names you submit about your purchases, and referral relationships created when someone signs up or purchases through your referral link.
  • Marketing preferences: Your opt-in or opt-out choices for promotional communications, per email category.

1.2 Information Collected Automatically

  • Device and browser data: IP address, browser type, operating system, device identifiers, screen size, referring URLs.
  • Usage data: Pages visited, products viewed, time spent, click paths, search queries.
  • Push notification tokens: If you opt in to web push notifications, we store the subscription token your browser generates so we can deliver the notifications you requested. You can revoke this at any time in your browser or account settings.
  • Experiment identifiers: Anonymous A/B test assignment identifiers used to show you a consistent version of features we are testing.
  • Cookies and similar technologies: See our Cookies section below.
  • Location data: Approximate location derived from your IP address (not precise GPS location).

1.3 Information from Third Parties

  • eSIM Providers: Usage statistics (data consumed, remaining, status) related to eSIMs purchased from us.
  • Payment processors: Payment confirmation and fraud-scoring data.
  • Analytics providers: Aggregated behavioral data.

2. How We Use Your Data

We process personal data for the following purposes:

  • Creating and managing your account;
  • Processing purchases, delivering eSIMs, and managing your orders;
  • Providing customer support through the ticket system;
  • Sending service-related notifications (order confirmations, delivery of QR codes, expiration reminders, usage alerts);
  • Operating optional programs you participate in, such as loyalty rewards, referrals, gift cards, and wallet credit;
  • Sending promotional or marketing communications (only with your consent, which you may withdraw at any time, per category or entirely);
  • Delivering web push notifications you have opted into;
  • Running A/B tests to improve the shopping and checkout experience;
  • Detecting and preventing fraud, abuse, and security incidents;
  • Complying with legal and regulatory obligations;
  • Improving our website, products, and services through analytics;
  • Enforcing our Terms of Service and other policies.

3. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), United Kingdom, or Switzerland, we rely on the following legal bases:

  • Contract performance: To process orders and deliver eSIMs.
  • Legitimate interests: To improve our service, prevent fraud, and secure our systems.
  • Consent: For marketing communications, push notifications, and non-essential cookies.
  • Legal obligation: To comply with tax, accounting, and regulatory requirements, including identity verification where mandated.

4. Sharing Your Data

We do not sell your personal data for money. We may share it with:

  • eSIM Providers: Only the minimum information necessary (e.g., a transaction identifier) to provision and manage your eSIM. Where a Provider or destination legally requires identity verification, verification data is shared for that purpose only.
  • Payment processors: To complete and verify transactions.
  • Advertising platforms: Google Ads, Meta (Facebook/Instagram), TikTok, Pinterest, and X. With your cookie consent, we share limited event data (for example, that a purchase occurred and its value) through browser pixels and server-side measurement APIs, which may include hashed identifiers used for ad measurement and attribution. This activity may qualify as "sharing" under certain US privacy laws; you can opt out at any time through our cookie preferences.
  • CRM and marketing tools: Platforms such as HubSpot that help us manage customer communication and marketing preferences.
  • Infrastructure and security providers: Our hosting providers and Cloudflare, which delivers and protects the website and processes visitor IP addresses for security and performance.
  • Service providers: Analytics, email delivery, fraud detection, and customer support tooling, all bound by confidentiality obligations.
  • Legal authorities: When required by law, court order, or to protect our legal rights.
  • Business transfers: In connection with a merger, acquisition, or sale of assets, subject to equivalent privacy protections.

5. Cookies and Tracking

We use cookies and similar technologies, managed through Google Tag Manager, to:

  • Strictly necessary cookies: Authenticate users, maintain sessions, secure the checkout process. These cannot be disabled.
  • Preference cookies: Remember your language, currency, and other settings.
  • Analytics cookies: Understand how users interact with the Service (e.g., Google Analytics 4).
  • Marketing cookies and pixels: Measure advertising performance and attribute purchases to campaigns (Google Ads, Meta, TikTok, Pinterest, X). These fire only with your consent.

You can manage cookie preferences at any time through our cookie banner or your browser settings. Disabling strictly necessary cookies may prevent the Service from functioning properly.

6. Data Retention

We retain personal data only for as long as needed for the purposes described in this Policy:

  • Account data: for as long as your account is active, plus up to 24 months after deletion.
  • Order and transaction records: for the period required by tax and accounting laws (typically 5–10 years).
  • Identity verification documents: only as long as needed to complete the verification and satisfy legal record-keeping requirements, after which they are deleted.
  • Support tickets: up to 36 months after resolution.
  • Marketing data: until you withdraw consent or opt out.
  • Analytics data: typically 14–26 months, often in aggregated form.

7. Security

We implement industry-standard technical and organizational measures to protect personal data, including encryption in transit (TLS), hashed passwords, access controls, and regular security audits. However, no system is completely secure, and we cannot guarantee absolute security.

8. International Data Transfers

Your data may be transferred to and processed in countries other than your own, including countries where data protection laws may differ. When such transfers occur, we implement safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission.

9. Your Rights and Self-Service Tools

Subject to applicable law, you have the right to:

  • Access the personal data we hold about you;
  • Rectify inaccurate or incomplete data;
  • Erase your data ("right to be forgotten");
  • Restrict or object to certain processing activities;
  • Data portability: receive your data in a machine-readable format;
  • Withdraw consent at any time (without affecting the lawfulness of prior processing);
  • Lodge a complaint with your local data protection authority.

You can exercise the most common rights yourself, instantly, from your account dashboard:

  • Data export: Download a machine-readable copy of your personal data from your account's Data Export page.
  • Account deletion: Delete your account directly from your account settings. Transaction records that we are legally required to keep (for tax and accounting purposes) are retained for the mandatory period and then removed.
  • Marketing preferences: Manage or unsubscribe from each category of marketing email from your account or the unsubscribe link in any marketing message.

For anything else, please open a ticket through our support system. We will respond within the legal timeframes (typically 30 days).

10. California Privacy Rights (CCPA/CPRA)

California residents have additional rights, including the right to know what personal information is collected, the right to delete, the right to correct, and the right to opt out of the "sale" or "sharing" of personal information. We do not sell personal information for money. However, sharing limited event data with advertising platforms for cross-context behavioral advertising and ad measurement may be considered "sharing" under the CPRA. You can opt out of this at any time via our cookie preferences, or submit a request through the ticket system or the self-service tools described above.

11. Children's Privacy

The Service is not directed to children under the age of 16, and we do not knowingly collect personal data from children. If we become aware that we have collected such data, we will delete it promptly.

12. Third-Party Links

Our Service may contain links to third-party websites. We are not responsible for the privacy practices of those sites. Please review their privacy policies before providing any personal information.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will post the revised version on this page and update the "Last updated" date. Significant changes will be communicated via email or a prominent notice on the Service.

14. Contact Us

For privacy questions, data access requests, or to exercise your rights, please submit a support ticket via your account dashboard. Our ticket system is the only official contact channel for privacy inquiries.