Privacy Policy

1. Information We Collect

We collect the minimum amount of personal data necessary to successfully fulfill your order, secure our transactions, and deliver reliable technical support. We do not sell your personal data under any circumstances.

We collect information from you in the following categories:

• Order Details: The destination country or region of the plan you choose, data capacity, and purchase timestamp. This is necessary to generate, activate, and manage your eSIM profile.
• Technical Device Identifiers: Anonymous identifiers such as your browser type, operating system version, and approximate geographic location (based on IP address) to optimize storefront delivery.

2. Account Information

To keep our transaction process as friction-free as possible, we do not require you to create a traditional password-protected user account to make a purchase. Instead, we use your email address as your unique identifier. If we launch customer dashboard portals in the future, your email will serve as the account credentials, and we will collect registration details (such as login logs and profile choices) solely to authenticate and display your active eSIM inventory.

3. Payment Information

We do not directly process, store, or transmit your credit card numbers or billing credentials on our servers. All credit card processing, digital wallet payments, or bank transfers are handled directly by our secure, PCI-DSS compliant third-party payment gateway provider (Chargily Pay). When you submit payments, the payment provider receives and handles your billing details. We receive only transaction confirmations (e.g., transaction status, reference IDs, and payment totals) to process and deliver your eSIM order.

4. Use of Cookies

We use essential cookies and similar local storage technologies to enable basic website functions, such as keeping track of selected eSIM plans in your basket and retaining user interface preferences (like language or currency settings). These cookies are essential for our website to function. You can configure your browser to block cookies, but doing so may prevent you from checking out or searching plans properly.

5. Web Analytics

To continuously improve our platform and identify layout friction, we collect anonymous usage data. We use privacy-compliant, self-hosted, or third-party web analytics tools (such as Google Analytics) to observe general traffic flows, link navigation rates, and device breakdown statistics. This metadata is aggregate and contains no personal contact details or transaction records.

6. Third-party Services

We share specific transaction details with reliable service providers who perform operations on our behalf:

• eSIM Net (Upstream Provider): We share plan requests to automatically provision your cellular profile.
• Resend (Email Delivery): We pass your email address and generated eSIM QR details to Resend to ensure swift order delivery.
• Chargily Pay (Payment Gateway): We pass the order amount to secure payment processing.

Each third-party vendor is contractually bound to process your information only in accordance with our instructions and to maintain confidentiality and security protocols.

7. Data Security

We implement strict, industry-standard administrative and technical security measures to protect your personal information from unauthorized access, loss, alteration, or disclosure. All web traffic to and from our services is encrypted via Secure Sockets Layer (SSL/TLS) technology. In addition, database tables containing transaction records are protected by access permissions restricted to essential personnel.

8. Data Retention

We retain your email address and purchase records only for as long as necessary to comply with tax and audit regulations, fulfill customer support inquiries, verify transaction legitimacy, or defend against chargeback claims. Once these obligations expire, or if you request deletion, we will anonymize or permanently erase your data.

9. GDPR Compliance and International Data Transfers

For users residing in the European Economic Area (EEA) or the United Kingdom (UK), we process your personal data in accordance with the General Data Protection Regulation (GDPR). The legal bases for processing your data are:

• Performance of a Contract: To provision and email your purchased eSIM data plan.
• Legitimate Interests: To detect and prevent transaction fraud and manage customer support.
• Legal Obligation: To comply with applicable tax and bookkeeping laws.

Please note that your personal data may be transferred to and processed in servers located outside your country of residence, including in jurisdictions where data protection standards may differ. We ensure appropriate safeguards (such as Standard Contractual Clauses) are in place to secure these transfers.

10. Your Rights and Deletion Requests

Depending on your location, you have several rights regarding your personal data:

• Right to Access: You can request a summary of the personal data we hold about you.
• Right to Rectification: You can request correction of inaccurate data.
• Right to Deletion: You can request that we permanently delete your email address and order records from our systems, subject to legal retention obligations.
• Right to Restrict Processing: You can object to or restrict processing under certain conditions.

To exercise any of these rights, or to submit a formal data deletion request, please email our privacy officer at support@esimair.io. We will respond and process your request within 30 days.

11. Contact Information

For privacy inquiries, data deletion requests, or compliance complaints, please contact eSIM Air LLC at:

eSIM Air LLC
Email: support@esimair.io