> Privacy Policy.

vsimer Ltd. is the data controller responsible for your personal data. If you have any questions about how we handle your data, contact our Data Protection contact at privacy@vsimer.com.

We collect the following categories of personal data:

• Account data: First name, last name, email address, date of birth, gender, profile image, and preferred language.
• Transaction data: Purchase history, order IDs, plan details, and payment method type (we do not store full card numbers).
• Usage data: Pages visited, features used, session duration, and device or browser type collected via analytics tools.
• Communication data: Messages sent through our contact form or support emails.
• Technical data: IP address, browser type, operating system, and referring URL.

We use your personal data for the following purposes:

• To create and manage your account
• To process eSIM purchases and deliver QR codes
• To send transactional emails (order confirmations, OTP codes)
• To respond to support enquiries
• To improve our platform through anonymised analytics
• To comply with our legal and regulatory obligations

We will not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

We process your personal data under the following legal bases:

• Contract: Processing necessary to perform the contract (e.g. delivering your eSIM).
• Legitimate interests: Analytics, fraud prevention, and platform improvement.
• Consent: Marketing communications (where you have opted in).
• Legal obligation: Compliance with applicable laws and regulations.

We do not sell your personal data. We may share it with trusted third parties only where necessary:

• Payment processors: To securely handle transactions (e.g. Stripe).
• eSIM providers: To activate and manage your data plan.
• Email service providers: To deliver transactional and marketing emails.
• Analytics providers: To understand how our platform is used (data is anonymised where possible).
• Law enforcement: When required by law or to protect the rights and safety of our users.

All third-party processors are contractually bound to handle your data in accordance with GDPR requirements.

Some of our service providers may process data outside the UK or EEA. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the relevant supervisory authority.

We retain your personal data for as long as your account is active or as needed to provide our services. If you close your account, we will delete or anonymise your data within 90 days, except where we are required to retain it for legal or regulatory reasons.

Transaction records may be retained for up to 7 years for financial compliance purposes.

Under UK and EU GDPR, you have the following rights regarding your personal data:

• Access: Request a copy of the data we hold about you.
• Rectification: Ask us to correct inaccurate or incomplete data.
• Erasure: Request deletion of your data ("right to be forgotten").
• Restriction: Ask us to limit how we process your data.
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interests or direct marketing.
• Withdraw consent: Where processing is based on consent, withdraw it at any time.

To exercise any of these rights, contact us at privacy@vsimer.com. We will respond within 30 days.

We implement industry-standard security measures including HTTPS encryption, hashed authentication tokens, and access controls to protect your data from unauthorised access, alteration, or disclosure.

Despite these measures, no transmission over the internet is completely secure. If you believe your account has been compromised, contact us immediately.

We use cookies and similar tracking technologies on our website. For full details, please see our Cookie Policy.

We may update this Privacy Policy periodically. We will notify you of significant changes by email or a prominent notice on our website. The updated date at the top of this page reflects the most recent revision.

For privacy-related enquiries, email us at privacy@vsimer.com or use our contact form.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has been mishandled.