Privacy Policy | SimbaSIM

We ask for an email address and take a payment. That is close to the whole story — here is the precise version.

The short version

We ask for one thing: an email address, so we can send you your eSIM.
No account is required to buy, so there is no password and no profile.
We never see your card details. Stripe handles payment.
We do not sell your data, and we do not run advertising trackers that follow you off this site.

1. What we collect

Because you gave it to us

Your email address. Required — it is the delivery address for your eSIM and the only way to recover a purchase later.
Your destination and plan choice. Needed to issue the right eSIM and to show you the right price.

Because you paid

Payment records — amount, currency, time, card brand and last four digits, and billing country. Stripe holds the card itself; we only ever see this summary. We keep it because tax law requires us to.
If you pay with Apple Pay or Google Pay, the wallet supplies a name and email to complete the payment. We use the email for delivery if you did not type one.

Because the service ran

Order and eSIM records — your order reference, which plan, and the eSIM identifiers issued to you.
Connection metadata from the network partner — how much data was used and roughly when. This is needed to tell you how much is left and to investigate faults. We do not receive, and cannot see, the content of your traffic, the sites you visit, or your messages.
Ordinary server logs — IP address, browser, and pages requested, kept briefly for security and debugging.

2. Why we are allowed to hold it

What	Why	Basis
Email, plan, order record	To deliver what you bought and support you afterwards	Performing our contract with you
Payment and invoice records	Accounting, tax, and fraud disputes	Legal obligation
Usage metadata	Showing your remaining data and diagnosing faults	Performing our contract
Server logs	Keeping the site up and abuse off it	Legitimate interests
Product emails you opt into	Telling you about things you asked to hear about	Consent — withdrawable at any time

We do not send marketing email to people who only bought an eSIM. Buying is not consent to a newsletter.

3. Who else touches it

Only the companies we need to run the service. Each one is contractually limited to that purpose.

Who	What for	Where
Stripe	payment processing and invoicing	United States, EU
Cloudflare	hosting, DNS, and order storage	Global edge network
eSIM network partner	issuing eSIM profiles and carrying your data	Varies by destination

Because eSIMs work by roaming onto local networks, the operator in your destination necessarily learns that a device is connected to it. That is how mobile networks function, and it is outside our control.

We will disclose data if we are legally compelled to, and we will tell you when we are permitted to. We do not sell personal data, and we do not share it for anyone else’s advertising.

4. International transfers

A travel product moves data across borders by definition. Our processors operate globally and rely on Standard Contractual Clauses or equivalent safeguards for transfers out of the UK and EEA.

5. How long we keep it

Order and eSIM records: 90 days after the plan expires, so support and refunds are possible.
Payment and invoice records: as long as tax law requires, typically six to seven years.
Server logs: 30 days.
Usage metadata: retained by the network partner per their own schedule; we hold only summaries.

6. Your rights

Wherever you live, you can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Email privacy@simbasim.com and we will reply within 30 days.

If you are in the UK or EEA you also have rights to restrict or object to processing, to portability, and to complain to your data protection authority. If you are in California you have the rights to know, delete, correct, and to opt out of sale or sharing — we do not sell or share, so there is nothing to opt out of.

One limit worth being straight about: we cannot delete invoice records we are legally required to keep, and deleting your order record before a plan expires may make the eSIM unsupportable.

7. Cookies

This site sets no advertising or tracking cookies, so there is no consent banner to dismiss.

Stripe sets cookies on the checkout page, which are necessary for payment to work and for fraud prevention. Without them, the card form cannot function. If we later add analytics, this section and the policy date will change first.

8. Security

The site is served over HTTPS only. Payment credentials never reach our servers. Secrets are held in encrypted storage, not in our source code, and order records are reachable only through the order reference issued at purchase. No system is perfect; if we ever suffer a breach affecting you, we will tell you and the relevant regulator promptly.

9. Children

This service is not for under-16s and we do not knowingly collect their data. If you believe a child has bought from us, email us and we will delete the record and refund the purchase.

10. Contact

Privacy questions and requests: privacy@simbasim.com. Anything else:support@simbasim.com.

A postal address for privacy correspondence will be published here once company registration is complete.