Privacy Policy

eSIM Net is a service of ESIM NET LLC ("eSIM Net", "we", "us" or "our"). We sell prepaid mobile data plans for travel, delivered as eSIMs — digital SIM profiles that you install on a compatible phone, tablet or other device — and we offer related services such as top-ups, customer support and programmes for business partners.

ESIM NET LLC is responsible for the personal information described in this policy. Where data protection law uses the term, we are the "controller" of that information, except where this policy says otherwise.

This policy applies to personal information we process when you:

• visit esimnet.org (opens in a new tab) and its pages, including destination and plan pages;
• buy an eSIM plan or a top-up through our checkout, or look up an order;
• contact our support team by email, through our contact form or through live chat;
• receive emails or messages from us; and
• use our business services as a reseller, affiliate or API customer, or act on behalf of one.

It covers visitors, customers and the people who represent our business partners. When a business partner (a reseller) buys eSIMs through our platform for its own customers, that partner is responsible for its relationship with those customers and for telling them how their information is used. We process only the limited information needed to supply the eSIMs to the partner — such as order records and eSIM identifiers — and we do so on the partner's behalf.

This policy does not cover websites, apps or services run by other companies, even when we link to them — including the payment pages of our payment providers, which have their own privacy policies (see Section 4).

Information you give us

• Email address. Required at checkout, because it is where we send your eSIM, QR code and installation instructions.
• Cardholder details. When you pay by card, the payment form asks for your first and last name, billing country and postal code. These are entered into our payment provider's secure form (see Section 4).
• Order choices. The destination, plan, trip length and any promo code you use.
• Support requests. Your name, email address, eSIM ID or ICCID, the content of your message, and any screenshots or files you attach through our contact form, by email or in live chat.
• Business partner information. For resellers and affiliates: the business and contact details you register with, sign-in credentials, and — for affiliates — the payout details you choose to give us (such as a PayPal or Wise email address or a wallet address). Resellers who use our messaging features also give us the messages they send and the numbers they send them to.

Information created when you buy and use an eSIM

• Order records. Order reference, date and time, the plan and price, currency, any discount, payment status and the payment method type.
• eSIM details. The eSIM's identifiers (including its ICCID), activation code and QR code, delivery status, and any top-ups.
• Service records. Information our connectivity partners report about your eSIM, such as whether it has been installed or activated, when it connected to a network, and how much data it has used. We use these records to support you and to review refund requests.

Information collected automatically

• Device and connection data. Your IP address, browser and device type (user agent), and the date and time of your requests. We store the IP address and browser type with checkout sessions and use them to protect checkout from fraud and abuse.
• Approximate location. A country or region inferred from your IP address. Our payment form uses it to pre-fill your billing country.
• Usage data. Pages visited, links clicked, the page that referred you, and how our pages perform, collected through the analytics tools described in Section 13.
• Referral data. If you arrive through a partner's referral link, the referral code and the page you landed on.

Information from other sources

• Payment providers tell us whether a payment succeeded, failed, was refunded or disputed, and may share risk and fraud signals.
• Connectivity partners provide the eSIM and service records described above.
• Analytics and advertising providers give us reports about how people find and use our website.

What we do not collect

We do not receive or store full card numbers or card security codes. We do not ask for government ID for a normal purchase, and we do not intentionally collect sensitive categories of information such as health data. Please do not include such information in support messages or attachments.

Payments on eSIM Net are handled by PayPal, an independent payment provider. You enter your payment details directly with PayPal, in windows it operates, so your card number never reaches our servers. You can pay with a PayPal account or with a debit or credit card without a PayPal account.

PayPal processes your payment information under its own terms and privacy statement. From PayPal we receive limited information: a transaction identifier, the amount and currency, the payment status (for example, paid, failed, refunded or disputed), the type of payment method, billing metadata such as the billing email, and fraud or risk signals.

The payment options shown at checkout depend on your device, browser and location, and may change as we add or remove providers. This section will always list the providers in use.

We use personal information to:

• Process and deliver your order — take payment, issue your eSIM with our connectivity partners, and send your QR code, activation details and installation instructions.
• Provide the service — process top-ups, show order status, and keep your eSIM working as described in our Terms of Service.
• Support you — answer questions, troubleshoot installation and connection problems, and resend delivery emails.
• Handle refunds and disputes — verify eligibility under our Refund Policy, including by checking installation, activation and data-usage records, and respond to chargebacks.
• Prevent fraud and abuse — detect suspicious orders, payment fraud, promo-code abuse, automated attacks and misuse of our systems, including by rate-limiting requests.
• Keep our services secure — authenticate business partners, monitor for errors and security incidents, and investigate them.
• Improve our website and services — understand which pages and plans are useful, measure performance, and fix problems.
• Communicate with you — send order confirmations, delivery emails, service notices and replies to your requests.
• Market our services, where the law allows, as described in Section 7.
• Meet legal obligations — keep accounting and tax records, respond to lawful requests from authorities, and enforce or defend legal claims.
• Run our partner programmes — attribute referred purchases, calculate commissions and pay affiliates, and manage reseller accounts.

Where data protection laws require a legal basis for processing — for example, if you are in the European Economic Area, the United Kingdom or Switzerland — we rely on the following:

Where the law allows, we may send you occasional emails about eSIM Net — for example, offers for your next trip. Every marketing email includes an unsubscribe link, and unsubscribing takes effect for all future marketing emails. Our marketing emails may record whether they were opened and which links were clicked, so we can see which messages are useful.

Where the law allows, we may also send occasional service or promotional text messages to the number of an eSIM you bought from us. You can ask us to stop at any time by contacting support@esimnet.org.

Opting out of marketing does not stop messages we need to send about your orders, such as delivery emails, service notices and replies to your requests.

We share personal information only as described here, and only as much as each recipient needs. Our service providers are allowed to use it only to provide their services to us or as their own terms and the law require.

ESIM NET LLC is based in the United States, and our service providers operate in several countries. Your information may therefore be processed in the United States and in other countries whose data protection laws may differ from those where you live — including the country you travel to, where local network operators handle your connection.

Where the law requires it, we take steps intended to ensure that transferred information stays protected, such as relying on the data protection terms our service providers offer for international transfers.

We keep personal information only for as long as we need it for the purposes in this policy, and then delete or anonymise it. How long depends on the type of information:

We use technical and organisational measures designed to protect personal information against loss, misuse and unauthorised access, including:

• encryption in transit (HTTPS) across our website and our connections to service providers;
• payment details entered only in isolated forms operated by our payment providers, never on our servers;
• access controls and authentication for internal tools and business partner portals, with signed, expiring sessions and hashed credentials and API keys;
• verification of the signed notifications our payment providers send about payments;
• rate limiting, bot protection and fraud checks on checkout and other sensitive actions;
• hosting with established infrastructure providers, logging and monitoring; and
• procedures for investigating and responding to security incidents, including notifying people and authorities where the law requires.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please keep your eSIM QR code and activation details private, and tell us straight away if you think your information or an eSIM has been misused.

Depending on where you live, you may have the right to:

• Access the personal information we hold about you and receive a copy;
• Correct information that is inaccurate or incomplete;
• Delete your personal information;
• Restrict how we use it, or object to processing based on our legitimate interests, including profiling for marketing;
• Data portability — receive information you gave us in a structured, machine-readable format, or have it sent to another company;
• Withdraw consent where we rely on it;
• Opt out of marketing, and of the sale or sharing of personal information for targeted advertising where US state laws give you that right; and
• Complain to a data protection authority — for example, the supervisory authority where you live or work if you are in the European Economic Area or the United Kingdom.

To make a request, email support@esimnet.org with the subject "Privacy request", from the email address you used with us if you can. We may ask for information to confirm your identity — such as an order reference — before acting, and we will respond within the time the applicable law requires. You can use an authorised agent where the law allows; we may ask for proof of their authority. We will not treat you differently for exercising your rights.

Some requests may be limited by law. For example, we may need to keep order and payment records for tax and accounting, keep information needed to prevent fraud or to establish or defend legal claims, or decline requests that would reveal other people's information or compromise security. Deleting your information does not cancel an active eSIM; please tell us if you also want the eSIM deactivated.

Cookies are small files stored in your browser; similar technologies include pixels, local storage and scripts. Our website and the services built into it use the following:

Your choices

• Browser settings. You can block or delete cookies in your browser. Blocking essential cookies may stop parts of the site, such as partner portals, from working.
• Google Analytics. Install Google's opt-out browser add-on (opens in a new tab). Google's use of data is described in the Google Privacy Policy (opens in a new tab).
• Meta. You can manage ad preferences in your Facebook or Instagram settings. Meta's use of data is described in the Meta Privacy Policy (opens in a new tab).
• Live chat. Tawk.to's processing is described in its privacy policy (opens in a new tab).
• Ask us. To opt out of the use of your information for targeted advertising, or for help with any of these choices, email support@esimnet.org.

Our services are intended for adults. You must be at least 18, or the age of majority where you live, to buy from us. We do not knowingly collect personal information from children. If you believe a child has given us personal information, please contact us and we will delete it.

Our website links to, and embeds, services run by other companies — including payment forms, live chat and social media pages. Those companies decide how they use the information they collect, under their own privacy policies. We encourage you to read them.

We may update this policy as our services, providers or legal obligations change. The date at the top shows when it was last updated. If we make a significant change, we will tell you in advance where the law requires — for example, by email or with a notice on our website.

For questions about this policy or to exercise your rights, contact us at support@esimnet.org or through our contact form. You can also write to us at: