Privacy Policy
What personal data eSimu collects, why we need it, who we share it with and how long we keep it.
Updated November 5, 2026 · Version 1.0
In short
- We collect only what we need to sell and deliver your eSIM: your name, email, orders and preferences.
- Card details go straight to Stripe. We never see or store your full card number.
- We don't sell your data and we don't use it for advertising.
- You can delete your account yourself, at any time, from your Profile.
- Some order records are kept without your name or email, because tax law and card networks require it.
This summary is here to help you find your way. The full text below is what applies.
1. Who we are
eSimu is run by FELIS STUDIO LTD, a company registered in England and Wales (company number 15200972), registered office: 71-75 Shelton Street, Covent Garden, London, United Kingdom WC2H 9JQ.
For anything about your data, email [email protected].
2. What we collect
When you create an account
- Your email address, and your name if you sign in with Google.
- Your preferences: display currency, language and whether you want marketing emails.
- Your referral code, and who referred you, if anyone.
When you buy an eSIM
- The order: plan, destination, price, currency, exchange rate and date.
- The eSIM: its ICCID, activation details and status, and when it first connected to a network and used data.
- Payment metadata from Stripe: payment and customer IDs, card brand, last four digits and a card fingerprint. We never receive the full card number.
When you contact us
The name, email, order number and message you send us. We use it only to answer you.
Automatically
Technical data needed to run the site securely: IP address (for rate limiting and fraud prevention), error reports without personal content, and the cookies described in our Cookie Policy.
3. Why we use it, and our legal basis
| Purpose | Legal basis |
|---|---|
| Selling and delivering your eSIM, running your account | Contract |
| Payments, refunds and wallet credit | Contract |
| Keeping accounting and tax records | Legal obligation |
| Defending chargebacks and preventing fraud | Legitimate interest |
| Stopping the same person claiming the referral discount twice | Legitimate interest |
| Marketing emails (only if you opt in) | Consent |
You can withdraw consent for marketing emails at any time from your Profile or from the link in any of those emails.
4. Who we share it with
We use these service providers. Each one may only use your data to provide its service to us.
| Provider | What for | Where |
|---|---|---|
| Stripe | Card and wallet payments, refunds | US, Ireland |
| Our eSIM network partner | Creating and managing your eSIM | UK |
| Resend | Sending emails (sign-in links, receipts, QR codes) | US |
| Vercel | Hosting the website | US, EU |
| PlanetScale | Database | US |
| Sentry | Error monitoring, without personal content | US |
| Sign in with Google (only if you choose it) | US |
We don't sell your data and we don't share it with advertisers.
5. International transfers
Some providers process data outside the UK. When they do, the transfer is covered by the UK–US data bridge or by the UK International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses.
6. How long we keep it
| Data | How long |
|---|---|
| Name, email, preferences, sessions, referral code, eSIM install codes | Until you delete your account |
| Evidence for card disputes (Stripe customer, purchase email, ICCID, usage times) | 120 days after the later of the order date and the end of the eSIM, and never more than 540 days after the order |
| Financial records, without your name or email | 6 years after the end of the financial year they belong to |
| A one-way hash of a deleted account's email | While the referral program runs, only to stop a second first-order discount |
7. Deleting your data
You can delete your account on our account deletion page with a code we email you, or from Profile → Delete account. Everything that identifies you is removed straight away, and the records we must keep are separated from your identity. The full process, including deletion by email, is on that page.
Bought as a guest? Use the contact form and choose Delete my data. We'll ask you to confirm you own the email used for the order, then remove it.
8. Your rights
Under UK GDPR you have the right to:
- get a copy of your data;
- have wrong data corrected;
- have your data deleted;
- object to, or ask us to restrict, how we use it;
- receive your data in a portable format;
- withdraw consent at any time.
Email [email protected] to use any of these rights. We reply within one month. If you're not happy with our answer, you can complain to the ICO.
9. Children
eSimu is not meant for children under 16, and we don't knowingly collect their data.
10. Changes
If we change this policy, we update the date and version at the top. If the change matters, we'll also tell you by email before it applies.
© 2026 eSimu. All rights reserved.
Questions about this page?
Our support team can explain any part of it. Message us and we'll get back to you.