This policy explains what personal data iGlobeSIM (eSIM Global Connect) collects when you visit our website or buy an eSIM, why we collect it, on what legal basis, and the rights you have. It is written to meet the requirements of the EU General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (FADP).

1. Data controller

iGlobeSIM (esimglobalconnect.com) is the data controller for the personal data described in this policy. For any privacy question or to exercise your rights, contact us via our support page.

2. What data we collect

Order and account data — name, email address, billing country and your order history, so we can deliver your eSIM QR code, manage your account and provide support.

Payment data — payments are processed by certified payment providers (card networks, PayPal). We receive only a confirmation and the last digits of your card; we never store full card numbers.

eSIM provisioning data — technical identifiers needed to issue and support your eSIM (such as the ICCID and activation status), processed with our telecom partners. We do not access the content of your communications and we do not monitor your browsing.

Website data — cookies and similar technologies for the shopping cart, login session and aggregated usage statistics.

3. Why we process it and on what legal basis

To perform our contract with you (Art. 6(1)(b) GDPR) — processing orders, delivering and supporting your eSIM, handling refunds.

To comply with legal obligations (Art. 6(1)(c) GDPR) — tax, accounting and consumer-protection law.

Legitimate interests (Art. 6(1)(f) GDPR) — fraud prevention, securing our website and improving our services. We balance these interests against your rights.

Consent (Art. 6(1)(a) GDPR) — optional marketing emails and non-essential cookies. You can withdraw consent at any time with effect for the future.

4. Who we share data with

Only with processors and partners necessary to run the service: payment providers, the telecom partners that provision your eSIM, hosting, email delivery and analytics providers. Each is bound by a data processing agreement. We never sell your personal data.

5. International transfers

Some partners process data outside the European Economic Area and Switzerland. Where that happens, we rely on an adequacy decision of the European Commission or the Swiss Federal Council, or on the European Commission’s Standard Contractual Clauses (with the Swiss addendum where applicable), to protect your data.

6. How long we keep data

Order and invoice records are kept for as long as commercial and tax law requires (typically up to 10 years). Support conversations are kept up to 2 years. Marketing consents until withdrawn. Data that is no longer needed is deleted or anonymized.

7. Your rights

Under the GDPR and the Swiss FADP you have the right to access your data, receive a copy (portability), correct it, have it deleted, restrict or object to processing, and withdraw consent at any time. We respond within 30 days.

You may also lodge a complaint with your local EU data protection authority or, in Switzerland, with the Federal Data Protection and Information Commissioner (FDPIC).

8. Cookies

Essential cookies make the cart, login and checkout work and need no consent. Optional analytics or marketing cookies are used only with your consent, which you can withdraw at any time. You can also delete or block cookies in your browser; blocking essential cookies may break checkout.

9. Security

All traffic to our site is encrypted (TLS/HTTPS), payments are handled by PCI-DSS certified providers, and access to customer data within our team is restricted to what is needed for support.

10. Children

Our services are directed at adults. We do not knowingly collect personal data from children under 16.

11. Changes

If we change this policy in a meaningful way, we will update the date above and highlight the change on this page.