Privacy Policy

1. Who we are

eSIM Coffee operates esim.coffee and sells international mobile data plans (eSIM) to travellers.

To be completed before launch: registered name, company number, registered address and the contact for data protection. These depend on the jurisdiction decision.

2. What we collect

We do not collect card details. Payment happens entirely in the payment provider's environment. We receive only confirmation that payment succeeded, and a reference for a possible refund.

• Email. Required to deliver your QR code and give access to your order page. Without it there is no way to deliver the product.
• Order data. Plan, destination, amount, date and status.
• Compatibility confirmation. We record that you confirmed your device supports eSIM. We do not collect the model or any device identifier.
• Technical data. IP address and server access logs, kept for security and diagnostics.

3. Why we process it

We do not sell your data and we do not use it for third-party advertising.

• Performing the contract. Delivering the eSIM you bought, supporting it and processing refunds.
• Legal obligation. Retaining tax and payment records for the period the law requires.
• Legitimate interest. Preventing fraud and keeping the service running.

4. Who we share it with

• Payment provider (Stripe). Receives what it needs to process the charge.
• Connectivity supplier. Receives only the order reference and the plan to provision — not your email or personal data.
• Infrastructure. Servers and database used to run the service.

5. How long we keep it

• Order data: for the statutory tax retention period.
• Payment webhook records: 30 days.
• Server access logs: a short period, for diagnostics.

6. Your rights

You can request access, correction, deletion or portability of your data, and object to certain processing. Write to us from the contact page using the email you bought with. We answer within the applicable statutory period.

If you are in the EU these rights come from the GDPR; in Brazil, from the LGPD (Law 13.709/2018); in the UK, from the UK GDPR.

7. Cookies

The site uses no advertising or cross-site tracking cookies. We store one local preference — your chosen language — in your browser, which never leaves your device. If that changes, this page changes first.

8. Changes

When this policy changes we update the date at the top. Material changes are emailed to anyone with an active order.