Privacy Policy

Who is responsible for your data

The operator of this store. That operator is not registered as a company yet, so this page cannot name a data controller, a registered address, or a data-protection contact.

The gap is stated on purpose. An invented company name on a privacy policy is worse than an admitted gap — it is the one document where a reader is entitled to assume every word is checkable. The details will be published here, and in the footer, before the store accepts real payments.

What is collected, and why

• Your email address — so the eSIM can be sent to you and order emails have somewhere to go. This is the one piece of data the store genuinely cannot work without.
• Your name and billing address — the checkout asks for them because WooCommerce requires a billing address before it will create an order.
• Account details, if you create an account — your email and a password. The password is stored as a one-way hash and is never held in readable form.
• Order records — what was bought, when, for how much, and the identifiers of any eSIM line issued against it.
• Server logs — the web server records requests: IP address, time, page, browser string. Operational records, the same as any web server keeps. They are not used to build a profile of you.

What is not collected

• No third-party analytics and no advertising. This site loads no analytics service, no tag manager and no advertising pixel. Every script and stylesheet on a page comes from this site’s own domain. The shop software does record how you arrived at the site, on your own device and for its own use — that is described under Cookies below.
• No card details. There is no card processor connected, so no card data reaches this site. When a processor is installed, card data will go straight to it and never touch this site’s database — and this page will name it before that happens.
• No profiling, no ad targeting, no data sold or shared for marketing. There is no mailing list to be added to.

Cookies

All of them are set by this site itself. No third party can read any of them.

• Arrival cookies (names beginning sbjs_) are set as soon as you open any page. The shop software uses them to remember how you arrived — the site that referred you or the campaign parameters in the link, the first page you landed on, and a timestamp and page count for the visit, together with your browser’s own description of itself. If you later place an order, that is attached to the order so the store can see where its orders come from.
• A basket cookie and a session cookie are added the first time you put a plan in the basket, so the basket survives a page load.
• Sign-in cookies are added when you log in, and are what keeps you logged in.
• Nothing else. No advertising network, no analytics service and no social widget sets anything here, because none of them are loaded.

You were not asked to consent to the arrival cookies. A consent banner is installed but is not currently being shown — a known gap that will be closed before the store opens. The list above is the complete set; none of it is used for advertising, and none of it leaves this site.

Who else sees your data

Your name, your email address and your billing address are never sent to the eSIM supplier.

• The eSIM supplier. To create a line we send exactly three values: which plan, how much data, and how many days. Nothing that identifies you is in that request.
• The hosting provider. The site and its database run on a rented server, and the provider can technically reach that machine — as is true of any hosted site.
• Email delivery. Order emails are sent by the site’s own server. A delivery service is installed but not yet configured with a provider; when one is, this page will name it.

That is the whole list. There is no fourth party.

How long it is kept

• Order records — kept for as long as the store needs them to answer questions about a past order, and because sales records generally have to be retained. Once the operator is registered, this line will state the exact period its jurisdiction requires instead of describing it.
• Account details — kept until the account is deleted.
• Server logs — rotated on the hosting provider’s schedule.

Your rights

You can ask what is held about you, ask for it to be corrected, ask for a copy of it, and ask for it to be deleted.

There is no request channel to send that to yet — see below. The store is not open, so the only order data on this site belongs to our own test orders.

Changes to this document

This policy will change as the store is built out — a payment processor and an email provider are both still to be named. The date at the top is the date of the last change; the same applies to the Terms of Service.

How to reach us

There is no support channel yet — no monitored mailbox, no phone line, no chat. Publishing an address that nobody reads would be one more promise this store cannot keep, so there is none to publish.

Where this site invites you to “contact us”, that is how it will work once the store opens. Today there is nothing behind it.

A contact route will be published together with the operator’s registered details, before the first real payment is accepted.