1. Controller
eSIM Tech B.V. (trading as HyperMobile), the Netherlands, is the controller for the processing described here. Contact: support@hypermobile.eu.
2. What we collect and why
Order data — your email address, purchased bundle, payment method type and billing country: to deliver your eSIM, send transactional email and comply with tax law (legal bases: contract performance and legal obligation).
eSIM data — the ICCID, activation codes and data usage of your eSIM, provided by our network partner: to show your usage in My eSIM and provide support (contract performance).
Account access — one-time login links sent to your email; a signed session cookie keeps you logged in for 30 days (contract performance).
Support conversations — chat messages via Intercom and emails to support (legitimate interest in providing support).
3. What we do not do
We do not sell personal data, we do not use it for third-party advertising, and we do not inspect the content of your internet traffic. Payment card details are handled exclusively by Stripe and never reach our servers.
4. Processors
We use a small set of processors to run the service: Stripe (payments), GoSIM / network partners (eSIM provisioning and usage), Supabase (database hosting, EU region), Vercel (website hosting), Postmark (transactional email) and Intercom (support chat). Each processes data only on our instructions under a data processing agreement.
5. Retention
Order and invoice data is kept for 7 years (Dutch tax law). eSIM and account data is kept while your account is active and removed on request where no legal duty requires retention. Login links expire after 15 minutes; expired tokens are deleted automatically.
6. Your rights
Under the GDPR you can request access, correction, deletion, restriction, portability, and object to processing. Email support@hypermobile.eu; we respond within 30 days. You can also complain to the Dutch supervisory authority (Autoriteit Persoonsgegevens).
7. Cookies
We use a functional session cookie for My eSIM login, a language preference cookie, and Intercom's functional cookies for the support chat. We use no advertising or cross-site tracking cookies.
8. International transfers
Where processors handle data outside the EEA (e.g. US-based infrastructure), transfers rely on adequacy decisions or Standard Contractual Clauses.
9. Changes
We may update this policy; material changes will be announced on the website.