SimVantara Privacy Policy

1. Scope

Covers personal data when you buy travel eSIM plans at simvantara.com, use the Website, contact support, or use plans from a business partner. A partner that bought your plan may also process your data under its own notice.

2. Data we collect

• Contact: name, email; address, country and phone for orders or invoices.
• Order: plans bought, references, delivery and support records, business invoicing.
• Payment: processed by licensed providers; we see confirmation and limited details (amount, currency, reference, result), never full card numbers.
• eSIM: identifiers to set up and run your profile (ICCID, activation/QR data) and diagnostics.
• Device and technical: IP address, device and OS, browser, language, approximate location from IP.
• Usage: pages and email interactions via cookies (see Cookie Policy).
• Communications and marketing: messages you send us and your offer preferences.

3. Where data comes from

You (orders, account, support, updates); your device and Website use (cookies); business partners (a plan bought for you); payment providers (confirmations and limited details).

4. Why we use it, and our legal basis

We process data only with a lawful basis under the EU/UK GDPR and Cypriot law, and never make automated decisions or profile you with legal or similarly significant effects.

5. Who we share data with

• Payment providers, acquirers and settlement partners.
• Yesim (Genesis Group AG, Switzerland), our eSIM platform provider.
• Hosting, email and infrastructure providers.
• Analytics and advertising providers, only with consent to non-essential cookies.
• Business partners where a plan was bought through them.
• Professional advisers and public authorities where law requires, or to defend legal claims.
• A successor on a reorganisation or sale, on equivalent terms.

6. International transfers

Data may be processed outside the EEA, including Switzerland and the UK. We rely on an EU adequacy decision or standard contractual clauses with safeguards, so protection stays essentially equivalent to GDPR.

7. How long we keep data

• Orders, invoices, payments: as Cypriot tax law requires — generally six years after the tax year.
• Account: while active and for a reasonable period after.
• Support: up to 24 months after the last contact.
• Marketing: until consent is withdrawn or engagement stops, then deleted or anonymised.
• Technical and analytics: normally no more than 14 months, longer only for security or legal claims.

8. Your rights

Under the GDPR (and UK GDPR) you may access and copy your data; correct inaccurate or incomplete data; erase data; restrict or object to processing; port data to another controller where feasible; withdraw consent at any time (without affecting earlier lawful processing); and complain to a supervisory authority.

Email support@simvantara.com to exercise a right; we reply within one month and may verify your identity. Reasonable requests are free. You may also complain to Cyprus’s Commissioner for Personal Data Protection or the UK ICO.

9. Security

We use appropriate technical and organisational measures: encryption in transit, need-to-know access, and a payment flow that never stores full card numbers. No internet transmission is fully secure — keep your credentials private and report suspected misuse.

10. Children

For adults only; you must be 18+ to buy. We do not knowingly collect children’s data — email support@simvantara.com and we will delete it.

11. Cookies

Essential cookies run checkout; non-essential cookies (analytics, marketing) only with consent, changeable via the banner. See simvantara.com/cookies.

12. Changes

We may update this policy; the Website version applies. Material changes affecting your rights are highlighted on the Website or notified to you.

13. Contact

S.K. SAFENET CONSULTING LIMITED · Kyllinis 18, Mesa Geitonia, 4007 Limassol, Cyprus · support@simvantara.com · +35794333431.