Privacy Policy
Privacy Policy
Last updated: 17 June 2026
This Privacy Policy explains what personal data H2osim ("we", "us") collects when you use our website and services, why we collect it, how we protect it, and the rights you have. We are committed to collecting the minimum data necessary to operate the Service. For the purposes of the EU/UK General Data Protection Regulation (GDPR), H2osim is the data controller.
1. Data we collect
- Order data — the Telegram username you provide and the products you purchase. This is required to deliver your eSIM.
- Optional contact data — an email address or note, only if you choose to provide one for support.
- Technical and analytics data — pages visited, referring source, approximate device/browser type, language, and a one-way hashed IP address. We do not store your raw IP address for analytics.
- Cookies and similar technologies — see our Cookie Policy.
We do not require identity documents, and we do not ask for or store payment card numbers on our servers; payments are handled by the method shown at checkout.
2. How we use your data
- to process, confirm and deliver your order, and to provide support;
- to operate, secure and improve the website (including fraud prevention and aggregated, anonymised analytics);
- to comply with legal obligations and respond to lawful requests.
3. Legal bases (GDPR)
- Performance of a contract — to fulfil the order you place.
- Legitimate interests — to keep the Service secure, prevent abuse, and understand usage through privacy-friendly analytics, balanced against your rights.
- Consent — for non-essential cookies and analytics, where required. You can withdraw consent at any time.
- Legal obligation — where the law requires us to retain or disclose information.
4. Cookies and analytics
We use essential cookies needed for the site to work (such as your session, security/CSRF token, language and theme preference) and, only with your consent where required, privacy-friendly analytics. Analytics use a hashed IP and do not build advertising profiles. Full details, including how to manage your choices, are in our Cookie Policy.
5. Sharing and disclosure
We never sell your personal data. We share data only with:
- eSIM providers and mobile operators strictly as needed to provision your eSIM and number;
- infrastructure and delivery providers (such as our hosting and Telegram) acting as processors on our behalf;
- authorities, where disclosure is legally required.
6. International transfers
Because mobile networks and our providers may operate in different countries, your data may be processed outside your country of residence. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for such transfers.
7. Data retention
We keep order data only as long as necessary to fulfil the order, provide support, and meet legal and accounting obligations, after which it is deleted or anonymised. Hashed analytics data is retained in aggregated form and is not linked to your identity.
8. Security
We apply technical and organisational measures to protect your data, including HTTPS, a Content Security Policy, CSRF protection, IP hashing and access controls. No system is perfectly secure, but we work to reduce risk and respond promptly to incidents.
9. Your rights
Subject to applicable law, you have the right to:
- access the personal data we hold about you;
- request correction of inaccurate data;
- request erasure of your data ("right to be forgotten");
- restrict or object to certain processing;
- data portability;
- withdraw consent at any time, without affecting prior processing;
- lodge a complaint with your local data protection supervisory authority.
To exercise any right, contact us using the details below. We may need to verify your request before acting on it.
10. Children
The Service is not directed at, and may not be used by, anyone under 18. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.
11. Changes to this Policy
We may update this Policy from time to time. The current version, with its "Last updated" date, is always available on this page. Material changes will be reflected here.
12. Contact
For any privacy request or question, contact us on Telegram.