Privacy policy

1. Who is responsible for your data

The data controller is FYCORPS IT SOLUTIONS FZCO, DUBAI , UAE, registration Dubai Integrated Economic Zones Authority (IFZA) (“Simcation”, “we”). For any privacy question or request, contact [email protected].

2. What we collect

• Order data: your email address, the plan and destination you bought, the price, currency and date, and your order reference.
• eSIM data: the identifiers of the eSIM issued to you (ICCID and activation code), needed to deliver it and to help you if something goes wrong.
• Payment data: payments are handled by Stripe. We receive the payment status, the amount and limited card details (such as card brand and last four digits). We never receive or store your full card number or security code.
• Consent records: the time you confirmed that your phone is compatible and that you asked for immediate delivery.
• Technical data: your approximate country (from your connection, used only to show prices in euros or dollars), your language, and standard server logs (such as IP address, browser and time of request) kept for security and troubleshooting.
• Support messages: anything you send us by email.

3. Why we use it and on what legal basis

• To sell and deliver your eSIM and provide support: necessary to perform our contract with you.
• To keep accounting and tax records and handle refunds or payment disputes: necessary to comply with legal obligations.
• To prevent fraud and keep the website secure: our legitimate interest in protecting customers and our business.
• To show the right currency and language: our legitimate interest in giving you a site that works for you.

4. Who we share it with

We do not sell your personal data and do not use it for advertising. We share it only with service providers that help us run the service, under contracts that require them to protect it:

• Stripe (payment processing and fraud prevention).
• Our eSIM supplier, which issues the eSIM and connects it to partner mobile networks.
• Our email provider, which sends your eSIM and order emails.
• Our hosting provider, which runs the website.

We may also disclose data when the law requires it, for example to tax authorities or in response to a valid legal request.

5. International transfers

We and some of our providers are located outside the European Economic Area and the United Kingdom. When your data is transferred abroad, we rely on safeguards recognised by data protection law, such as the European Commission’s standard contractual clauses or an adequacy decision.

6. How long we keep it

• Order, payment and invoice records: for as long as tax and accounting laws require, generally between 5 and 10 years.
• eSIM identifiers: for the life of the plan and up to 12 months afterwards, to handle support and refund requests.
• Support emails: up to 24 months after the conversation ends.
• Server logs: up to 90 days.

7. Cookies

We use only cookies that are needed for the website to work. We do not use advertising or tracking cookies.

• ls_currency: remembers your currency (EUR or USD), 30 days to 1 year.
• ls_locale: remembers your language, 1 year.
• ls_promo: remembers a promo code from a link you opened, 7 days.
• ls_consent: remembers your checkout confirmations while you pay, 30 minutes.
• Stripe sets its own cookies on the payment form to process payments securely and prevent fraud.

8. Your rights

Depending on where you live, you can ask us to give you a copy of your data, correct it, delete it, restrict or object to its use, or send it to another provider. Some data must be kept for legal reasons (for example invoices), and we will tell you if that applies.

To make a request, email [email protected] from the address you used to order. We reply within one month. If you are in the EU or UK and are not satisfied with our answer, you can complain to your local data protection authority.

9. Security

We protect your data with encrypted connections (HTTPS), restricted access to our systems and providers that meet recognised security standards. Card payments are processed by Stripe, which is certified to the highest payment industry standard (PCI DSS Level 1).

10. Children

Our service is intended for adults. We do not knowingly collect data from children under 16. If you believe a child has given us personal data, contact us and we will delete it.

11. Changes to this policy

We may update this policy. The date at the top shows the latest version. If a change is significant, we will make it clear on the website. See also our terms of use and refund policy.