Privacy Policy

This policy explains how SimCliQ ("SimCliQ", "we") collects and uses personal data when you use our website and app. We are the data controller. Contact: privacy@simcliq.com, Mastbos 517, 2134 NN Hoofddorp, the Netherlands (KvK 76153614).

1. Data we collect

• Account & contact — your email and any details you provide.
• Order & eSIM data — plans purchased, eSIM identifiers (such as ICCID), activation status and data-usage figures returned by our connectivity partner.
• Payment — processed by Stripe; we receive confirmation and limited metadata, not your full card number.
• Technical — your IP address, used only transiently to prevent abuse (e.g. rate-limiting sign-in requests) and never stored; and, if you enable push notifications in our app, a device token (see Section 4).

2. How we use it and our legal basis

• To provide and deliver your eSIM and support you — performance of a contract.
• To process payments and prevent fraud — legal obligation / legitimate interests.
• To improve and secure the service — legitimate interests.
• To send marketing, only where you've opted in — consent.

3. Who we share it with

We share data only with processors that help us run the service, under appropriate agreements: our connectivity partner (eSIM Access / RedteaGO) to provision and manage eSIMs, Stripe for payments, our email and hosting providers. We do not sell your personal data.

4. Push notifications and device tokens

If you install our iOS app and enable notifications, we store a device push token — a unique identifier issued by Apple for your device — linked to your account, so we can notify you about your eSIM (for example, when it's ready to use). This token is sent only to Apple's Push Notification service (APNs) to deliver the notification; we don't use any other push, analytics, or advertising provider. You can turn notifications off at any time in your device's Settings, and the token is deleted if you delete your account.

5. International transfers

Some processors may operate outside the EEA. Where they do, we rely on adequacy decisions or Standard Contractual Clauses to protect your data.

6. Retention

We keep personal data only as long as needed for the purposes above and to meet legal and accounting obligations, then delete or anonymise it.

7. Your rights

Under the GDPR you can request access, correction, deletion, restriction, portability, and object to certain processing, and withdraw consent at any time. To exercise these, email privacy@simcliq.com. You may also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

8. Cookies

We don't use cookies. Signing in works via a token stored in your browser's local storage rather than a cookie, and we don't run any analytics, advertising, or tracking scripts of any kind.

9. Security

We use industry-standard measures to protect your data. No method is perfectly secure, but we work to safeguard it and to notify you and regulators of breaches where required.

10. Children

The service is not directed at children under 18, and we do not knowingly collect their data.

11. Changes

We'll post updates here and, for material changes, notify you in the app or by email.