What data we ask for
To sell you an eSIM, eSIM World asks for one piece of data: your e-mail. That’s where the QR code and the link to your order arrive. Everything else comes from what you choose (destination and plan) or is generated when we take the payment and issue the eSIM. We don’t ask for your name, address or passport.
With each order, our database keeps your e-mail, the destination, the plan, the price in pounds, the purchase and payment dates, the payment identifiers returned by Stripe and, if you ticked it, the time you agreed to immediate delivery of the eSIM. After the eSIM is issued, it adds the eSIM’s technical data: the ICCID number and the activation code in the QR. We use these to show you your order, resend the QR code and check how much data you have left. If you used a discount coupon, the order records the code and the discount. The order also records where you came to the site from — for example, a search engine or a campaign link — unless you have switched statistics off.
If you buy for someone else, you also give us their e-mail: we use it only to send them the same eSIM. If you send the cancellation form, we keep what you wrote in it (your name, e-mail, order number and message) to handle your request. Your IP address is used as an attempt counter that limits repeated orders and forms from the same connection. If you write to us on WhatsApp or by e-mail, we keep the conversation to resolve your case; WhatsApp processes those messages under its own policy.
We don’t sell your data and don’t share it with advertising networks: the site loads no advertising pixels. We don’t send marketing e-mails: only e-mails about your order.
Why we use it, and on what legal basis
- To perform the contract with you (UK GDPR Article 6(1)(b)): taking the payment, issuing and delivering the eSIM, your order page, refunds, cancellations and support.
- To meet legal obligations (Article 6(1)(c)): keeping records of sales and payments, and of your choice about the right to cancel.
- Our legitimate interests (Article 6(1)(f)): keeping checkout safe by limiting repeated attempts, handling disputed card payments and legal claims, and visit statistics that show where checkout fails. The statistics use a random visitor ID, without your name, e-mail or IP address, and you can switch them off at any time (see “Cookies and browser storage” below).
If you give us someone else’s e-mail to send them the eSIM, please make sure they know.
Who else processes your data
Each of these receives only what it needs for its part.
- Payment — Stripe (United States). Stripe processes the card payment in pounds. You enter your card details on Stripe’s payment page: they don’t pass through our server and eSIM World doesn’t store your card number. We send Stripe your e-mail, the order number, the destination, the plan and the amount. Stripe processes this under its own policy (stripe.com/privacy).
- Hosting and e-mail — Cloudflare (United States). Cloudflare hosts the site and the order database and sends the e-mails with your eSIM. Like any host, it processes the technical data of each visit, such as your IP address, to serve the pages.
- Our eSIM network partner. We send it only the plan you bought and an internal order number — not your e-mail or name. It returns the eSIM’s technical data; with the ICCID we check your balance. When you use the eSIM, the connection goes through the partner’s network and the local network at your destination.
- Our sales records (CRM). Each paid order is recorded for bookkeeping with the order number, the amounts, the destination, the plan, the Stripe payment reference and the coupon code — no name, no e-mail and no device data.
- Our team chat (Telegram). The team gets a message about each order with the order number, destination, plan, amount and your e-mail masked (only the first and last letter before the @). Messages about a cancellation or an eSIM replacement also contain the eSIM’s ICCID and the Stripe payment reference.
This policy doesn’t cover what your UK mobile network processes when you use its roaming; that is governed by your network’s own policy.
Transfers outside the UK
The seller is in the United States, as are Stripe and Cloudflare; our network partner and team tools also operate outside the UK. Your e-mail, the order details and the payment confirmation travel to them only for the purposes on this page, over encrypted connections. Your card details go straight to Stripe.
How long we keep it
Your order record is kept so we can show you your eSIM again and handle refunds, cancellations and payment queries; the order system doesn’t delete orders automatically, and you can ask us to delete yours. Attempt counters are deleted after a day. Visit statistics are deleted after 3 months. Payment records kept by Stripe follow Stripe’s own retention policy. Support conversations are kept while we need them for your case. Items in your browser last as shown in the table below.
Your rights
Under UK data protection law you can ask us to:
- access your data and get a copy of it;
- correct data that is wrong or incomplete;
- erase your data when it’s no longer needed;
- restrict how we use it, or object to uses based on our legitimate interests, such as the statistics;
- give you your data in a machine-readable format, or send it to someone else.
Send your request to support@esimworld.co.uk or on WhatsApp, with the e-mail or order number of the purchase. A cancellation, a refund request, a complaint or a privacy request counts as made when it reaches us on WhatsApp, at support@esimworld.co.uk or through the cancellation form on this site. For a complaint or a privacy request, put “Complaint” or “Privacy request” in the e-mail subject or at the start of your WhatsApp message. We answer free of charge and within one month. Before deleting an order record we’ll warn you: without it you can’t open your eSIM from the order page. An eSIM that has already been issued can’t be withdrawn.
If you aren’t happy with how we handle your data, you can complain to the Information Commissioner’s Office (ICO), ico.org.uk, phone 0303 123 1113. We’d appreciate the chance to sort it out first.
Cookies and browser storage
The site doesn’t set its own cookies and doesn’t load third-party analytics or advertising tools: no Google Analytics, no social media pixels. It does keep a few items in your browser’s storage, listed below. They stay on your phone or computer, not in our order database. Some are needed for the service you ask for (the order you’re paying for, the coupon from a link); the others remember your choices or count visits, and you can clear them at any time.
| Item in your browser | What it’s for | How long it lasts |
|---|---|---|
| Visitor ID (esimuk-vid) | A random code to count visits without counting the same person twice; not created when statistics are off | Until you clear the site’s data |
| Statistics off (esimuk-optout) | Remembers that you switched off statistics in this browser | Until you clear the site’s data |
| Your e-mail (esimuk-contact) | Pre-fills the order form next time you buy | Until you clear the site’s data |
| Unpaid order (esimuk-pending) | Shows a link back to an order you started but didn’t pay for | Used for 24 hours |
| Paid-order mark (esimuk-paid-…) | Counts a paid order once in our statistics; holds only the mark “1” | Until you clear the site’s data |
| Coupon from a link (esimuk-promo) | Applies the coupon at checkout | Used for 30 days |
| Appearance (esimuk-theme) | Remembers the look you chose (Apple or Android) | Until you clear the site’s data |
| Last destination (esimuk-last-dest) | Remembers the destination you last chose in the data calculator on the home page | Until you clear the site’s data |
| Visit source (esimuk-src) | The site you came from, the link’s utm tags and the first page you opened | Until you close the tab |
| Last external source (esimuk-src-last) | The site you came from or the utm tags, with no personal data: if you come back and buy, we know where the order came from | 30 days, then deleted |
Your browser also tells our own server which pages you open, which checkout steps you take, how long a page was on screen and how far you scrolled, and which FAQ question or phone check you open. These events carry the visitor ID, the page you came from and the utm tags, but not your e-mail. They’re kept for 3 months in Cloudflare and then deleted automatically. Through the order number, checkout events can be linked to your order and so to your e-mail. We don’t store your IP address, your browser’s name or what you type into the search.
To switch off statistics and the visit source in this browser, use the button below. The site then deletes the visitor ID and the saved visit source and stops sending events. If your browser sends a Global Privacy Control signal, statistics are off without the button.
The payment page belongs to Stripe: what it stores in your browser is governed by its own policy. You can delete the items in the table from your browser settings, under the site’s data.
Contact
The controller is the seller, JET SHARING MOBILITY INC., 11562 West Ride Drive, Jacksonville, FL 32223, United States. Write to support@esimworld.co.uk or on WhatsApp, starting with “Privacy request”. The terms of purchase are in the terms and conditions. We update this policy when the data we ask for or the companies that process it change; the date of the last update is at the top.