Privacy Policy.

eSIM.London is the business name used on this travel eSIM website. For UK data protection purposes, the person or business deciding how and why personal data is used is the data controller.

For privacy enquiries, email info@esim.london or use our Contact & Support form.

Depending on the features you use and which services have been activated, information may include:

• Account details: name, email address, account identifiers and sign-in information.
• Orders and payments: billing details, items ordered, transaction references, order history and fulfilment status. Payment-card details, where applicable, are handled according to the selected payment provider's arrangements.
• Enquiries and support: information you provide in a message, including any order number and device information you choose to share.
• Technical information: IP address, browser or device information, server logs, security events, and cookie preferences where applicable.

Our Contact & Support form is active. When you submit an enquiry, we receive the details you provide, such as your name, email address, enquiry type, subject and message, so we can respond. Please do not send passwords, payment-card details or eSIM activation codes.

Different uses of personal information require an appropriate lawful basis under UK data protection law. The following describes planned uses and the bases typically relevant to them, subject to a final review of our actual processing.

Where we rely on legitimate interests, these include keeping the website secure and handling genuine customer requests, balanced against people's rights and expectations.

Personal information may need to be shared with service providers involved in operating eSIM.London, to the extent needed for their role. These may include:

• Website hosting and technical providers such as IONOS and services used to operate and secure WordPress.
• Payment service providers if and when online payments are enabled.
• eSIM suppliers and fulfilment partners if required to provide purchased plans or resolve service issues.
• Email and contact-form service providers used to receive, deliver and manage enquiries sent through our contact form or to info@esim.london.
• Professional advisers, regulators or authorities when necessary or legally required.

The provider list and processing arrangements remain under review and must reflect services already in use as well as any introduced when purchasing becomes available.

Travel eSIM fulfilment and some online services can involve organisations outside the UK. If personal information is transferred internationally, we must assess the destination and apply an appropriate UK legal transfer mechanism or safeguard where required.

Countries, recipients and transfer safeguards will be confirmed after suppliers and service providers are selected, and before international transfers are enabled.

Cookies may be used for essential website functions such as maintaining a shopping basket, account sessions, security and remembering settings. Some optional tools — for example analytics or advertising — may use additional cookies if introduced.

Where UK law requires consent for non-essential cookies or similar technologies, those tools must not operate until the relevant choice is obtained. The final Cookie Policy and consent controls will be completed after the website's plugins and tracking services are audited.

We should retain personal information only for as long as needed for the purpose for which it was collected, including any relevant legal, accounting or dispute-resolution requirements.

• Order and financial records: for the period required by applicable UK accounting and tax rules.
• Customer accounts: while needed to provide the account and for a justified period afterwards.
• Support correspondence: for a period proportionate to responding to, following up and documenting requests.
• Technical and security logs: only for a justified operational or security period.

Specific retention periods or detailed criteria will be set after a review of the actual systems and legal obligations.

We aim to use appropriate technical and organisational protections, including controlled administrative access, secure connections, software maintenance, data minimisation and suitable service-provider arrangements. No online system can promise absolute security.

Under UK data protection law, you may have rights to access, correct or erase information, restrict or object to some uses, and receive or transfer certain information. Rights depend on the circumstances and lawful basis.

Where consent is the lawful basis, you can withdraw it at any time without affecting processing that was lawful before withdrawal.

You can complain to the UK Information Commissioner's Office (ICO) if you are concerned about how personal information is handled.

Some account and order information may be necessary to provide services a customer requests. If essential information is not provided, the relevant account or order may not be possible.

We do not currently plan solely automated decisions that produce legal or similarly significant effects on individuals. Any such practices, or new types of profiling, would need a separate assessment and appropriate notice before use.

This policy will be reviewed as the website and its data-handling practices change, including any future checkout or eSIM supplier arrangements. Material changes to how information is used will be communicated when required by law.

Draft prepared: 17 October 2026. Contact details and form information updated: 1 November 2026. This remains a working draft pending completion of the outstanding information and review.

For questions about this policy or to make a request concerning your personal information, contact eSIM.London at info@esim.london. You can also use our Contact & Support form.

Please explain your enquiry or request and provide an email address where we can reply. We may need proportionate information to verify your identity before disclosing or changing personal information. Please do not send identity documents unless we request them and explain how to provide them securely.