PRIVACY POLICY

Last Updated: 2025-08-23

1. INTRODUCTION

TAOSIR LTD ("Company", "we", "us", or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website and services.

This Policy complies with the General Data Protection Regulation (GDPR) and other applicable privacy laws. By using our services, you consent to the data practices described in this Policy.

2. DATA CONTROLLER

TAOSIR LTD
Registered in the United Kingdom
Email: support@esimnb.com

We are the data controller responsible for your personal data processed in connection with our services.

3. INFORMATION WE COLLECT

3.1 Personal Information You Provide

We collect the following personal information directly from you:

Email Address: Required for account registration and service delivery
Contact Information: When you contact us through our support channels
Communication Records: Records of your communications with our customer support team

3.2 Information We Do NOT Collect

We do NOT collect:

Names or personal identification details beyond email address
Phone numbers (unless voluntarily provided for support)
Physical addresses
Payment card details (processed securely by third-party payment processors)
Device location data
Browsing behavior tracking
Personal preferences or demographic information

3.3 Automatically Collected Information

We use web analytics tools (similar to Google Analytics) that may collect:

General website usage statistics
Anonymous traffic patterns
Technical information for website performance optimization

This data is aggregated and anonymized and cannot be used to identify individual users.

4. LEGAL BASIS FOR PROCESSING

Under GDPR, we process your personal data based on the following legal grounds:

Contract Performance: To provide our eSIM services and fulfill our contractual obligations
Legitimate Interest: To operate our business, provide customer support, and improve our services
Consent: For marketing communications (where you have opted in)

5. HOW WE USE YOUR INFORMATION

5.1 Primary Uses

We use your email address for:

Account Management: Creating and managing your user account
Order Confirmation: Sending purchase confirmations and eSIM delivery
Customer Support: Responding to your inquiries and providing technical assistance
Service Communication: Important updates about your orders or account

5.2 Marketing Communications

We may send you promotional emails about our services
You can opt out of marketing emails at any time using the unsubscribe link
Opting out will not affect essential service communications

5.3 Customer Support

We record and store customer support communications (email, WhatsApp, contact forms)
This helps us provide better support and resolve issues effectively
Support records are used solely for customer service purposes

6. DATA SHARING AND THIRD PARTIES

6.1 No Data Sharing

We do NOT share, sell, rent, or trade your personal information with third parties for marketing or commercial purposes.

6.2 Service Providers

We work with the following categories of service providers who may process your data:

Payment Processors:

Airwallex and Stripe process payments securely
They handle payment information according to their own privacy policies
We do not store or access your payment card details

Technical Service Providers:

Web analytics services for website performance monitoring
These services process only anonymized, aggregated data

6.3 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our legal rights and interests.

7. DATA STORAGE AND SECURITY

7.1 Data Location

Your personal data is stored on servers located in the United Kingdom
We ensure appropriate data protection standards are maintained

7.2 Security Measures

We implement industry-standard security measures including:

Encrypted data transmission (SSL/TLS)
Secure server infrastructure
Access controls and authentication
Regular security monitoring and updates
Staff training on data protection

7.3 Data Retention

We retain your personal data indefinitely unless you request deletion
You have the right to request deletion of your personal data at any time
Some data may be retained for legal or regulatory compliance requirements

8. YOUR RIGHTS UNDER GDPR

As a data subject, you have the following rights:

8.1 Right of Access

You can request information about what personal data we hold about you
Contact us to request a copy of your personal data

8.2 Right to Rectification

You can request correction of inaccurate or incomplete personal data
Contact our support team to update your information

8.3 Right to Erasure (Right to be Forgotten)

You can request deletion of your personal data
We will delete your data unless we have legal grounds to retain it
Some information may need to be retained for legal compliance

8.4 Right to Restrict Processing

You can request that we limit how we use your personal data
This may affect our ability to provide services to you

8.5 Right to Data Portability

You can request a copy of your data in a machine-readable format
This applies to data processed based on consent or contract

8.6 Right to Object

You can object to processing based on legitimate interest
You can opt out of marketing communications at any time

8.7 Right to Withdraw Consent

Where processing is based on consent, you can withdraw it at any time
This will not affect the lawfulness of previous processing

9. COOKIES AND TRACKING

9.1 Cookies Policy

We use minimal cookies necessary for website functionality
We do not use cookies for tracking or advertising purposes
Analytics cookies are used to improve website performance (anonymized data only)

9.2 Your Cookie Choices

You can control cookies through your browser settings
Disabling cookies may affect website functionality

10. CHILDREN'S PRIVACY

Our services are not directed to children under 16 years of age
We do not knowingly collect personal information from children under 16
If we become aware of such collection, we will delete the information immediately

11. INTERNATIONAL DATA TRANSFERS

Your data is primarily stored and processed in the United Kingdom
Any international transfers will be conducted with appropriate safeguards
We ensure adequate protection for your personal data in all transfers

12. DATA BREACH NOTIFICATION

In the event of a data breach affecting your personal data, we will:
Notify relevant authorities within 72 hours (as required by GDPR)
Inform affected users if the breach poses a high risk to their rights and freedoms
Take immediate steps to contain and remedy the breach

13. CONTACT US AND COMPLAINTS

13.1 Data Protection Contact

For privacy-related questions or to exercise your rights:

Email: support@esimnb.com
Subject Line: Privacy/Data Protection Inquiry

13.2 Response Time

We will respond to your privacy requests within 30 days
Complex requests may take longer, and we will inform you of any delays

13.3 Complaints

You have the right to lodge a complaint with a supervisory authority
In the UK, contact the Information Commissioner's Office (ICO)
ICO Website: ico.org.uk

14. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time
Material changes will be notified via email to registered users
The "Last Updated" date at the top indicates when changes were made
Continued use of our services constitutes acceptance of the updated Policy

15. THIRD-PARTY LINKS

Our website may contain links to third-party websites
This Privacy Policy does not apply to external sites
We are not responsible for the privacy practices of third-party websites
We encourage you to read their privacy policies

16. BUSINESS TRANSFERS

In the event of a merger, acquisition, or sale of our business
Your personal data may be transferred to the new entity
You will be notified of any such transfer and your rights regarding your data

Important Note: This Privacy Policy is designed to be transparent about our data practices. We are committed to protecting your privacy and handling your personal data responsibly and in compliance with applicable laws.