1. Introduction

eSIM KH ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

2. Information We Collect

2.1 Personal Information

We collect information that you provide directly to us, including:

• Name and contact information (email address, phone number)
• Payment information (processed securely through third-party payment processors)
• Account credentials (username, password)
• Order history and purchase details
• Communication preferences

2.2 Automatically Collected Information

When you visit our website, we automatically collect:

• IP address and location data
• Browser type and version
• Device information
• Pages visited and time spent on pages
• Referring website addresses
• Cookies and similar tracking technologies (see our Cookie Policy)

3. How We Use Your Information

We use the collected information for the following purposes:

• Process and fulfill your orders
• Deliver eSIM QR codes and service information
• Provide customer support and respond to inquiries
• Send order confirmations and updates
• Improve our website and services
• Send marketing communications (with your consent)
• Detect and prevent fraud
• Comply with legal obligations
• Analyze usage patterns and trends

4. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: With third-party service providers who perform services on our behalf (payment processing, email delivery, analytics)
• Network Partners: With eSIM network providers to activate and manage your eSIM service
• Legal Requirements: When required by law or to protect our rights and safety
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly authorize us to share your information

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption of sensitive data in transit and at rest
• Secure payment processing through PCI-compliant providers
• Regular security assessments and updates
• Access controls and authentication measures
• Employee training on data protection

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services and fulfill orders
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Maintain business records as required by law

When information is no longer needed, we securely delete or anonymize it.

7. Your Rights and Choices

Depending on your location, you may have the following rights:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Portability: Request transfer of your data
• Objection: Object to processing of your information
• Restriction: Request restriction of processing
• Withdraw Consent: Withdraw consent for marketing communications

To exercise these rights, please contact us using the information provided in the Contact section.

8. Cookies and Tracking Technologies

We use cookies for essential authentication purposes only. Our authentication provider (Supabase) sets cookies to maintain your login session securely. We do not currently use cookies for analytics, advertising, or marketing purposes. For detailed information, please see our Cookie Policy.

Note: We use localStorage and sessionStorage for caching and storing user preferences (such as cached product lists and admin settings). These are separate from cookies and are stored locally on your device. They are not shared with third parties.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

10. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of our services after changes are posted constitutes acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: privacy@esimkh.com
• Website: Contact Us