PRIVACY

PRIVACY POLICY

How esimplytravel ApS collects, uses and protects your personal data.

Last updated: 25 June 2026 · esimplytravel ApS

1. Who we are (data controller)

esimplytravel.com ("eSimply Travel", "we", "us") sells data-only travel eSIMs. The data controller is esimplytravel ApS, CVR 46238648, Doorn Allé 10, 2791 Dragør, Danmark. Contact us or exercise your rights at info@esimplytravel.com.

2. The personal data we process

You give us: • Email address — mandatory; we deliver your eSIM QR code and setup guide here. • Order details — the plan you buy, destination, price, currency. • Support messages — anything you send us. Collected automatically: • A device identifier stored in your browser so the backend can link your order. • Technical data — IP address, browser/device type, approximate location (for fraud prevention and tax determination via our payment provider). • Usage/analytics data — only if you accept analytics cookies (§5). Payment data is entered directly with Stripe and is not stored on our systems; we receive only a confirmation, amount and limited metadata. We do not knowingly process special-category data or data from children (§9).

3. Why we process it, and our legal basis (GDPR Art. 6)

• Purpose — Legal basis • Create your order, take payment, provision the eSIM, email your QR code — Contract (6(1)(b)) • Customer support — Contract / legitimate interests • Fraud prevention, security, service integrity — Legitimate interests (6(1)(f)) • Bookkeeping, tax and legal record-keeping — Legal obligation (6(1)(c)) • Analytics and marketing measurement — Consent (6(1)(a)) — withdrawable anytime

4. Who we share data with

We do not sell your data. We share it only with providers who help us run the service, under data-processing agreements: • Provider — Purpose • Stripe — Payments, tax, fraud • Supabase — Database hosting (orders, accounts) • Mailgun — Transactional email (QR code, receipts) • Google / Firebase — Infrastructure • Google Analytics 4 — Analytics (consent-gated) • Render — Website + API hosting • Monty eSIM (eSIM Hub) — eSIM provisioning • Mobile/maritime network operators — Delivering connectivity To provision your eSIM we pass the minimum necessary data (order + email) to our eSIM supplier and the relevant network operator. We may also disclose data where required by law.

5. Cookies and analytics

Necessary cookies run the site and remember your cookie choice (no consent needed). Analytics (Google Analytics 4) and any marketing cookies load only after you consent via our cookie banner (Google Consent Mode v2 — nothing fires before consent), as required by the Danish cookie rules (cookiebekendtgørelsen). Change your choice anytime via "Cookie settings" in the footer. Cookies in use: necessary (your cookie choice, session/checkout, Stripe fraud-prevention) and analytics (Google Analytics _ga/_ga_), which load only after consent. No marketing cookies are currently set.

6. International transfers

Some providers process data outside the EU/EEA (e.g. the US). Where they do, we rely on an EU adequacy decision or EU Standard Contractual Clauses with appropriate safeguards.

7. How long we keep it

• Order, payment and bookkeeping records: current year + 5 years as required by the Danish Bookkeeping Act (bogføringsloven). • Account/email and eSIM records: as long as needed to support your eSIM and meet legal duties, then deleted or anonymised. • Analytics: per the GA4 retention setting (14 months).

8. Your rights

Under the GDPR you can: access your data; have it corrected or erased; restrict or object to processing; request portability; and withdraw consent at any time (without affecting prior lawful processing). Email info@esimplytravel.com; we respond within one month. You can complain to the Danish supervisory authority Datatilsynet (datatilsynet.dk), or the authority in your EU country of residence.

9. Security and children

We use HTTPS in transit, restrict access to personal data, and use reputable processors; no method is perfectly secure. The service is intended for users aged 18 and over; we do not knowingly collect children's data.

10. Changes and contact

We may update this policy and will change the "last updated" date, with prominent notice for material changes. Contact: esimplytravel ApS, info@esimplytravel.com, Doorn Allé 10, 2791 Dragør, Danmark.