1. Purpose of collection
We collect personal data in order to: process orders and issue eSIMs; send installation QR codes and order notifications; provide technical support during the validity period; issue VAT invoices on request; and send promotional information where the customer has consented.
2. Scope of collection
- Required at checkout: name, email address, phone number.
- Additional, where an invoice is requested: company name, tax code, address.
- Generated through use: order history, eSIMs purchased, correspondence with support.
- We do NOT collect or store card numbers, CVV codes or any other payment card data. All card data is handled directly by the payment gateway.
3. Retention period
Order data is retained for as long as accounting, tax and complaint-handling obligations require under Vietnamese law. Beyond that period, or upon a deletion request, personal data is deleted or anonymised except where the law requires us to keep it.
4. Address of the entity collecting and managing the data
The owning entity's details are published in the footer of every page of this website and on the Terms & policies page.
5. How customers access and correct their data
- Account holders: sign in and view or edit your details under My account; review every order and eSIM under My orders.
- Guest purchasers: email support with your order number; we verify and respond within 24 working hours.
- You may request correction or deletion, or withdraw consent to marketing, at any time, without any restriction on the service you have already purchased.
6. Our data protection commitments
- Personal data is protected in accordance with this policy and Vietnamese law.
- We do NOT sell, trade or rent customer personal data to any third party for commercial purposes.
- Data is shared only as far as necessary to fulfil an order: with our eSIM infrastructure provider (Airalo) to issue the eSIM; with payment gateways (Airwallex, Alepay, PayPal) to process the transaction; with our email provider to deliver the QR code; and with competent state authorities upon a lawful written request.
- The entire website runs over HTTPS. Account passwords are stored as one-way hashes and cannot be recovered. Access to customer data is role-restricted and logged.
- Should a breach expose personal data, we will notify affected customers and the authorities as required.
7. Complaints about personal data
Any complaint that personal data has been used outside the scope notified should be sent to the support email published in the footer. We acknowledge receipt within 24 working hours and respond with an outcome within five working days.