2. What data we collect

2.1. As part of using our services, we collect the following data:

Data provided by you:

• First and last name
• Email address
• Phone number (optional)
• Invoice details (if you require an invoice)

Data collected automatically:

• IP address
• Browser and device type
• Purchase history
• eSIM service usage data (data usage, profile status)

3. Data processing purposes

3.1. We process your data for the following purposes:

4. Data retention period

4.1. We store your data for the following periods:

• Account data: Until account deletion or 3 years from last activity
• Transaction data: 5 years from end of tax year (accounting requirements)
• Marketing data: Until consent withdrawal or objection
• Technical data (logs): Maximum 12 months

5. Data recipients

5.1. Your data may be shared with the following categories of recipients:

• eSIM service providers - for eSIM profile activation and management
• Payment operators - for transaction processing (Stripe, PayPal)
• IT service providers - hosting, infrastructure maintenance (Microsoft Azure)
• Accounting office - for accounting purposes
• Government authorities - when required by law

5.2. Each of our partners is required to comply with data protection regulations.

6. Data transfers outside EEA

6.1. In connection with providing eSIM services, your data may be transferred to countries outside the European Economic Area.

6.2. In such cases, we apply appropriate safeguards:

• Standard contractual clauses approved by the European Commission
• Adequacy decisions
• Partner certifications and binding corporate rules

7. Your rights

7.1. Under GDPR, you have the following rights:

7.2. To exercise your rights, contact us at: hello@blueskyesim.com

7.3. You also have the right to file a complaint with the supervisory authority.

8. Cookies

8.1. Our website uses cookies for the following purposes:

• Essential cookies - required for website operation (session, login)
• Functional cookies - remembering user preferences
• Analytical cookies - collecting website usage statistics
• Marketing cookies - ad personalization (only with consent)

8.2. You can manage cookies through browser settings or our cookie preferences panel.

8.3. Disabling some cookies may limit website functionality.

9. Data security

9.1. We apply appropriate technical and organizational measures to protect your data:

• Data transmission encryption (SSL/TLS)
• Database encryption
• Regular backups
• Limited data access only for authorized employees
• Regular security audits
• Two-factor authentication for administrative accounts

10. Changes to Privacy Policy

10.1. We reserve the right to update this Privacy Policy.

10.2. We will inform you of significant changes via email or a notice on the website.

10.3. The current version of the Privacy Policy is always available on our website.