Privacy Notice

1. Who we are

This notice explains how VERO ESIMS ("VERO ESIMS", "we", "us") handles your personal data. VERO ESIMS is the data controller for the personal data described below and is responsible for deciding how it is processed.

2. Personal data we collect

• Account & contact data: name, email address, login credentials.
• Order data: the plan and destination purchased, eSIM ICCID, activation status.
• Support data: messages you send us and attachments you share.
• Usage & device data: pages viewed, referrer, device type, browser, IP address, approximate location derived from IP, and basic eSIM usage metrics returned by our network partner.
• Cookies: small identifiers stored on your device (see Cookies below).

Payment card details are collected directly by our payment processor, Stripe, and are not stored on our systems.

3. Purposes and legal bases

• Create your account and deliver the eSIM you bought — performance of our contract with you.
• Operate, secure and improve the service, prevent fraud and abuse — our legitimate interests.
• Respond to support requests — performance of the contract and our legitimate interests.
• Send service emails (order confirmation, activation, expiry) — performance of the contract.
• Send marketing emails — only with your consent, which you can withdraw at any time.
• Comply with legal, tax and accounting obligations — legal obligation.

4. Who we share data with

• Stripe — our payment processor, who handles card processing, fraud screening, tax calculation and refund mechanics on our behalf.
• eSIM network partners — to provision your eSIM profile and return activation and usage data.
• Infrastructure providers — cloud hosting, database, email delivery and customer support tooling acting as our processors under written agreements.
• Professional advisers — accountants and legal advisers where necessary.
• Authorities — where required by law, court order or to protect rights and safety.

We do not sell your personal data.

5. International transfers

Some of our processors are located outside your country of residence. Where personal data is transferred internationally, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

6. Retention

We keep personal data only as long as needed for the purposes above. Order and tax records are retained for up to 7 years to meet legal and accounting obligations. Account data is kept while your account is active and for up to 24 months of inactivity, after which it is deleted or anonymised. Support tickets are retained for up to 3 years.

7. Your rights

Depending on your location, you may have the right to access, rectify, erase, restrict or object to the processing of your personal data, to data portability, and to withdraw consent at any time. EEA/UK users also have the right to lodge a complaint with their local data protection authority. To exercise any right, email privacy@vero.travel. We respond within one month.

8. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, least-privilege database policies and audit logging. No system is completely secure, so we cannot guarantee absolute security.

9. Cookies

We use strictly necessary cookies to keep you signed in and to remember basic preferences, and limited analytics cookies to understand how the site is used. You can manage cookies through your browser settings; disabling strictly necessary cookies may break parts of the service.

10. Contact

VERO ESIMS · privacy@vero.travel