Privacy

Data controller

esimjia is operated by Finiara LLC, a limited liability company registered in Wyoming, United States.

Mailing address, care of our registered agent: 30 N Gould St Ste R, Sheridan, WY 82801, United States.

Finiara LLC is the controller of the personal data processed for the operation of the esimjia website, customer accounts, orders and related support. Privacy enquiries and requests to exercise data protection rights may be sent to the contact address below.

Personal data we process

• Customer-supplied information: account name, email address, sign-in credentials, receipt and invoice details, and support correspondence. Receipt email addresses are optional for guest purchases.
• Transaction and service information: orders, payments, credit balances, eSIM identifiers, installation and activation status, usage volumes and validity information reported by connectivity providers.
• Technical information: IP addresses, browser and device information, session identifiers, and security and error records generated in operating and protecting the website.
• Team and assignment information: membership, roles, eSIM assignments, and names and email addresses supplied by a team or another purchaser assigning an eSIM to the individual concerned.

Mobile network operators process device identifiers, connection records and location information for the provision of connectivity and their applicable telecommunications obligations. The eSIM management information available to Finiara LLC consists of profile, activation, usage-volume and validity records.

Purposes and legal bases

Personal data is processed to fulfil orders, deliver and manage eSIMs, reconcile payments, maintain credit, provide account access and respond to support requests. For customers, the legal basis is performance of the contract or steps requested before entering a contract. For individuals assigned an eSIM by another purchaser, the basis is our legitimate interest in providing and administering the service requested for them.

Accounting, tax and other mandatory records are processed to comply with legal obligations. Security, fraud prevention, dispute handling and website improvement are based on our legitimate interests in operating a reliable service, subject to the individual’s rights and interests. Processing that requires consent is carried out on that basis, and consent may be withdrawn at any time.

Information necessary to identify an order, deliver the service or secure an account is required for that function. Receipt email and invoice details are voluntary except to the extent needed to issue an invoice requested by the customer. Finiara LLC does not make decisions producing legal or similarly significant effects on an individual solely by automated processing.

Cookies and analytics

Cookies support session management, authentication, security, the shopping cart and the selected currency. The guest-cart cookie has a duration of up to 30 days and the currency preference up to one year. Session and authentication cookies follow the applicable session settings and any choice to remain signed in. Browser settings allow cookies to be removed or restricted; restricting essential cookies may affect the corresponding site functions.

Where enabled, website analytics are configured without analytics cookies or advertising identifiers and are limited to traffic and technical statistics for service improvement. Analytics are not used to create advertising profiles or track activity across unrelated websites. The service currently uses no advertising pixels or marketing newsletters.

Recipients and international transfers

The website is hosted in Germany and the email service is based in Czechia. Categories of service recipients include hosting, email, content-delivery and security providers; banks and payment services for transaction processing; and eSIM provisioning services and mobile network operators for connectivity. Banks, payment services and network operators may also process data as independent controllers for their own legal obligations.

Authorised team owners and managers have access to the team’s assignments, eSIM usage and financial activity within their permissions. Information may also be disclosed to professional advisers or public authorities where necessary to comply with law or establish, exercise or defend legal claims. Finiara LLC does not sell personal data.

Finiara LLC is established in the United States, and some recipients operate outside the European Economic Area. Transfers subject to European data-protection law require an applicable adequacy decision or another permitted transfer mechanism, including standard contractual clauses where appropriate. Individuals may request information about the locations and safeguards applicable to their data and a copy of relevant safeguards using the contact details below.

Retention

Retention periods are determined by the purpose of the record, the duration of the service or credit entitlement, and applicable legal requirements. Account, order and eSIM records are retained as necessary to administer purchase history, private access links, active services and non-expiring credit. Transaction and invoice records are also subject to applicable accounting, tax and legal-claim requirements.

Support correspondence and technical records are retained for the periods necessary to resolve enquiries, investigate incidents and protect the service. Requests for deletion are assessed against those purposes and any continuing legal obligation or entitlement requiring retention, including after account closure.

Data protection rights

Subject to the conditions of applicable data-protection law, individuals may request access, rectification, erasure, restriction of processing and data portability. They may object to processing based on legitimate interests and withdraw consent for processing based on consent. Withdrawal of consent takes effect for subsequent processing and does not affect the lawfulness of processing already carried out.

Requests may be submitted to the email address below. Proportionate identity verification may be required to protect the individual’s information. GDPR requests are answered within one month of receipt; where the law permits an extension, the individual is informed within that initial period of the extension and its reasons.

Individuals may lodge a complaint with a competent supervisory authority, including the authority in their place of habitual residence or work in the EEA, or where an alleged infringement occurred. UK individuals may complain to the Information Commissioner’s Office where UK data-protection law applies.

Contact

Write to us at [email protected].