Last updated: 17 October 2026
Controller: Seyyah Mobile Limited, Unit 1603, 16th Floor, The L. Plaza, 367-375 Queen's Road Central, Sheung Wan, Hong Kong. Email: [email protected].
1. What we collect
- Account and order details: name, email, and billing address.
- Payment details, which Stripe and PayPal process. We do not store the full card number.
- Technical details needed to run and protect the Service: device type, operating system, IP address, browser, network information, and usage logs.
- Cookies needed for the session, language, and security. The app asks before it uses an optional cookie.
We do not ask for health data. Do not send it to us.
2. Why we use it
- To provide the eSIM, run your account, and take payment: performance of the contract.
- To answer support, prevent fraud, and keep the Service working: legitimate interests.
- To send marketing email: only if you opt in. That is consent.
- To keep tax and accounting records: a legal duty.
3. Who receives it
We share data with payment processors, eSIM and network partners, the companies that host the Service, and public authorities when the law requires it. We do not sell personal information.
Review invitations (Trustpilot): After a purchase, we may share your name, email address and order reference with Trustpilot A/S so that Trustpilot can invite you to review your experience with us. We do this on the basis of our legitimate interest in collecting customer feedback. Leaving a review is optional. You can opt out of Trustpilot invitations at any time through the link in the invitation email or by writing to [email protected]. If you write a review, Trustpilot’s own privacy policy applies to it.
4. Other countries
Data may be processed in Hong Kong, the United States, and other countries where a partner operates. For a transfer from the EEA or the UK we use Standard Contractual Clauses or another approved mechanism. A transfer from Turkey follows Article 9 of the KVKK.
5. How long we keep it
Account data is kept until you delete the account, and for a limited further period where a legal claim requires it. Billing records are kept for the period tax and accounting law requires. Logs are kept for a limited period. Marketing data is kept until you withdraw consent.
6. Your rights
If the GDPR applies, you can ask for access, correction, erasure, restriction, or a copy of your data. You can object to processing based on legitimate interests and to direct marketing. You can withdraw consent. You can complain to a supervisory authority.
If the CCPA or CPRA applies, you can ask to know, delete, or correct your information, and you can opt out of a sale or share. We do not sell personal information. We do not discriminate against you for using these rights.
If the Turkish KVKK applies, the separate KVKK notice states the rights in Article 11 and how to apply.
Write to [email protected]. We may ask you to confirm your identity. We reply within the time the law sets, usually 30 to 45 days.
7. Cookies
The website uses cookies that are needed for the session, language, and security. The app asks before an optional cookie. You can also control cookies in your browser. We do not sell personal information through cookies.
8. Security
We use ordinary safeguards, including encryption in transit and limits on who can open the data. No method is completely secure.
9. Children
We do not knowingly collect data from a child under 16, or under 13 where the US COPPA rule applies. Write to us if you believe we have.
10. Changes
We will tell you about a material change to this notice.