Privacy policy
1. Who controls your data
Simvito Limited (Company No. 81210167), incorporated in Hong Kong SAR, is the data controller for personal data collected through this website and the Simvito service. Questions and requests go to support@simvito.com.
2. What we collect
Order information: your email address, the plans you bought, the amount paid and the date. We need this to deliver the eSIM and to provide support.
Payment information: our payment service provider handles your card or wallet details directly. We receive only a transaction reference, the result, and the last four digits of the card where the provider supplies them. We never receive your full card number.
Technical information about the service: the eSIM identifier, activation status and aggregate data usage supplied by our network partners, which we use for support and billing accuracy.
Website information: a minimal server log of requests, kept for security and troubleshooting. This site sets no advertising or tracking cookies.
3. Why we use it, and on what basis
To perform the contract with you: delivering the eSIM, providing support, processing refunds.
To meet legal obligations: keeping accounting and tax records, and responding to lawful requests from authorities.
For our legitimate interests: preventing fraud and abuse, keeping the service secure, and improving how it works. We do not use your data for behavioural advertising and we do not sell it.
4. Who we share it with
eSIM platform and mobile network partners, who need the technical identifiers to provision and run the connection in the destination country.
Our payment service provider, which processes the transaction and its own fraud checks.
Service providers that host this website and send our transactional email, acting on our instructions.
Authorities, where we are legally required to disclose. We do not otherwise disclose personal data to third parties, and we never sell it.
5. International transfers
Delivering roaming connectivity necessarily involves transferring technical identifiers to network partners in the destination country, which may be outside Hong Kong.
Where we transfer personal data internationally we use providers that offer an adequate standard of protection and put contractual safeguards in place.
6. How long we keep it
Order and transaction records: seven years, to meet accounting and tax requirements in Hong Kong.
Support correspondence: two years after the matter is closed.
Server logs: 90 days. Technical eSIM records are deleted once the plan has expired and the retention period for billing disputes has passed.
7. Your rights
You may ask for a copy of the personal data we hold about you, ask us to correct it if it is wrong, ask us to delete it where we have no continuing legal reason to keep it, and object to processing based on legitimate interests.
Write to support@simvito.com. We respond within 30 days. If you are in Hong Kong and are not satisfied, you may complain to the Office of the Privacy Commissioner for Personal Data. If you are in the EU or UK, you may complain to your local supervisory authority.
8. Security
This site is served over HTTPS. Access to order data is restricted to the people who need it to provide the service, and payment credentials never reach our systems.
No system is perfectly secure. If a breach affects your personal data and creates a real risk to you, we will notify you and the relevant authority without undue delay.
9. Children
The service is not directed at children under 18. We do not knowingly collect their personal data, and will delete it if we discover we have.
10. Changes
If we change this policy we will update the date at the top of this page. Material changes affecting how we use data already collected will be notified by email where we hold an address for you.