Privacy policy
How we collect, use and protect your personal data, and the rights you have over it.
Last updated: 18 July 2026
1. Who we are
eSIMs for Travel is a trading name of TMR Digital Ltd, a company registered in England and Wales under company number 15550089. Registered office: Suite 4387a, 60 Tottenham Court Road, London W1T 2EW. VAT registration number: GB511805521.
TMR Digital Ltd is the data controller for personal data collected through this website, and processes it in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. For any privacy question or request, email us at Support@esimsfortravel.co.uk or call us on 0330 043 1991.
2. The data we collect
- Contact data: the email address you enter at checkout.
- Order data: the plan you bought, quantity, price paid, order reference, order status and delivery records.
- Payment data: handled entirely by our payment provider. We never see or store your card details. We receive only a payment reference and its status.
- Technical data: IP address and basic request logs, used for security, fraud prevention and rate limiting.
We do not collect more than we need, and we do not buy data about you from anyone else.
3. How and why we use it
- To deliver your order (send your eSIM QR code, confirmations and service messages) — necessary to perform our contract with you.
- To provide support and handle refunds — contract and our legitimate interest in resolving problems.
- To keep accounting and tax records — our legal obligations as a UK company.
- To secure the service (rate limiting, fraud and abuse prevention) — our legitimate interests.
We only send you emails about your order. We do not send marketing emails, and if that ever changes we will ask for your consent first.
4. Who we share it with
We never sell your personal data. We share it only with the service providers needed to fulfil your order, each acting under contract:
- Shopify International Limited (Ireland) — payment processing and hosted checkout. Your card details are entered on Shopify's secure checkout and are subject to Shopify's privacy policy.
- Our eSIM provisioning platform and local mobile network operators — to issue your eSIM profile and provide connectivity at your destination.
- Resend (transactional email provider) — to deliver your QR code and order emails to your inbox.
- Cloud hosting providers — who store our database and run this website.
We may also disclose data where the law requires it (for example to HMRC, regulators or law enforcement with proper authority).
5. International transfers
Some of the providers above process data outside the UK — for example in the European Economic Area (covered by UK adequacy regulations) or the United States. Where data leaves the UK, we rely on appropriate safeguards such as adequacy decisions, the UK International Data Transfer Agreement or Addendum, or equivalent contractual protections.
6. How long we keep it
- Order and transaction records: 7 years, as required for UK tax and company-law record keeping.
- Support correspondence: up to 2 years after the issue is closed.
- Technical logs: short-lived and routinely overwritten.
7. Security
Data is encrypted in transit (HTTPS/TLS), access to our systems is restricted and credential-protected, and card payments are handled solely by our PCI-DSS-compliant payment provider. No system is ever completely secure, but we take proportionate technical and organisational measures to protect your data and would notify you and the ICO of any breach where the law requires it.
8. Your rights
Under the UK GDPR you have the right to:
- access the personal data we hold about you;
- correct inaccurate data;
- erasure ("right to be forgotten"), where the data is no longer needed — note we must keep transaction records for the statutory period;
- restrict or object to processing based on legitimate interests;
- data portability for data you provided under contract;
- withdraw consent at any time, where processing is based on consent.
To exercise any of these rights, email us at Support@esimsfortravel.co.uk or call us on 0330 043 1991. We respond within one month, free of charge. We do not use automated decision-making or profiling.
9. Cookies
Browsing and buying on this site requires no cookies — we use no advertising, analytics or tracking cookies. The only cookie we set is a strictly necessary session cookie if a member of staff signs in to the administration area. Shopify's hosted checkout page may set its own strictly necessary cookies, covered by Shopify's privacy policy.
10. Children
This website sells to adults; we do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, email us at Support@esimsfortravel.co.uk or call us on 0330 043 1991 and we will delete it.
11. Changes to this policy
We will update this policy if our data practices change, and the "last updated" date above always shows the current version. Significant changes will be highlighted on this page.
12. Complaints
If you are unhappy with how we handle your data, please raise it with us first and we will do our best to put it right. You also have the right to complain to the UK's supervisory authority, the Information Commissioner's Office, at ico.org.uk.
eSIMs for Travel is a trading name of TMR Digital Ltd (company no. 15550089), the data controller for this website.