Legal

Privacy Policy

Last updated: 28 October 2026

ElloSim is the trading name of EMAM MEDIA LTD, a company registered in England and Wales (company number 11855473), with registered office at 20-22 Wenlock Road, London, England, N1 7GU. In this policy "we", "us" and "our" refer to EMAM MEDIA LTD, which operates ellosim.com and sells travel eSIM data plans. This policy explains what personal data we collect, why we collect it, and the rights you have over it. EMAM MEDIA LTD is the data controller for the information described below. You can contact the controller at support@ellosim.com or by post at EMAM MEDIA LTD, 20-22 Wenlock Road, London, England, N1 7GU, United Kingdom.

1. Information we collect

  • Order data: the email address you provide at checkout, the destination country and plan you select, the eSIM identifier (ICCID) we assign to your order, and order status.
  • Payment data: payments are processed by Finby, our card payment provider. We receive a payment confirmation and reference, but we never see or store full card numbers or CVCs.
  • Technical data: IP address, browser type, device type and approximate location (country) for fraud prevention and to localize currency.
  • Support data: any information you send us by email or contact form.

2. How we use your data

  • To deliver the eSIM you purchased and activate it on the mobile networks that provide your connection.
  • To send order confirmations, installation instructions and service notifications.
  • To handle refunds, support requests and fraud checks.
  • To comply with tax, accounting and other legal obligations.
  • To improve the site (aggregated analytics, no profiling).

3. Legal bases (UK GDPR / Data Protection Act 2018)

We process your data under the UK GDPR and the Data Protection Act 2018 to perform our contract with you (delivering the eSIM), to comply with legal obligations (e.g. tax records), and on the basis of our legitimate interest in keeping the service secure and functional. Where you are located in the EEA, equivalent rights under the EU GDPR apply. Marketing emails, if any, are sent only with your explicit consent.

4. Sharing your data

We share the minimum data necessary with:

  • Finby — to take card payments.
  • To activate your eSIM and provide service, the mobile network operators serving your destination process the technical identifiers of your eSIM (such as ICCID). We do not share your name, email or payment details with them.
  • Email delivery and hosting services — to send you order emails and run the site.

We do not sell your personal data, ever. Advertising measurement data is shared with the ad platforms listed in section 5 only after your consent.

5. Cookies, analytics and advertising

We use strictly necessary cookies to keep your session, display currency and cart. With your consent, we also use analytics and advertising cookies to measure how visitors find and use our store and whether our ads lead to purchases. See our Cookie policy for the full list.

Advertising and analytics tags load only after you consent if you are in the UK, EEA or Switzerland. The providers that may receive data are listed below — the website tags in this list load only after you consent, while our mobile app attribution provider operates under the iOS tracking permission and the Android advertising-ID settings described under Mobile apps below:

  • Google (Google Analytics 4 and Google Ads) — site usage statistics and ad conversion measurement, using Google Consent Mode.
  • Meta (Facebook/Instagram Pixel) — ad conversion measurement.
  • TikTok Pixel — ad conversion measurement.
  • LinkedIn Insight Tag — ad conversion measurement.
  • X (Twitter) Pixel — ad conversion measurement.
  • Snap Inc. (Snapchat Pixel) — ad conversion measurement.
  • AppsFlyer — mobile app attribution provider (our mobile measurement partner), not a website pixel; it operates in the ElloSim apps only, as described under Mobile apps below.

These providers receive technical data such as your IP address, device and browser, pages viewed, and — when you buy — the order value and currency. They act as independent controllers or processors under their own privacy terms.

Withdrawing consent: you can change or withdraw your choice at any time via the Cookie settings link in the footer of every page. Withdrawal takes effect immediately and stops all advertising and analytics tags; it does not affect data already collected while consent was given. We do not sell your personal data.

Mobile apps

This section applies to the ElloSim mobile apps for iOS and Android. Website tracking is covered by the cookie and advertising disclosures above.

The ElloSim mobile apps use AppsFlyer Ltd as our mobile measurement partner, acting as our processor, to attribute app installs and in-app purchases to our advertising campaigns and to measure campaign performance.

AppsFlyer processes the following data on our behalf: device identifiers (Apple's IDFA and IDFV on iOS, the Google Advertising ID on Android), device and operating system information, IP address, install and session events, and purchase events including the purchase amount and currency. Attribution data, including install and purchase events with purchase value, is shared with the advertising platforms we run campaigns on, currently Meta (Facebook and Instagram). AppsFlyer's own privacy policy is at AppsFlyer's privacy policy.

iOS: we request permission through Apple's App Tracking Transparency framework before tracking. If permission is declined, the app remains fully functional — browsing, purchasing and eSIM installation all work exactly the same.

Android: the Google Advertising ID is used. You can reset it or opt out of personalised advertising in your device settings.

6. Data retention and deletion

Order and invoice records are kept for as long as required by tax law (typically 7 years). Support emails are kept for up to 24 months. Technical logs are kept for up to 90 days.

You can delete your ElloSim account at any time. Sign in and open Account → Settings → Sign in & security → Delete account. For step-by-step instructions, see our account deletion page.

7. International transfers

Some of our processors (e.g. Finby) are located outside the United Kingdom. Where data is transferred outside the UK or EEA, it is protected by the UK International Data Transfer Agreement, Standard Contractual Clauses, or an equivalent safeguard.

8. Your rights

Depending on where you live, you have the right to access, correct, delete or export your data, to object to processing, and to lodge a complaint with your local data-protection authority. In the United Kingdom, that authority is the Information Commissioner's Office (ICO, ico.org.uk). To download your account data, sign in and open Account → Settings → Sign in & security → Download my data. For other rights, email support@ellosim.com.

9. Children

ElloSim is not intended for users under 16. We do not knowingly collect data from children.

10. Changes

If we make material changes to this policy we will post the updated version here and update the "Last updated" date above.

11. Contact

Questions or requests: support@ellosim.com.