Privacy Policy

pr0d pty ltd trading as OzESim.io, ACN 702 491 638, operates OzESim in New South Wales, Australia. Contact our privacy team at support@ozesim.io.

This policy covers personal information handled through our website, supported apps, purchases and customer support. Whether or not the Privacy Act 1988 (Cth) applies to us in a particular circumstance, we aim to handle personal information in accordance with the Australian Privacy Principles (APPs) as our baseline standard. This policy does not limit any obligations or rights that apply under law.

Stripe collects payment-card and billing information directly through its checkout. We receive payment references and status, not your full card number or card security code.

We do not require precise GPS location to sell an eSIM. Network operators may separately process network-registration and usage information to provide connectivity under their own policies.

• Purchaser and contact details: the name and email address you provide, and your optional Explorer enrolment choice.
• Purchase records: order reference, selected plan and destination, amount and currency, quantity, dates, payment references and order status.
• eSIM and delivery information: ICCID, installation and activation details, provisioning status, email delivery status, and service or data-usage information available from the supplier.
• Support correspondence: messages and information you choose to send us to diagnose an issue or request a remedy.
• Optional app notifications: a device push token, notification preferences or permission status, and notification delivery information.
• Technical information: IP address, browser or device information, requests, timestamps and diagnostic logs collected when you use the service or its hosting infrastructure.

We collect information from you, from your use of the service, and from providers involved in payment, eSIM provisioning, delivery or support. If you do not provide information needed for an order, we may be unable to fulfil it or contact you.

• Process payments, issue and provision eSIMs, and send your QR code, activation links and order updates.
• Display order and usage information and provide technical support.
• Investigate delivery failures, fraud, misuse, payment disputes and refund requests.
• Record optional Explorer enrolment and send service notifications you have enabled.
• Maintain, secure and troubleshoot our website and apps.
• Keep required business and accounting records and comply with lawful requests.

Order confirmations, installation details and essential service updates are transactional communications. We may send them to fulfil a purchase even if you have not agreed to marketing.

A purchase or free Explorer enrolment is not automatically marketing consent. We will only send marketing where permitted by law and will provide an appropriate unsubscribe mechanism. You can also contact us to ask that marketing stop. Opting out of marketing does not prevent essential communications about an existing purchase.

We send commercial electronic messages only where we have consent as required by law, including express consent or inferred consent where permitted. Each commercial electronic message will identify pr0d pty ltd trading as OzESim.io and include accurate contact details and a functional unsubscribe facility. We will action unsubscribe requests within five working days, or any shorter period required by law.

We do not sell customer personal information. We disclose information where needed to provide the service, operate the business, comply with law or protect legitimate rights and safety. Current service providers include:

• Stripe — processes payments and payment disputes. Receives payment and billing details directly, plus customer and order information needed for checkout and reconciliation.
• eSIM Go and relevant network partners — provide and manage your eSIM and connectivity. Handle eSIM identifiers, provisioning and activation information, the selected bundle and network/service usage. We do not send Stripe card credentials to these providers.
• Resend — sends transactional emails and processes email addresses, message content (including installation credentials), delivery events and related email diagnostics.
• monday.com — when our order sync is enabled, maintains customer and purchase records using purchaser name, email address, order reference, destination, plan, price in AUD, quantity, order date, Stripe checkout session reference, order status and email delivery status. We do not send eSIM QR codes, ICCIDs, activation codes or device push tokens to monday.com. Recording a purchase does not constitute marketing consent.
• Replit and its hosting/database infrastructure providers — host the website, API and stored customer/order information, and process technical and security logs.
• Expo and the relevant Apple or Google push-notification infrastructure — deliver optional app notifications using a device token and the notification content, which may contain an order reference or plan name.
• Google Fonts — supplies website fonts. Your browser may send Google your IP address and request/browser information when fetching fonts; we do not send order records to Google Fonts.
• Google Analytics 4 — when you allow optional analytics, measures visits to public website pages using cookies and browser/device information. We send public page names and URLs without query strings or fragments, and a limited referring-site address. We do not send customer names, email addresses, order references, payment details or eSIM activation credentials. Google also receives network information, including your IP address, when your browser contacts its services.

We update this list when our service providers or material processing arrangements change.

• Stripe Privacy Policy
• Google Privacy Policy
• eSIM Go Privacy Policy
• Resend Privacy Policy
• monday.com Privacy Policy
• Replit Privacy Policy
• Expo Privacy Policy
• Google Privacy Policy
• Apple Privacy Policy

Our providers operate internationally. Personal information may be processed or disclosed outside Australia, including in the United States, the United Kingdom and countries where the selected eSIM connects to a mobile network. Other processing locations can depend on a provider’s infrastructure and subcontractors.

These are not promises that all data is stored in a particular country. Contact us for information about overseas recipients and locations relevant to your service. Where applicable law requires safeguards for overseas disclosures, we will take the steps required by that law; this policy does not ask you to waive those protections.

Our website and supporting services may use cookies or similar technologies for essential operation, security and payment processing. Administrative access uses browser session storage. Hosting providers may also collect technical and operational information.

Google Analytics is optional and does not load until you select Allow analytics. Essential only leaves it off, and declining does not prevent shopping or checkout. Use Analytics preferences below the website footer to change your choice. Withdrawing permission stops further Analytics collection through our tag and removes its Analytics cookies from this browser; it does not delete information already received by Google. We remember your choice in browser storage.

Our Google tag disables advertising storage, advertising personalisation and Google signals. We have not configured advertising pixels or session-recording tools in the storefront. Third-party services, including Stripe, may use their own cookies and fraud-prevention technologies. Their policies explain those practices.

You can manage cookies through your browser and notification permissions through your device settings. Disabling essential storage or payment-service technologies may affect functionality.

We use reasonable technical and organisational safeguards, including controls on administrative access and protected connections where supported. No internet service or storage system is completely secure. Keep your order references, QR codes, activation codes and install links private; they may allow someone else to access or install your eSIM.

We retain information for the purposes described in this policy and to meet legal, accounting, dispute and security requirements. Financial records may need to be retained for statutory periods. We review requests to delete or de-identify information that is no longer needed, subject to those requirements and the practical treatment of backups.

We do not promise that deletion of an app immediately deletes order or payment records. Contact us to discuss a deletion request and any information we must retain.

Email support@ozesim.io to request access to or correction of your personal information, ask for a copy, request deletion where available, withdraw optional permissions, or raise another privacy concern. Tell us enough to identify the relevant records, but do not send payment-card security codes or unnecessary sensitive information.

We may reasonably verify your identity to protect customer information. We will explain any lawful reason for refusing a request or retaining particular records. Rights and permitted exceptions depend on the law that applies to your request.

Orders should be placed by an adult or a parent or guardian. A child may use an eSIM purchased by an adult, but our checkout is not intended to collect personal information directly from children. Contact us if you believe a child has supplied information without appropriate permission so we can assess and address it.

Contact support@ozesim.io with details of your concern. We aim to respond to a privacy complaint within 30 days, or let you know if further time is reasonably needed.

If you are not satisfied, you may contact the Office of the Australian Information Commissioner (OAIC) where the matter falls within its jurisdiction, or another relevant privacy authority. Generally, contact us first and allow a reasonable opportunity to respond.

• OAIC: making a privacy complaint

We may update this policy when our services, providers or legal requirements change. The updated date appears at the top. We will provide additional notice of material changes where appropriate or required by law.

For privacy enquiries or a copy in another accessible format, contact support@ozesim.io.