Legal
Privacy Policy
What personal data we hold about resellers and their teams, why we hold it, and the choices you have.
Last updated: 1 November 2026
1. Who we are
eSimDistributor is a trading name of eSimGenie Limited, a company incorporated in Ireland (company number 789399), registered office 2 Stockwell, Sandyford Road, Dublin 16, D16 X8F2, Ireland. We are the controller of the personal data described in this policy, which covers the eSimDistributor website, the reseller console and the Reseller API.
We follow the EU General Data Protection Regulation (GDPR) and Irish data protection law.
2. What we collect
- Account details: your name, business email address, company name, country and password (stored only as a secure hash).
- Team members: names, email addresses and roles of people you invite to your account.
- Brand settings: the logo, colours, website and support contact you add for white-label emails.
- Orders and balance: plans you order, your own references, top-ups, invoices and transaction history.
- Payment details: payments are handled by our payment provider. We never receive full card numbers. For auto top-up we keep a reference to your saved payment method and, where available, its last four digits and expiry date.
- Technical and security data: IP address, browser and device type, request logs, API key usage, and the result of bot and fraud checks.
- Communications: emails and messages you send to support, and our replies.
We do not ask for special category data (such as health data), and the Service is not meant for anyone under 18.
3. How we use it and why
| Purpose | Legal basis |
|---|---|
| Creating and running your account, processing top-ups and orders, delivering eSIMs, sending service emails and invoices, support | Performance of our contract with you |
| Preventing fraud and abuse, securing the Service (for example bot checks and payment risk screening), keeping logs | Our legitimate interests in protecting the Service and our customers |
| Improving the Service using aggregated usage data | Our legitimate interests |
| Keeping accounting, tax and transaction records; responding to lawful requests | Legal obligation |
| Product news and offers (only if you opt in; you can unsubscribe at any time) | Consent |
Payment risk screening is partly automated and may decline a top-up that looks fraudulent. If that happens, contact us and a person will review the decision.
4. Your customers’ data
When you give us details of your own customers, for example an email address so we can send them their eSIM, you are the controller of that data and we process it only on your instructions. Our Data Processing Addendum sets out those terms. Your customers should contact you first about their data; we will help you answer them.
5. Who we share it with
We do not sell personal data. We share it only with service providers who help us run the Service, under contracts that protect it:
| Provider | What they do |
|---|---|
| Microsoft Azure | Application hosting and database (EU region) |
| Cloudflare | Website delivery, network security and bot checks (Turnstile) |
| Revolut | Processing top-up payments and saved payment methods |
| Email delivery providers (for example Twilio SendGrid) | Sending account, eSIM delivery and service emails |
| eSIM network suppliers | Provisioning eSIMs. They receive order details and the eSIM identifiers (ICCID), not your account details |
| eSimNest platform | The ordering and catalogue platform we share with eSimNest, operated by the same company |
We may also share data with professional advisers, with authorities when the law requires it, to protect our rights or to prevent fraud, and with a buyer if our business is sold (they would be bound by this policy).
6. International transfers
We store data in the European Union where we can. Some providers, and some eSIM network suppliers, process data outside the European Economic Area. When they do, we rely on an adequacy decision (such as the EU–US Data Privacy Framework) or on the European Commission's Standard Contractual Clauses, with additional safeguards where needed.
7. How long we keep it
- Account, team and brand details: while your account is open, then deleted or anonymised within 12 months of closure unless needed for the records below.
- Orders, top-ups, invoices and transaction records: 6 years after the end of the financial year they relate to, as required by Irish tax and company law.
- Request and security logs: usually 90 days, longer if needed to investigate an incident.
- Support messages: 3 years after the conversation ends.
8. Security
Data is encrypted in transit and at rest. Access is limited to staff who need it. Passwords are hashed, API keys are stored only as hashes and shown to you once, and webhooks are signed. No system is perfectly secure, so please use a strong password, keep API keys secret and tell us about anything suspicious.
9. Your rights
You have the right to:
- access the personal data we hold about you and get a copy;
- correct inaccurate data (most details can be edited in the console);
- have data erased, where we no longer need to keep it;
- restrict or object to processing based on our legitimate interests;
- receive data you gave us in a portable format;
- withdraw consent to marketing at any time.
Email support@esimdistributor.com with the subject “Privacy request”. We may need to confirm your identity. We reply within one month, or tell you if we need longer and why.
10. Cookies and browser storage
- Website: we store only your light or dark theme choice in your browser. We use no analytics or advertising cookies.
- Console: when you log in, a sign-in token is kept in your browser so you stay logged in. It is removed when you log out.
- Security: Cloudflare may set strictly necessary cookies to protect the site and run bot checks on sign-up and login.
Because these are all strictly necessary or store only your own preference, we do not show a cookie banner. If we add analytics, we will ask first.
11. Other information
We may update this policy. We will post the new version here with a new date and, for important changes, tell you by email or in the console.
12. Contact and complaints
eSimGenie Limited, 2 Stockwell, Sandyford Road, Dublin 16, D16 X8F2, Ireland.
Email: support@esimdistributor.com
If you are unhappy with how we handle your data, please tell us first. You can also complain to the Irish Data Protection Commission (dataprotection.ie) or to the data protection authority where you live or work.