Privacy Policy

Last updated: January 2025 | Effective date: January 2025

This Privacy Policy explains how AirlaeSIM UK ("airlaesim.site") collects, uses, stores, and protects information about visitors to this website. We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

AirlaeSIM UK is an independent informational website about Airalo eSIM services. Our registered address is 9 St Mary Street, Cardiff CF10 1AT, United Kingdom. You can contact our data controller at [email protected].

2. Information We Collect

We collect the following categories of information:

• Contact form submissions: Name, email address, and message content when you use our contact form.
• Technical data: IP address, browser type, device type, pages visited, and time spent on pages (collected via server logs).
• Cookie preferences: We store your cookie consent choice in your browser's localStorage under the key "cookieConsent_airlaesim.site".

We do not collect payment information, government-issued identification, or sensitive personal data.

3. How We Use Your Information

• To respond to enquiries submitted via our contact form.
• To improve the content and usability of this website.
• To monitor for and prevent security threats or abuse.
• To comply with legal obligations under UK law.

We do not use your information for automated decision-making or profiling.

4. Legal Basis for Processing

We process your data on the following legal bases:

• Consent: For contact form submissions, where you explicitly consent by ticking the privacy checkbox.
• Legitimate interests: For server log data, to maintain website security and performance.
• Legal obligation: Where required by UK law.

5. Cookies & LocalStorage

This website uses a cookie consent banner. Your consent choice is stored in your browser's localStorage (not a cookie) under the key cookieConsent_airlaesim.site. This data remains on your device and is not transmitted to our servers.

We do not use tracking cookies, advertising cookies, or third-party analytics cookies. Server-side logs may record your IP address for security purposes.

6. Data Sharing

We do not sell, rent, or share your personal data with third parties for marketing purposes. We may share data with:

• Our hosting provider (for server log data, subject to their privacy policy).
• Law enforcement or regulatory authorities if required by law.

7. Data Retention

Contact form data is retained for 12 months from the date of submission, after which it is securely deleted. Server log data is retained for 90 days. LocalStorage data remains on your device until you clear your browser data.

8. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Object to processing based on legitimate interests.
• Withdraw consent at any time (where processing is based on consent).
• Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

To exercise your rights, contact us at [email protected]. We will respond within 30 days.

9. Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure. This includes HTTPS encryption for all data in transit and access controls on our systems.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated via a notice on this page. The "last updated" date at the top of this policy reflects the most recent revision. Continued use of the site after changes constitutes acceptance of the updated policy.

Contact: [email protected] | 9 St Mary Street, Cardiff CF10 1AT, United Kingdom