Privacy policy

1.Who is responsible for your data

The controller of the personal data described in this policy (under Israeli law, the database controller) is Freeman Digital, a business owned by Yiftach Freeman, licensed dealer (עוסק מורשה) no. 208551978, Business Center, Efrat, Israel. For anything privacy-related, contact us at support@onesim.travel.

2.What we collect

• Contact details: your email address and, if you give it, your name.
• Order details: the plans and top-ups you buy, destination, price, currency, order number, order dates and any referral code you used.
• eSIM identifiers: the technical identifiers of your eSIM, such as its ICCID, activation code and the references our eSIM provider uses for it.
• Usage data from our eSIM provider: whether the eSIM has been installed and activated, when it was activated and when it expires, and how much data has been used and remains. We do not see what you browse or the content of your traffic.
• Payment data: payments are handled by Sumit on its own secure page. We never receive or store your card number. Sumit tells us whether the payment succeeded and gives us the transaction and invoice references, and in some cases the card type and its last four digits.
• Messages: what you send us through our forms or by email, including any order number or device details, and your email address if you sign up for our newsletter.
• Technical and analytics data: information your browser sends when you visit, such as IP address, browser and device type, and pages requested. Our analytics tool, PostHog, records how the site is used, for example which pages are viewed, which checkout steps are completed and errors the site runs into. Until you make a choice in the cookie banner, it collects nothing. If you decline, it counts usage anonymously, without storing any identifier on your device. If you accept, it may store an identifier on your device and record your sessions, with everything you type masked. See our cookie policy.
• Sales statistics: for every completed purchase our server sends PostHog a sales record (order number, plan, destination, price and currency), without your name or email address. It is linked to your browsing analytics only if you accepted analytics cookies.

You are not legally required to give us any personal data, and doing so is up to you. Without an email address, though, we can't deliver your eSIM.

3.How we use it

We do not sell your personal data, we do not use it to build advertising profiles, and we do not make automated decisions about you that have legal or similarly significant effects.

4.Service providers who process it for us

We share personal data only with providers that help us run the store, and only what each one needs for its service. They process it on our behalf, under contracts that require them to protect it:

We may also disclose data where the law requires it, for example to the tax authorities, or where it is needed to protect our rights or the safety of others.

5.International transfers

Some of these providers process data outside Israel: in the European Union (Vercel and Neon in Frankfurt, and Firsty in the Netherlands) and in the United States (PostHog, and Vercel and Cloudflare as US companies with global networks). The European Union recognises Israel as providing an adequate level of data protection, and Israeli law permits transfers to EU countries.

For transfers to the United States we rely on safeguards the law recognises, such as the EU-US Data Privacy Framework where the provider participates in it, standard contractual clauses, and the provider's written commitment to protect the data, as required by the Privacy Protection (Transfer of Data to Databases Abroad) Regulations, 5761-2001.

6.How long we keep it

• Orders, payments, invoices and credit documents: for as long as Israeli tax and accounting law requires, generally 7 years.
• eSIM identifiers and usage data: kept with your order record, for the same period.
• Support messages: up to 2 years after the conversation ends.
• Newsletter: until you unsubscribe.
• Analytics data in PostHog: usage events for up to 12 months, and session recordings for up to 30 days.
• Server logs at our hosting provider: for a short period.

When data is no longer needed, we delete it or anonymise it.

7.Security

We use encrypted connections (HTTPS), access controls and established infrastructure providers to protect your data. Card details are entered only on Sumit's secure payment page and never pass through our servers.

Your order page is reached through a private link. Keep your order emails and links to yourself, because anyone with the link can see the eSIM details on it.

If a security incident affects your data, we will act as the law requires, including notifying the Privacy Protection Authority and you where that is required.

8.Your rights

To use any of the rights below, email us at support@onesim.travel. We may need to confirm your identity first, usually by asking you to write from the email address on your order. We respond within 30 days.

Under Israeli law

Under the Privacy Protection Law, 5741-1981, as amended by Amendment 13 (in force since August 2025), you have the right to:

• review the personal data about you that we hold in our database;
• ask us to correct or delete data that is inaccurate, incomplete, unclear or out of date;
• ask at any time to be removed from our direct marketing, such as the newsletter;
• complain to the Privacy Protection Authority if you believe we have not handled your data properly.

If you are in the EU or the UK (GDPR)

You can ask to access your data, correct it, delete it, restrict or object to how we use it, and receive it in a portable format. Where we rely on your consent, you can withdraw it at any time, without affecting what we did before. You can also complain to the data protection authority where you live or work.

Everywhere else

We will respond to reasonable requests to access, correct or delete your data wherever you live.

9.Children

Our service is intended for adults. We do not knowingly collect personal data from children under 16. If you believe a child has given us personal data, contact us and we will delete it.

10.Changes to this policy

We may update this policy as our service or the law changes. The date at the top of this page shows when it was last updated. If we make significant changes, we'll let customers know by email or on our website.

11.Contact

For any privacy question or request, write to us at support@onesim.travel, or by post to Freeman Digital, Business Center, Efrat, Israel.