Privacy Policy – SimSIM

Last updated: July 2026

Welcome to simsimglobal.com (the "Site"). The Site is a digital marketplace for purchasing connectivity packages and eSIM cards for customers in Israel and around the world. This document sets out the privacy policy of SimSIM (the "Policy") and explains what data and personal information we collect when you use our services, how we process and use it, with whom we may share it, and the measures we take to protect it.

Browsing the Site, registering for it, purchasing products, or making any other use of the services offered on it constitutes full and express consent to the terms of this Privacy Policy.

1. Site Operator Identity and Contact Details

The Site simsimglobal.com and the SimSIM service are operated by Nadav Shevy, an exempt dealer (osek patur) registered in Israel, trading under the name "SimSIM," and reachable at support@simsimglobal.com. Because the operator is a sole proprietor and not an incorporated company, the individual named above is the data controller and the party legally responsible for the service. In this document, the terms "the Company," "we," "us," or "our" refer to that operator and those acting on their behalf.

For privacy contact and inquiries: support@simsimglobal.com

2. Scope and Application of the Policy

This Policy applies broadly to every interaction between the user and the Company, including:

Browsing, using, and visiting the Site and its sub-pages.
The process of purchasing and activating eSIM packages and related services.
Contact with our customer service and technical support channels (via online forms, email, WhatsApp, embedded chat, and the like).
Data processing within customer relationship management (CRM) systems, clearing and payment systems, mailing platforms, and chat tools.
Use of any future or additional digital application made available to customers (such as a dedicated app or customer portal).

This Policy is binding on users from Israel and from any other country, and it is subject to the relevant provisions of law, including the Israeli Protection of Privacy Law, 5741-1981, its regulations, and its amendments (including Amendment No. 13, which took effect on 14 August 2025), as well as the EU General Data Protection Regulation (GDPR) and the UK GDPR to the extent they apply to residents of the EEA and the United Kingdom.

3. Core Definitions

"Site" / "Platform" – the website simsimglobal.com, including all of its sections, subdomains, and the tools contained within it.
"User" / "you" – any individual, corporation, or legal entity that visits the Site, purchases products, registers for services, or contacts the Company.
"Personal Data" – any datum or information relating to a natural person that directly identifies them, or enables their identification indirectly with reasonable effort. This includes online identifiers such as IP addresses, device identifiers, cookie identifiers, and location/geolocation data, which are treated as personal data under the amended Israeli Protection of Privacy Law and the GDPR.
"Processing" – any operation performed on Personal Data, including collection, recording, organization, storage, adaptation, use, transfer, disclosure, deletion, or destruction.
"Database" – a collection of data as defined in the Israeli Protection of Privacy Law, used to store the information collected in the course of the Site's activity.
"Statistical / Anonymous Information" – data that has undergone anonymization and does not, in any way, enable the association or identification of a specific user.

4. Sources of Information Collection

We collect personal information about you through three main channels:

Information you provide directly: when placing an order, opening a user account, subscribing to the newsletter, or contacting the support department.
Information collected automatically: technological and statistical data collected while browsing the Site through cookies, server log files, and advanced analytics tools.
Information received from third parties: data transmitted to us by payment and clearing service providers, CRM systems, telecommunications providers and eSIM networks, and cloud and storage service providers.

5. Types of Information Collected

5.1 Information You Provide Proactively

As part of the purchase or contact process, you may be asked to provide: full name, email address, phone number, country of residence, details of the requested package, pricing and billing details, and the content of your inquiries and correspondence with us.

Financial and payment information: Please note that credit card and payment data are not stored on SimSIM's systems. Clearing is carried out directly and securely by external, established payment providers that meet the strictest security standards (PCI-DSS).

5.2 Technological Information Collected Automatically

When you use the Site, our systems record data such as: IP address, operating system and browser type, language settings, landing pages and referral sources (Referrer), duration of your visit, the pages you visited, and unique cookie identifiers.

5.3 Operational eSIM Service Information

To provide the service, we process data including the assigned eSIM number, the package's destination country, validity and activation dates, the volume of data traffic consumed, and real-time network status.

5.4 Information Within the Loyalty and Rewards Program (SimSIM Coins)

For registered users participating in the loyalty program, we process the following data:

The current SimSIM Coins balance in the user account.
A detailed history of coin transactions (accrual, redemption, and administrative updates).
The cumulative qualifying spend, used to determine the Cashback tier.
The personal referral code (Referral Link) and data about referred sign-ups, their qualifying purchases, and activations through you.

6. Purposes for Which We Process Information

The Company uses personal information for the following purposes:

Providing the services, processing orders, and producing and digitally delivering eSIM cards.
Operating the customer service function, responding to inquiries, and resolving technical faults.
Managing accounts, issuing invoices, and performing financial reconciliation.
Developing, improving, and optimizing the user experience on the Site and in the services.
Protecting the Company's systems, preventing fraud, and securing information.
Purposes specific to the SimSIM Coins program: up-to-date calculation of balances and Cashback tiers, managing the refer-a-friend program (including crediting referral bonuses once a referred purchase is activated), and displaying activity history in the user profile.
Sending marketing communications, value offers, and tailored promotions (subject to obtaining consent as required by law).

7. Legal Basis for Processing

Our processing of personal information relies on the following legal grounds:

Performance of a contract: processing is necessary to carry out the actions required to provide the eSIM package you purchased.
Consent: where you have given us your explicit consent (for example, in newsletter registration or cookie acceptance).
Legal obligation: compliance with legal requirements, such as bookkeeping and reporting to tax authorities.
Legitimate interest: protecting the Company's business interests, securing networks, and preventing misuse of the Platform.

8. Sharing and Transferring Information to Third Parties

The Company does not sell or rent your personal information to third parties. We share information only with the following parties, and only to the minimum extent required:

Payment clearing and processing providers for the purpose of processing payment and issuing invoices (for example, Cardcom, our Israeli payment gateway). Card and payment details are handled directly by these PCI-DSS-compliant providers and are not stored on SimSIM's systems.
Cellular network providers and local and international eSIM operators for the purpose of activating the data package.
Technology infrastructure providers, cloud storage services, and CRM systems.
Advertising and analytics platforms (such as Google and Meta) for optimization and statistical analysis.
Competent authorities, law enforcement bodies, or courts – where we are required to do so under a judicial order or binding legal provision.
The Company's professional advisors (such as lawyers and accountants) who are bound by a duty of confidentiality.

9. Cross-Border Data Transfer

The Company's information systems and servers, and those of our service providers, may be located outside the borders of the State of Israel (including in EU countries or the United States). Where we transfer personal data across borders, we rely on a recognized legal transfer mechanism, such as the European Commission's Standard Contractual Clauses (SCCs), the UK International Data Transfer Addendum where UK data is involved, or an adequacy decision (Israel benefits from an EU adequacy decision for transfers from the EEA). Where required, we apply supplementary technical and organizational measures to protect the transferred data. By using the Site, you acknowledge that your information may be transferred to and stored in these locations under these safeguards.

10. Cookies and Tracking Technologies

The Site uses cookies and similar technologies, organized into the following categories:

Necessary cookies – required for the Site to function (such as remembering your cookie choice). These are always active and do not require consent.
Analytics cookies – such as Google Analytics, used to measure traffic and understand how the Site is used. These load only with your consent.
Advertising cookies – such as the Meta pixel, used to measure and improve our advertising. These load only with your consent.

Non-necessary cookies (analytics and advertising) are not set until you provide consent through our cookie banner. When you first visit the Site, you can accept all, reject all, or choose specific categories. Analytics and advertising tools, and any embedded chat or support tools (such as Intercom) that rely on non-necessary cookies, are activated only after the relevant consent is given. For Google services, we also apply Google Consent Mode so that consent choices are reflected in Google's tags.

You can review, change, or withdraw your cookie consent at any time by selecting "Cookie settings" in the Site footer, and withdrawal is as easy as giving consent. You may also change your browser settings to block or delete cookies, though doing so may impair some of the Site's functionality.

11. Direct Marketing and Commercial Communications

Marketing messages, updates, and commercial offers will be sent to you only if you have given your explicit consent (opt-in), or in accordance with the provisions of Section 30A of the Communications Law (Telecommunications and Broadcasting) (the "Spam Law"). You may withdraw your consent and remove yourself from the mailing list at any time (opt-out) by clicking the unsubscribe link at the bottom of each message, or by contacting our service department directly by email.

12. Data Retention

We will retain your personal information only for as long as necessary to achieve the purposes described in this Policy, or for the period required by law (for example, retention of accounting records for 7 years in accordance with Israeli tax law). Thereafter, the information will be deleted or undergo full anonymization.

13. Information Security and Incident Management

The Company implements rigorous organizational and technological security measures to protect information against unauthorized access, loss, alteration, or disclosure. These measures include, among others, data encryption using the SSL protocol, restricting access permissions to authorized employees only, and complex password mechanisms. In the unfortunate event of a data security incident or breach affecting your privacy, the Company will act without delay and in accordance with the reporting obligations set out in law.

14. Your Rights

You are entitled to contact us to review the personal information held about you in the Company's databases, to request its correction if it is inaccurate, or to request its deletion. You can download your personal data or independently delete your account directly from your profile page on the Site.

Where the GDPR applies to you, you additionally have the right to: access your data; rectify inaccurate data; erase your data ("right to be forgotten"); restrict processing; object to processing (including for direct marketing); data portability; and to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal. You also have the right to lodge a complaint with your local data protection supervisory authority.

Please note: in certain circumstances, even after receiving a deletion request, we may be required by law to retain some data (for example, transaction and invoice data for tax and reporting purposes) or due to a defined and legitimate interest of the Company. We will respond to rights requests within the timeframes required by applicable law.

15. Children's Privacy

The Site and the services offered on it are not intended for or directed at children and minors under the age of 16. We do not knowingly collect personal information from minors. If we become aware that information about a minor has been collected without a guardian's consent, we will delete that information promptly.

16. Links to Third-Party Sites

The Site may contain links to external sites or applications that are not operated by the Company. This Privacy Policy does not apply to them, and we bear no responsibility for the information collection and privacy practices of those sites. We recommend reviewing the privacy policy of every external site you visit.

17. Changes and Updates to the Policy

The Company reserves the right to update or amend this Privacy Policy from time to time. When material changes are made, we will post a prominent notice on the Site or notify users by email. The date of the last update will appear at the top of the page. Continued use of the Site after the updated Policy is published constitutes acceptance of the new terms.

18. Permanent Account and Data Deletion

You may choose to delete your SimSIM account at any time. The account deletion process is final, permanent, and irreversible.

18.1 How to Delete

Via the app: go to Profile → Account → Delete Account, and confirm the action using the verification message sent to your email inbox (and a password, if one is set).
Via the Site: log in to your account, open the personal profile menu, and select "Delete Account."
Google/Apple sign-in: users who registered via external authentication (and did not set a dedicated password) can delete their account without a password – an authenticated login to the Platform is sufficient to perform the action.

18.2 What Data Is Deleted

Upon completion of the process, the following will be permanently deleted: the user profile, contact details (name, email, phone), login details and linked third-party providers, personal preferences, notification and mailing registrations, the accrued SimSIM Coins balance, and your referral data history.

18.3 What Data Is Retained and Why

Purchase records, tax data, and financial invoices will be retained on the Company's systems in anonymized form (with no ability to associate them with you) for a period of up to 7 years, in order to comply with the financial reporting obligations imposed on us by law. Additionally, active eSIM cards that have already been supplied to you will remain available for use on the cellular network until their original expiry date.

For assistance, support, or further questions regarding the deletion process, you can always contact us at: support@simsimglobal.com