Privacy Policy

Who we are

GoEasySim.com sells travel eSIM data plans at goeasysim.com. In this policy “we”, “us” and “our” mean an individual entrepreneur registered in the Republic of Armenia, trading as GoEasySim.com. We are an individual, not a company, and we are both the seller of your eSIM and the controller of your personal data.

Name

Suren Gasparyan

Trading as

GoEasySim.com

Status

Individual entrepreneur registered in the Republic of Armenia

Registration number

26737618

Contact

info@goeasysim.com

We are the controller of the personal information described below. For questions about this policy, or to exercise any of the rights in it, write to info@goeasysim.com. Send complaints to info@goeasysim.com; we will respond within a reasonable time.

What we collect

We collect only what we need for the purposes below:

• Your email address. You give it to us when you buy a plan, so we can attach the purchase to you, show you your order, and answer questions about your payment.
• Order and eSIM details. Which plan you bought, its price and currency, the destination, the order status, and the identifiers of the eSIM profile issued to you — including its ICCID and its data usage as reported by our supplier.
• Account details, if you create one. An account is optional; you can buy without one. If you register we store your email address and a hash of your password, not the password itself. If you use password reset, we also store a hashed one-time code, a hashed reset token and the IP address that requested it, for a short period needed for security.
• Payment records, but not card details. We keep the payment confirmations the bank sends us so we can reconcile and support your order. See “Payments” below.
• Basic technical data. Server logs covering requests to our site — including IP address, timestamps, and the pages requested — kept for security, fraud prevention and debugging.

We do not run advertising or behavioural tracking on this site. We do use Google Analytics for aggregate usage measurement, as described under “Cookies” below.

Why we use it, and our legal basis

• To sell and deliver your eSIM. We need your email and order details to take the order, buy the matching eSIM from our supplier, and show you the QR code.
• To support you. Answering your questions, re-issuing an activation code you cannot find, investigating a plan that will not connect.
• To keep accounts and payments secure. Detecting fraud, preventing duplicate charges, and protecting activation codes from theft.
• To meet our legal duties. Keeping records of sales as tax, accounting and other law requires.

We process data to perform our contract with you, to comply with legal obligations, for our legitimate interests in security and in running a usable service, and otherwise with your consent where applicable law requires it.

We do not sell your personal information, and we do not share it with anyone for their own marketing.

Payments

Card payments are taken on a secure payment page hosted by Ameriabank, a bank. Ameriabank processes the card transaction; it is not the seller. We are the seller of your eSIM and are responsible for the sale, for refunds and for customer support.

Your card details are entered on Ameriabank’s payment page and are not intended to be received or stored by us. When a payment finishes we receive back information we need to fulfil and reconcile the order, such as the payment status, a payment reference and the amount.

Ameriabank receives the payment details you enter on its page, and handles them under its own privacy terms, which we encourage you to read on its website.

To choose the currency prices are first shown in, our hosting network (Cloudflare) tells the storefront which country your connection appears to come from. We use it only at that moment to pick the default currency, and we do not store it.

Who else sees your data

We keep the list of third parties short:

• Our eSIM supplier. We do not operate a mobile network. When you buy a plan we order the matching eSIM from a wholesale aggregator, which issues the profile and reports its status and data usage back to us. We send them only the information needed to issue your eSIM.
• Ameriabank, the bank that takes card payments, as described above.
• Amazon Web Services (AWS), which hosts our backend and database, and Cloudflare, which hosts the storefront and acts as our content delivery network (CDN). They process data on our instructions in order to run the site.
• Google Analytics, for aggregate usage measurement — see “Cookies” below for exactly what it does and does not receive.
• Twilio SendGrid, to deliver email on our behalf: eSIM delivery and service notices, and account-security email (verification and password-reset codes) when those features are switched on. It receives the address the email goes to and the message itself.

We may also disclose information where we are legally required to, or where it is necessary to establish or defend a legal claim.

We are based in Armenia and eSIMs are sold for travel, so delivering your order can involve transferring data outside Armenia and outside your own country. Where required, we use appropriate safeguards for such transfers, as permitted by applicable law.

Cookies

This site does not use advertising cookies, and we do not build advertising profiles or sell data to ad networks.

We use Google Analytics to measure aggregate usage, such as which pages are visited and how many people complete a purchase. We do not send it your email address, your order’s access token or your eSIM’s activation code, and we send no analytics events from your order page or your account pages.

Where analytics is enabled, our analytics provider may also set its own cookies to measure aggregate usage.

If you sign in, we set one essential session cookie, called esim_session. It holds a random token rather than your email or password, and only a hash of the token is stored on our side.

Signing out ends the session, and sessions also expire on their own.

How we protect your data

Your activation code is the one piece of data here that is worth stealing: anyone holding it can install your eSIM. We use reasonable technical and organisational measures to protect it and the rest of your data.

• Your QR code is generated by our own servers and shown on your order page.
• Passwords and session tokens are stored as hashes, not in readable form.
• Card details are entered on Ameriabank’s payment page and are not intended to reach our servers.

No system is perfectly secure, but if a breach affects your personal data we will notify you and the relevant supervisory authority where the law requires it.

Email and marketing

We currently send no marketing email at all, and you are not subscribed to anything by buying from us.

If you use account features that email you a code, such as email verification or password reset, we send an account-security email only when you ask for one, and a short notice if your password is changed. These are never marketing.

Your order page is the delivery channel for your eSIM — your QR code and activation steps live there, and the link to it is yours to keep. We may also email you about an eSIM you bought, such as a copy of its delivery details, or a service notice when its data is running low or its plan is about to end. These are never marketing.

If we introduce marketing email later, we will update this page, and we will ask for your consent before sending marketing where required.

How long we keep it

• Orders, payments and eSIM records are kept for as long as tax, accounting or other law requires (currently we apply a period of five years from the date of purchase).
• Account details are kept until you close your account, after which we delete them except where a record must be kept for the reasons above.
• Sessions expire automatically.
• Server logs and other technical data are kept only as long as needed for the purposes above, such as security and debugging.

Your rights

Under applicable law, and depending on where you live, you may have the right to:

• Ask what personal data we hold about you, how and why it is processed, and get a copy of it.
• Have inaccurate data corrected.
• Have your data blocked or deleted, where we are not required to keep it.
• Ask us to restrict or object to how we use it.
• Receive your data in a portable, machine-readable form.
• Withdraw consent, where we relied on consent.
• Complain to a supervisory authority — in Armenia, the Personal Data Protection Agency of the Ministry of Justice of the Republic of Armenia — or to a court, as well as to your own local data protection authority where one applies to you.

To exercise any of these, email info@goeasysim.com. We will respond within the period the applicable law allows. We may need to confirm your identity first — usually by asking you to reply from the address on the order.

We do not use your data for automated decision-making that produces legal effects for you.

Children

This service is not directed at children. If you are below the age at which you may enter into a contract or give consent under the law where you live, please use it only with a parent or guardian. If you believe a child has given us their data, contact us and we will look into it.

Changes to this policy

We update this page when what we do changes. The “last updated” date at the top always reflects the current version. If a change materially affects your rights, we will make that clear rather than quietly editing the text.