Seller and website operator: AplasTech L.P., Kosta Varnali 11, 57500 Thermi, Greece. Greek tax number (AFM): 803420954. General Commercial Registry (GEMI): 196570906000. Store: e-sim.gr. Customer support, privacy requests and cancellation notices: support@e-sim.gr or the postal address above. You can also use our contact page.
1. Controller and scope
AplasTech L.P., identified above, controls customer and website data for e-sim.gr. This notice covers browsing, accounts, purchases, support and optional analytics. Telecom operators and payment providers may act as separate controllers for their regulated services; their notices also apply when you use those services.
2. Data we handle
Depending on your use, we handle name and contact details; account and authentication records; chosen plans, order history and transaction references/status; eSIM identifiers and installation details; support messages; and security information such as IP address, request logs and device/browser data. Optional analytics concerns page, package and checkout interactions. Do not send full card details or unrelated sensitive documents. Additional identity information is requested only where necessary for applicable requirements, with information about its purpose.
3. Purposes and legal bases
Contract performance covers ordering, payment verification, digital delivery, account access and support. Legal obligations cover tax/accounting records and lawful authority requests. Legitimate interests, subject to balancing your rights, cover proportionate security, fraud prevention, service reliability and handling claims. Consent is used for optional analytics storage and marketing where required; refusing or withdrawing it does not prevent normal shopping. Information marked necessary is needed to perform the purchase; without it we may be unable to supply the order.
4. Recipients and payments
We share only relevant information with eSIM suppliers/network operators for provisioning and service, payment providers such as Viva.com when selected, hosting and email/support service providers, professional advisers and competent authorities where justified. Payment providers collect card and authentication information in their own payment interfaces. Our Viva checkout receives payment references and status, not full card numbers or CVV. We do not sell personal data.
5. International service and transfers
An eSIM may connect to operators outside the European Economic Area. Operators can process network and usage information under their own applicable telecom rules. Transfers of personal data that we control must have a lawful basis and an applicable transfer mechanism, such as an adequacy decision, suitable contractual safeguards or a narrowly applicable legal exception. Ask us for information about relevant recipients and safeguards before purchase or when exercising your rights.
6. Retention and security
Account information is kept while needed for the account and outstanding contractual matters. Order, payment and invoice records are retained for applicable tax/accounting duties and the establishment or defence of claims. Support and security records are kept only as long as justified by their purpose, risk and legal requirements, then deleted or anonymised where appropriate. We use access controls and technical safeguards, but no online service can promise absolute security. eSIM QR/LPA data must be kept confidential by the customer.
7. Cookies and browser storage
Necessary storage supports login, security, checkout, language and display choices. The connect.sid session cookie can last up to 30 days; the Secure/HttpOnly __Host-esim-viva receipt cookie up to 7 days; admin sidebar_state up to 7 days. Language (esim_language), theme/customTheme/customFonts and required authentication state can use browser storage until removed or replaced. Optional analyticsSessionId lasts for the browser tab/session and is not created by our optional analytics until you consent. The esim-cookie-consent-v1 choice is kept in local storage for up to 180 days. These are maximum configured periods; clearing storage or ending a session may remove it earlier.
8. Your cookie choices
Optional analytics is off by default. You can accept it, reject it or change the choice through Cookie settings in the footer. Rejecting optional analytics leaves essential checkout and security working; withdrawing consent stops future optional analytics and clears its browser session identifier. It does not invalidate earlier lawful processing. Your browser can also block/delete storage, but blocking necessary items may disrupt login or payment receipts. Hosted payment or sign-in services may use their own necessary storage under their notices; external links are not a permission to use unrelated tracking.
9. Your rights and complaints
Subject to legal conditions, you may request information and access, correction, erasure, restriction, portability, or object to processing based on legitimate interests. You may object to direct marketing and withdraw consent at any time. Email support@e-sim.gr; we may verify identity proportionately and normally respond within one month. Complex requests can be extended as permitted by law, with notice during the first month. You may complain to the Hellenic Data Protection Authority (dpa.gr) or the competent supervisory authority where you live or work.
10. Decisions, children and updates
Security systems can flag transactions; contact support to ask for human examination of a disputed restriction. We do not use this notice as consent to solely automated decisions with significant legal effects. The store is not directed at children acting without an authorised adult. If you believe a child supplied data improperly, contact us. This notice may change with the service or law; material changes will be communicated appropriately and new optional purposes will require fresh consent where necessary.
Terms and Conditions · Returns, Cancellations and Withdrawal