GDPR Policy

Who this applies to

This policy explains how NoIDeSim handles personal data of people in the European Economic Area and the United Kingdom under the General Data Protection Regulation (GDPR) and UK GDPR. It complements our Privacy Policy, which lists the data we process.

Data minimisation is the product

The whole service is built around Article 5(1)(c) GDPR — collecting only what is necessary. We need no name, email, phone number or identity document to sell you an eSIM, so we do not collect them. The personal data we hold is limited to your Telegram user ID and related order, eSIM, payment and support records.

Legal bases for processing

• Performance of a contract (Art. 6(1)(b)) — delivering the eSIM you bought, processing payment and providing support.
• Legal obligation (Art. 6(1)(c)) — keeping sales records required by accounting and tax law.
• Legitimate interests (Art. 6(1)(f)) — preventing fraud and abuse, securing our servers through access logs, defending legal claims, and improving the website with Google Analytics and anonymous session recordings (Inspectlet). You can object to both at any time with “Don’t record my visit” at the bottom of every page.

We do not rely on consent for marketing because we do not do marketing tracking, and we make no decisions about you based solely on automated processing that produce legal or similarly significant effects.

International transfers

Our service providers — Telegram, the crypto payment processor, the eSIM distributor and hosting providers — may process data outside the EEA and UK. Where this happens, transfers rely on the safeguards available under the GDPR, such as adequacy decisions or standard contractual clauses offered by those providers. We send the eSIM distributor only the plan code needed to issue the eSIM, not your Telegram data.

Retention

Order and payment records are kept as long as needed to support your eSIM and to meet statutory accounting retention periods; support conversations are kept until resolved plus a reasonable period; web server logs are rotated within weeks.

Your rights

• Access — get a copy of the data linked to your Telegram account.
• Rectification — correct inaccurate data.
• Erasure — ask us to delete your data, except records we must keep by law.
• Restriction — ask us to limit processing while a request is checked.
• Portability — receive your order data in a machine-readable format.
• Objection — object to processing based on legitimate interests.
• Complaint — lodge a complaint with your local data protection authority.

How to make a request

Send your request from the same Telegram account you used to buy, through support in the bot (see Contact). You can also write to support@noidesim.com and include your order number or Telegram username. Because we hold no identity documents, the Telegram account is how we verify that the request is yours. We answer within one month, as the GDPR requires; complex requests may take longer and we will tell you if so.

Data breaches

If a personal data breach is likely to put your rights at risk, we will notify the competent authority and, where required, affected users through the bot without undue delay.