This policy explains what personal data Abrogo collects when you visit abrogo.com or buy an eSIM, why we collect it, who we share it with, and what control you have. We collect only what we need to take your payment, deliver your eSIM and help you if something goes wrong.

Who is responsible for your data: [LEGAL ENTITY NAME], [REGISTERED ADDRESS], operating as Abrogo. We are the “controller” of your personal data under the GDPR and similar laws. Contact us at support@abrogo.com.

What we collect

• Contact details: your name (if you give it), email address and, if you provide it, WhatsApp or phone number.
• Order and transaction details: what you bought, the amount, date, order number, payment status, and your Abrogo Coins and discount code history.
• eSIM details: the activation code, ICCID and data usage status linked to your order, so we can deliver the eSIM and show you your QR code and data left.
• Device and technical information: your phone model, operating system, IP address and browser type, which we use to troubleshoot setup and prevent fraud.
• Support messages: what you send us when you contact support, and our replies.
• Account details: we create an account for you at checkout using your email. Your password is stored in encrypted form.

We do not ask for passport, ID or location tracking data, and we do not collect payment card numbers.

Card payments are handled by Stripe, not by us

When you pay by card, Apple Pay or Google Pay, your payment details go directly to Stripe through Stripe’s secure payment fields. Your full card number, expiry date and security code are never stored on, or pass through, Abrogo’s servers. We only receive a confirmation of payment and limited details such as the card type and last four digits. Stripe’s use of your data is covered by Stripe’s Privacy Policy.

Why we use your data

What we do	Our legal basis (GDPR)
Take payment, create your account, deliver your eSIM and email your receipt and QR code	Contract: it is needed to fulfil your order
Help you install and troubleshoot your eSIM, and handle refunds	Contract, and our legitimate interest in providing good support
Prevent fraud, abuse and chargeback misuse, and keep our systems secure	Legitimate interest
Keep financial and tax records	Legal obligation
Run the Abrogo Coins rewards program	Contract, as part of your account
Send you marketing emails, if we ever offer them	Your consent, which you can withdraw at any time

We do not sell your personal data, and we do not use it for automated decisions that have legal effects on you.

Who we share it with

We share data only with the companies that help us run the service, and only what each needs:

• Stripe: payment processing and fraud prevention.
• Brevo: sends our transactional emails, such as your receipt and your eSIM details with QR code.
• eSIM provisioning partners and telecom gateways: the suppliers that issue your eSIM profile and connect it to local carriers. They receive your order details and eSIM identifiers, and the technical information needed to activate the profile.
• Hosting and technical providers: companies that host our website and store our data on our behalf.
• Authorities and professional advisers: where the law requires it, or to protect our legal rights.

These providers act on our instructions or under their own privacy obligations. They are not allowed to use your data for their own marketing.

International transfers. Some of these companies are located outside your country, including outside the UK and European Economic Area. When your data is transferred, we rely on safeguards such as the European Commission’s Standard Contractual Clauses, or an adequacy decision where one exists.

Cookies

We use a small number of cookies and similar technologies:

• Essential cookies keep your cart, checkout, login session and language or currency choice working. The site cannot work properly without them.
• Payment and security cookies are set by Stripe to help detect fraud and make payments secure.
• Analytics or marketing cookies are only used if we switch them on, and where the law requires it, only after you agree.

You can block or delete cookies in your browser settings. Blocking essential cookies may stop checkout from working.

How we keep your data safe

• The whole site runs over HTTPS encryption.
• Card data is never stored by us, because Stripe handles it.
• Passwords are stored in hashed form, and access to our systems and customer data is limited to people who need it for their work.
• eSIM activation details are shown only to the account or order they belong to.
• We review our suppliers’ security and keep our software up to date.

No online service can promise perfect security. If a breach affects your personal data, we will tell you and the relevant authority within the time the law requires.

How long we keep it

Data	How long
Order, invoice and payment records	Up to 7 years, as required for tax and accounting
Account details, eSIM history and Abrogo Coins	While your account is open, then deleted or anonymised when you ask us to close it
Support emails	Up to 24 months after the case is closed
Device and IP information used for troubleshooting and fraud checks	Up to 12 months

We keep some records longer when we have to, for example to handle a dispute or comply with a legal requirement.

Your rights

Depending on where you live, you can ask us to:

• Access the personal data we hold about you and get a copy.
• Correct anything that is wrong or out of date.
• Delete your data and close your account, unless we must keep some of it by law.
• Restrict or object to certain uses of your data.
• Move your data to another service in a common format.
• Withdraw consent where we rely on it, such as for marketing emails.

To make a request, email support@abrogo.com from the address on your account with the subject line Privacy request. We may need to confirm it is you. We reply within one month. There is no charge, unless a request is clearly excessive.

If you think we have handled your data badly, please tell us first so we can fix it. You also have the right to complain to your local data protection authority. In the EU you can find yours through the European Data Protection Board, and in the UK it is the Information Commissioner’s Office.

Children

Our service is for adults. We do not knowingly collect data from anyone under 16. If you think a child has given us personal data, email us and we will delete it.

Changes to this policy

If we change how we use your data, we will update this page and the date at the top, and tell you by email or on the site if the change is significant.

Contact

Questions about privacy: support@abrogo.com. See also our Terms of Service and Contact page.