Our privacy policy

This policy explains what personal data Travo Data collects when you use our website, your account and our eSIM data plans, why we use it, who we share it with and the rights you have. Travo Data is operated by Travomobile.com, which is the controller of your personal data.

1. Personal data we collect, and how we collect it

We collect personal data directly from you (for example when you create an account or buy a plan), automatically when you use our website and eSIMs, and from our partners (the mobile network platform that runs your eSIM, and our payment provider).

2. Information we collect

Account details

When you create an account, or when our team creates one for you, we collect your full name, e-mail address, country and mobile phone number. Your password is stored only in a securely hashed form; we cannot read it.

eSIM and network information

For every eSIM we issue to you we keep its identifiers (ICCID, the network subscriber ID and number, IMSI and the activation code used to install it) and the plans active on it. The network platform also reports, and we store, your data consumption per day, the country and network the eSIM last connected to, the radio technology used and the identifier of the device the eSIM is installed on. We use this to show your usage, send usage alerts and help with support. We do not see the content of your traffic or the websites you visit.

Orders and payments

We keep a record of every order, renewal and refund: the plan, price, date and status. Card payments are processed by Stripe on its own secure page. We never receive or store your full card number or security code; Stripe gives us only a customer reference, a payment-method reference, the card brand and its last four digits, so that monthly plans can renew and you can recognise the card in your account.

Communications

If you contact us through the contact form, by e-mail or by WhatsApp, we keep your message, your name and how to reply to you. We record which service e-mails we sent you (for example which usage or expiry alerts) so we do not send them twice.

Technical data

When you use the website our servers receive your IP address, browser and device type, as with any website. We keep sign-in and security logs to protect your account.

3. Special categories of personal data

We do not ask for, and do not knowingly process, sensitive data such as health information, biometric data, religious or political views. We do not verify identity documents.

4. Why and how we use your personal data

• To provide the service (performance of our contract with you): issuing your eSIM, activating, adding, switching and renewing plans, showing your QR code, balances and usage.
• To take payments and refunds, including charging your saved card for monthly renewals until you cancel.
• To send service e-mails: account and password e-mails, order confirmations and receipts, renewal reminders and results, usage alerts (50%, 80%, 95% and 100% of your data) and expiry notices. These are part of the service and are not marketing.
• To give support and answer your messages.
• To keep the service secure and prevent fraud and abuse (our legitimate interest).
• To comply with the law, for example tax, accounting and telecommunications rules, and lawful requests from authorities.

We do not sell your personal data and we do not use it for automated decisions that have legal or similarly significant effects on you.

5. Who may have access to your personal data

• Our mobile network platform partner (Telco-Vision), which provides the eSIMs and the data service. It holds your eSIM identifiers and usage, and we send it your name, e-mail address and phone number with each eSIM so the line is registered to you.
• Local mobile network operators in the countries you travel to, which carry your data traffic as roaming partners and receive the network identifiers needed to do so.
• Stripe, our payment processor, for card payments, saved cards, renewals and refunds.
• Our e-mail delivery provider (SendGrid by Twilio), to deliver service e-mails.
• Our hosting and infrastructure providers, which store the website and its database on our behalf.
• WhatsApp (Meta), only if you choose to contact us that way.
• Authorities, courts or advisers, where the law requires it or to establish or defend legal claims.
• A buyer or successor, if our business is sold or merged, under the same protections.

Our providers may only use your data to provide their service to us.

6. How long we keep your personal data for

• Account and eSIM details: for as long as you have an account, and up to 24 months after your last plan ends, so you can reuse an eSIM and we can answer questions about it.
• Orders, payments and refunds: for the period tax and accounting law requires (usually up to 10 years).
• Daily usage records: up to 24 months.
• Support messages: up to 24 months after the conversation ends.
• Security logs: up to 12 months.

When data is no longer needed we delete or anonymise it.

7. How we keep your personal data secure

The website is served only over encrypted connections, passwords are hashed, card data stays with Stripe, and access to customer data is limited to staff who need it for their work. No system is perfectly secure; if a breach affects your data we will tell you and the authorities where the law requires.

8. International transfer of your personal data

Our partners and providers may process your data outside your country, including in the European Union and the United States, and roaming means your traffic is handled by networks in the countries you visit. Where data leaves the EU/EEA or the UK we rely on adequacy decisions or the European Commission's standard contractual clauses (or the UK equivalent) with our providers.

9. Know your rights

Depending on where you live, you can ask us to:

• give you access to, or a copy of, your personal data;
• correct it (you can also edit your name, e-mail, country and phone number yourself under Profile);
• delete it, unless we must keep it, for example payment records;
• restrict or object to how we use it;
• send it to you or another provider in a portable format;
• withdraw any consent you gave, without affecting earlier processing.

To make a request, write to noreply@travomobile.com from the e-mail address on your account. We reply within one month. You can also complain to your local data protection authority.

Cookies. We use only the cookies needed to run the site: keeping you signed in, remembering you if you tick "Keep me signed in", and protecting forms against forgery. We do not use advertising or tracking cookies. Country flag images on the store are loaded from a third-party image service (flagcdn.com), which receives your IP address like any web request. Stripe's payment page sets its own cookies under Stripe's policy.

Children. Our services are not intended for children under 16 and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.

10. Compliance with local regulations

EU/EEA and United Kingdom

• Our legal bases are: performance of a contract (providing the service), legal obligation (tax and telecoms records), legitimate interests (security, fraud prevention, service improvement) and consent where we ask for it.
• You have the rights listed in section 9 and may complain to your supervisory authority, for example in the country where you live or work.

United States (including California)

• We do not sell or "share" personal information for cross-context behavioural advertising.
• The categories we collect are identifiers, commercial information (orders), internet activity on our site and approximate location (the country your eSIM connects in), for the purposes in section 4.
• You may request access, correction or deletion as described in section 9. We will not discriminate against you for using these rights.

11. Changes to this policy

We may update this policy as our service or the law changes. We will post the new version here with a new date and, for significant changes, tell you by e-mail.

Contact information. Travomobile.com. Privacy questions: noreply@travomobile.com. Everything else: contact us.