Privacy Policy

This Privacy Policy describes how haru eSIM ("we", "us", or "our") collects, uses, and shares information about you when you use our website, mobile application, and eSIM services (collectively, the "Services"). By using our Services, you agree to the collection and use of information in accordance with this policy.

We are committed to protecting your personal information and your right to privacy. If you have any questions, please contact us at privacy@haruesim.com.

1. Information We Collect

We collect information you provide directly to us, including:

• Account Information: name, email address, and password when you create an account.
• Purchase Information: billing details, payment card information (processed securely via Stripe), and transaction history.
• Communications: messages you send us, including support inquiries and feedback.

We also automatically collect certain information when you use our Services, including IP address, browser type, device identifiers, and usage data.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our Services, including processing eSIM purchases and delivering QR codes.
• Process transactions and send related information, including purchase confirmations.
• Send promotional communications (only with your consent, which you may withdraw at any time).
• Monitor and analyse trends, usage, and activities to improve our Services.
• Detect, investigate, and prevent fraudulent transactions and other illegal activities.
• Comply with legal obligations.

3. Sharing of Information

We do not sell, trade, or rent your personal information to third parties. We may share your information with:

• Service Providers: third-party vendors who assist us in operating our Services (e.g., Stripe for payments, AWS for hosting).
• eSIM Network Partners: telecom providers required to activate your data plan in the destination country.
• Legal Requirements: where required by law, court order, or governmental authority.

4. Data Retention

We retain your personal information for as long as necessary to provide the Services and fulfil the purposes outlined in this policy, unless a longer retention period is required by law. Account data is typically retained for the duration of your account and up to 7 years after account closure for accounting purposes.

5. Cookies & Tracking

We use cookies and similar tracking technologies to track activity on our Services and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Services.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Correction: request that we correct inaccurate data.
• Deletion: request that we delete your personal data.
• Portability: request a machine-readable copy of your data.
• Objection: object to the processing of your data for certain purposes.

To exercise any of these rights, please contact us at privacy@haruesim.com.

7. Security

We implement appropriate technical and organisational security measures to protect your personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. All payment data is encrypted and processed by Stripe, a PCI DSS Level 1 certified provider. However, no method of transmission over the internet is 100% secure.

8. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated "Last Updated" date at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

9. Contact Us

If you have questions or concerns about this Privacy Policy or our privacy practices, please contact us at:

• Email: privacy@haruesim.com
• Support: support@haruesim.com