Privacy Policy

Ziki eSIM operates an online service selling travel eSIM data plans. This policy explains what personal information we collect, why we use it, who receives it, how long it is retained and how you can exercise your rights.

This policy describes processing, not blanket consent. Browsing, registering or purchasing does not consent to analytics, advertising or marketing messages. Necessary information is used to provide the service you request; rejecting nonessential cookies does not prevent purchasing.

Operator details as published in our terms: Ziki eSIM, licensed dealer no. 316093319, 31 HaShofet Binyamin St., Jerusalem. Phone: +972-55-442-4468. Privacy requests: support@zikiesim.com or the support page.

We may verify your identity before disclosing, correcting or deleting personal information.

• Contact details such as your name, email and, when provided, phone number.
• Order details including destination, plan, price, currency, order number, discount and payment status.
• eSIM details including ICCID, installation data, activation status, usage and expiry data reported by the network provider.
• Account details, language preference and notification settings.
• Technical information such as IP address, device, browser, viewed pages and referral source.
• Support correspondence and affiliate-program information where applicable.

We do not store complete payment-card details or CVV codes. We do not see the content of your browsing, messages or calls.

• To issue and deliver your eSIM and installation instructions.
• To manage orders, payments, refunds, invoices and account history.
• To provide technical support and resolve provider issues.
• To prevent fraud and abuse and protect the service.
• To improve the site and understand aggregate usage.
• To meet legal and accounting obligations.

Marketing messages are sent only where permitted and can be unsubscribed from at any time. Operational service messages are not marketing.

We process information to perform our contract with you, comply with legal obligations, protect legitimate interests such as security and fraud prevention, and where required, based on your consent.

Providing information is not generally a legal obligation, but required details must be supplied for us to deliver the service.

• International eSIM providers and mobile network operators, only as needed to issue and operate the plan.
• Payment processors for charges and refunds.
• Cloud, hosting, database, email and messaging providers.
• Analytics and marketing only with separate consent; recipients, purposes and data appear in the shared inventory below and Cookie Policy. Google Analytics runs only after analytics consent.
• Professional advisers and competent authorities where legally required.

Service providers may use information only for the agreed purpose and must protect it appropriately.

Because the service is international, information may be processed outside Israel, including in the European Union and the United States. We use providers and contractual safeguards designed to provide an appropriate level of protection.

When you use an eSIM abroad, local network operators process traffic data under the law of the destination country.

• Orders, invoices and payment records are retained for the period required by tax and accounting law, generally seven years.
• Account and eSIM history is retained while the account is active and for a reasonable period afterward.
• Support records are retained for service continuity; their retention period and deletion schedule require operator verification and approval.
• Unsubscribing stops future marketing, but does not automatically delete all records. Click and marketing-record retention and cleanup require operator approval.

Cookie expiry does not prove deletion from servers or providers. Deletion or anonymization requires an appropriate process; contact support to request deletion, subject to statutory retention duties.

We use reasonable technical and organizational safeguards, including encrypted transport, access controls, database-level authorization, monitoring and limited retention.

No system is completely secure. If a serious incident occurs, we will act and notify affected parties where required by law. Keep your sign-in details and eSIM QR code private.

Essential cookies operate as needed for the requested service. Analytics and marketing stay off until explicit consent everywhere. Browsing, scrolling, registering or purchasing is not consent. Blocked events are not queued or sent later.

Acceptance and rejection are saved for six calendar months as a product choice. Minimal signed evidence stays in your browser: random reference, time, language, purposes, choices and notice version, preserving prior acceptance upon withdrawal until expiry. There is no central consent database, and no email or full IP collection just for this evidence.

Change your choices through Cookie settings. Withdrawal stops future reporting and removes site-controlled tracking identifiers, but does not automatically erase provider-held data. Cookie consent is separate from terms and email/SMS advertising.

New tools must appear in the following list and Cookie Policy before activation. Unapproved tools or material purposes remain off until appropriate consent; cosmetic changes do not reset choices. Saving a requested link benefit is a separate action, not tracking consent.

Marketing is sent only with the consent required by law and includes an unsubscribe option. Order confirmations, installation information, usage alerts and support updates are operational messages and may still be sent as part of the service.

• Request access to personal information held about you.
• Request correction of inaccurate or incomplete information.
• Request deletion where retention is no longer necessary and no legal duty requires it.
• Withdraw marketing consent.
• Ask how information is used and shared.
• Complain to the competent privacy authority.

Submit requests through support. We may verify your identity and will explain if a request cannot be fulfilled in full.

The service is intended for adults, or minors using it with a parent or guardian and their payment method. We do not knowingly collect information from children under 14 without parental consent.

Affiliates see performance totals such as clicks, orders and commissions, not identifying customer details. Affiliate records may include contact details, referral codes, performance data and bank details needed for payouts.

New marketing attribution and visit measurement require valid marketing consent. You can explicitly save a benefit separately for redemption/referrer credit without click, IP, browser or campaign-tag collection. Rejection does not cancel benefits or commissions already legitimately recorded on an order.

We may update this policy when laws, providers or services change. The current version and update date appear on this page. Material changes may also be announced on the site or by email.