This policy explains what personal data HB Digital ("HBsim", "we") collects when you use the website hbsim.com and the HBsim mobile app (together, the "Service"), why we collect it, who we share it with, how long we keep it, and the choices you have. We collect only what we need to sell, deliver and support travel eSIMs. We do not sell your personal data, we do not show ads, and we do not use advertising trackers.
1. Who we are
The data controller is HB Digital, operator of the HBsim brand. Contact for any privacy question or request: support@hbsim.com.
2. Data we collect
Data you give us
- Contact details: e-mail address (required to deliver your eSIM and receipt); name (optional).
- Account data (only if you create an account): e-mail, optional name, preferred language, and your password, which we store only as a secure one-way hash.
- Phone number: only when you pay with an Algerian bank card (CIB/Edahabia), because the payment provider requires it.
- Messages you send us by e-mail or WhatsApp for support.
- Business partners: name, company, e-mail, phone and payout details you give us when you apply to the partner program.
Data created when you buy
- Order details: destination, plan, price, currency, date, order number, promo or partner code used.
- Payment status: confirmation from our payment providers (paid, failed, refunded). We never receive or store your card number, CVC or bank login. Card details are entered on the payment provider's secure page.
- eSIM details: the eSIM identifier (ICCID), the activation code and QR code needed to install it, and its status and remaining data as reported by our network partner (data volume used, expiry). We do not receive the websites you visit, your calls, messages or location from the eSIM.
Data collected automatically
- IP address and browser/device type, used for security (fraud and abuse prevention, rate limiting of sign-in attempts) and to fix errors.
- Error reports: if a page fails, the app or website sends us the error message, the page address and the browser type. These reports contain no name or e-mail.
- Referral information: if you arrive through a partner link, the partner code is stored with your order so the partner can be paid a commission. Partners see their sales and commissions, never your name or e-mail.
We do not collect your precise location, contacts, photos, microphone or camera, and we do not use the Android advertising ID.
3. Why we use your data (and legal basis)
- To process your order, issue and deliver your eSIM, show it in "My eSIMs" and provide support (performance of a contract).
- To create and secure your account and keep you signed in on your device (contract).
- To prevent fraud and abuse and keep the Service secure (legitimate interest).
- To keep accounting and tax records (legal obligation).
- To send service messages about your order. We send marketing e-mails only if you subscribed, and every message lets you unsubscribe (consent).
4. Who we share data with
We share only the data each service provider needs, under contracts that require them to protect it:
- Payment providers: Stripe (international cards, Apple Pay, Google Pay), SofizPay and Chargily (Algerian CIB/Edahabia cards). They receive the amount, your e-mail and, for Algerian cards, your name and phone, and process your payment details under their own privacy policies.
- Network partners (eSIM Access / Redtea Mobile and other licensed eSIM wholesalers): they receive only the order number and the plan, so they can issue the eSIM. We do not send them your name or e-mail.
- Hosting and e-mail: Hostinger hosts the Service and sends our e-mails.
- Internal notifications: we use Telegram to alert our staff about new orders and errors; customer e-mail addresses are masked in these messages.
- Authorities: when required by law or to protect our rights and users.
Some providers process data outside your country (for example in the European Union or the United States). Where required, transfers are protected by standard contractual clauses or equivalent safeguards.
5. How long we keep data
- Account: until you delete it.
- Orders and invoices: for as long as needed to support you and handle refunds, and as long as tax and accounting law requires (up to 10 years). If you delete your account or ask us, your name, e-mail, phone and eSIM install codes are removed and the order is kept only as an anonymous accounting record.
- IP addresses in orders: removed after 12 months. Security and rate-limit records: deleted after 30 days. Error reports: kept for up to 90 days.
6. Delete your account and data
You can delete your account and personal data at any time:
- In the app or website: My account → Settings → Delete account.
- Without signing in: go to hbsim.com/delete-account, enter your e-mail and confirm the link we send you.
- By e-mail: write to support@hbsim.com from the address you used.
Deletion is immediate in most cases and always completed within 30 days. Installed eSIMs keep working until they expire. We keep only the anonymous accounting records described above.
7. Your rights
Depending on where you live (for example under the EU/UK GDPR), you can ask to access, correct, delete or export your data, object to or restrict its use, and withdraw consent at any time. Write to support@hbsim.com; we answer within 30 days. You can also complain to your local data protection authority.
8. Cookies and local storage
We use only cookies needed for the Service: a session cookie when you sign in, an optional 30-day "stay signed in" cookie, and local storage on your device for your language, currency and last order. We use no advertising or cross-site tracking cookies. Payment pages of our providers may set their own cookies.
9. The Android app
The app shows the same Service as hbsim.com. It uses the Internet permission and, if you allow it, notifications about your orders. It does not access your location, contacts, files, camera or microphone, and contains no ads or analytics SDKs.
10. Security
All traffic is encrypted with HTTPS. Passwords are hashed, sign-in attempts are limited, staff access is protected, and order data is stored outside the public website. No method is 100% secure, but we work to protect your data and will notify you and the authorities of a breach where the law requires.
11. Children
The Service is not intended for children under 16, and we do not knowingly collect their data. If you believe a child has given us data, contact us and we will delete it.
12. Changes
We may update this policy. We will change the date above and, for important changes, inform account holders by e-mail or in the app.
13. Contact
HB Digital (HBsim) · support@hbsim.com · WhatsApp +39 351 322 6758