Privacy Policy

Space Sim (space-sim.com) · Operated by AUREVISTAS UI LIMITED

1. Who we are

1.1 The controller of your personal data is AUREVISTAS UI LIMITED, a private company limited by shares incorporated in England and Wales on 6 October 2026 under company number 17503026, with its registered office at 50-54 St Paul's Square, Birmingham, United Kingdom, B3 1QS, trading as Space Sim ("we", "us"). We operate the Website at https://space-sim.com and sell prepaid, data-only eSIM Plans.

1.2 For any question about this Policy or your personal data, contact us at [email protected]. We have not appointed a Data Protection Officer because we are not required to do so under Article 37 of the UK GDPR.

1.3 We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Please also read our Cookie Policy.

2. Personal data we collect

• Account and contact data: e-mail address or phone number, password (stored in encrypted form) and, where you give it, your name.
• Order and payment data: Plans and Top-ups bought, prices, order references, payment status and billing details. Full card numbers are entered on the page of our payment service provider and are not stored on our servers.
• Device and eSIM data: device model, eSIM identifier (EID), eSIM profile identifiers (such as ICCID), IMEI where you give it for support, and installation and activation status.
• Usage and network data: data volume used, Activation date and time, country and network used to connect you, connection timestamps and Top-up history. We do not collect the content of your communications or your browsing history.
• Technical data: IP address, browser and operating system, and data collected by cookies as described in the Cookie Policy.
• Support data: messages you send us and records of refund requests and complaints.

3. Why we use your data and our lawful bases

• To provide the Plans (Account, orders, eSIM delivery, Activation, data alerts, Top-ups and support): performance of a contract (Article 6(1)(b) UK GDPR).
• To take payments, handle refunds and chargebacks and prevent fraud: performance of a contract and our legitimate interest in preventing fraud and misuse (Article 6(1)(f)).
• To comply with tax, accounting, sanctions and other legal obligations and lawful requests of authorities: legal obligation (Article 6(1)(c)).
• To secure and improve the Website and our services, including network performance monitoring and troubleshooting: legitimate interests (Article 6(1)(f)).
• To send marketing about offers and new destinations: your consent or, for existing customers, the soft opt-in permitted by the Privacy and Electronic Communications Regulations 2003. You can unsubscribe at any time.

4. Who we share data with

• eSIM platform providers and mobile network operators, to issue, activate and maintain your eSIM in the destination;
• our payment service provider and card schemes, to process payments, refunds and chargebacks and to prevent fraud;
• hosting, cloud, e-mail and customer-support providers acting on our instructions as processors;
• analytics and advertising providers, where you have consented to the related cookies;
• professional advisers, auditors and insurers under a duty of confidentiality;
• law-enforcement agencies, courts, regulators and tax authorities where required by law;
• a purchaser or successor of our business, subject to equivalent protection of your data.

4.1 We do not sell your personal data.

5. International transfers

5.1 Because Plans connect you to networks in many countries, some technical and usage data is processed by network operators and partners outside the United Kingdom, including in countries without a UK adequacy decision. Where we transfer personal data outside the United Kingdom, we rely on UK adequacy regulations, the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, or another lawful transfer mechanism, together with additional safeguards where necessary. You may ask us for more information.

6. How long we keep data

• Account data: while your Account is open and for a reasonable period afterwards to deal with any questions or legal obligations;
• order and payment data: up to 7 years, for accounting and tax purposes;
• usage and network data: usually up to 24 months, for support, refunds, fraud prevention and service improvement, then deleted or anonymised;
• support and complaint records: up to 7 years, to deal with legal claims;
• marketing data: until you unsubscribe or object.

7. Security

7.1 We use appropriate technical and organisational measures, including encryption in transit, role-based access controls and regular security reviews. If a personal data breach is likely to result in a risk to you, we will notify the Information Commissioner's Office and, where required, you.

8. Your rights

8.1 You have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, to data portability and to withdraw consent at any time. These rights are subject to conditions and exemptions in law. To exercise them, contact [email protected]. We may need to verify your identity. We reply within one month, which may be extended by two further months for complex requests.

8.2 You may complain to the Information Commissioner's Office (ico.org.uk, telephone 0303 123 1113). We would appreciate the chance to deal with your concern first.

9. Children

9.1 The Website is intended for persons aged 18 or over. We do not knowingly collect data about children and will delete it if we learn that we have done so.

10. Changes and contact

10.1 We may update this Policy and will show the date of the latest version at the top. Material changes will be notified on the Website or by e-mail.

10.2 Contact: [email protected]. Registered details: AUREVISTAS UI LIMITED, company number 17503026, registered office: 50-54 St Paul's Square, Birmingham, United Kingdom, B3 1QS.