Privacy policy
Last updated: 19.10.2026
This is an English translation provided for convenience. The Hebrew version is the binding text; if the two differ, the Hebrew version applies.
1. Database controller
The controller of the database is the operator of the site e-sims.co.il. Privacy enquiries: support@e-sims.co.il.
2. What information is collected
Name, email, phone number, order details (destination, plan, price), eSIM details (ICCID, activation code — encrypted), the card’s last 4 digits, type and country of issue (not the full card number), IP address (stored hashed) and service correspondence (email/WhatsApp). We do not store credit card details.
3. Obligation or consent
Giving your name, email and phone is needed to deliver the eSIM and issue a receipt; there is no legal obligation to give them, but without them we cannot carry out the order (the consequence of not giving them). Consent to marketing messages is separate, is given by ticking a box that is not ticked in advance, and is not a condition of purchase.
4. Purposes
Carrying out the order and delivering the eSIM; issuing receipts and keeping books as required by law; service and support (including resending the eSIM); preventing fraud and abuse; and marketing messages — only with consent.
5. Who receives the information and for what purpose
Information is passed to third parties only as needed for the purposes above:
| Recipient | Country | Purpose | Which details |
|---|---|---|---|
| esimaccess (Redtea Mobile) | Singapore / USA | Allocating the eSIM profile | Order identifier only; no name, email or phone is given |
| Stripe Payments UK Ltd | United Kingdom (also processed in the USA/Europe) | Processing credit cards, Apple Pay, Google Pay; fraud prevention | Name, email, card details (given directly to Stripe), IP address |
| Cloudflare, Inc. | USA / Europe (database in the European region) | Hosting the site, the database, security, routing, bot protection | All order data (encrypted), IP address |
| Resend, Inc. (sends through Amazon SES infrastructure) | Sent from Ireland; account data and sending logs stored in the USA | Sending business emails (eSIM, receipt, order updates) | Email, name, message content including the QR code |
| Accountant / tax authorities and the Privacy Protection Authority | Israel / United Kingdom | Legal obligation | Transaction details on request |
6. Transfer abroad
Some of our service providers operate outside Israel (the United Kingdom, the European Union, the USA and Singapore). The transfer is made to carry out the transaction you asked for and in accordance with the Privacy Protection Regulations (Transfer of Data to Databases Abroad), 5761-2001.
7. Cookies and tracking
The site does not currently run any third-party analytics or advertising tools. Local browser storage is used to remember your choices (for example the trip length you picked), and Cloudflare Turnstile is used on the payment page to protect against bots. We do not sell information.
8. Information security
Information is encrypted in transit and at rest; eSIM activation codes are encrypted at field level and are accessed only to send them to you; access to the systems is limited to the owner and a few authorised people and is recorded in an access log. A serious security incident will be reported to the Privacy Protection Authority as required, and we will notify affected customers.
9. Retention period
Orders and receipts: 7 years (bookkeeping obligation). eSIM activation codes and QR codes: deleted 90 days after the plan expires (and at least 270 days after purchase, so we can resend them). Marketing consent: until it is withdrawn, and the record of the withdrawal for 3 more years.
10. Your rights
The right to review your information (section 13 of the Privacy Protection Law), to correct and delete it (section 14), and to unsubscribe from marketing. To exercise them: email support@e-sims.co.il. We will reply within 30 days. Deletion: your personal details will be removed and replaced with an anonymous identifier, but the financial details of the transaction will be kept for 7 years as required by law.
11. Minors
The service is intended for people aged 18 and over. We do not knowingly collect information about minors.
12. Changes
We will update this page when something changes; the version and update date appear at the top. The version history is available on request.