Who We Share Your Data With

We think you should be able to see this on one page rather than dig through a privacy policy. This is the complete list of companies that process personal data on our behalf, what they get, and why. Most travel eSIM companies do not publish this at all. We would rather you could check.

Stripe — Ireland and United States. Processes card payments and runs fraud checks. Receives your payment details, email address and billing country. We never see or store your full card number.

eSIMAccess — Hong Kong. Creates the eSIM profile and assigns the network at your destination. Receives technical identifiers only: the package code and the resulting ICCID. It does not receive your name, email or address. Citrus Mobile — used for a small number of destinations where our main supplier has no coverage. Same basis: technical identifiers only. The local mobile operator at your destination sees a device connecting to its network, exactly as it would for any phone. It does not receive your account details from us.

SendPulse — sends your transactional email: order confirmations, QR code delivery, install reminders and refund confirmations. Receives your email address, your name and the contents of that message.

WhatsApp Business, operated by Meta — if you choose to contact us on WhatsApp, your phone number and messages are processed there. Telegram — we use it internally to route WhatsApp conversations to a human on our team, so the content of those support conversations passes through it. If you would rather not use either, email support@megaesim.com instead. Nothing then goes through Meta or Telegram, and you get the same support from the same people.

Google Analytics 4 and Google Tag Manager — website analytics. Only active after you accept analytics cookies. Data is deleted automatically after 14 months. StatCounter — a simple visitor counter, on the same consent basis. Refuse them in the cookie banner and neither one runs. Nothing about the site or the price changes if you do.

Our website, database and backups are held with our hosting provider. It stores the data but does not use it for anything of its own.

If we add a company that processes personal data, we add it here. Where a change materially affects how your data is handled, we email registered customers rather than quietly editing the page. Because MegaEsim is operated from the United Arab Emirates and several of these companies sit elsewhere, personal data of people in the EU, EEA and UK is transferred under the Standard Contractual Clauses, with the UK Addendum where UK data is involved. The UAE does not have an EU adequacy decision, so we do not rely on one.