Privacy Policy

BIT&UNION LTD (company number 16541499, registered address 20 Wenlock Road, London, England, N1 7GU, trading as TripCell ("we", "us", "our"), is the data controller responsible for your personal data in connection with your use of tripcell.co (the "Website") and our prepaid data-only eSIM services (the "Services").

This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, who we share it with, and what rights you have. We are committed to processing your personal data in accordance with the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018.

Please also read our Cookie Policy, which explains in more detail the cookies and similar technologies we use on the Website.

1. Personal Data We Collect

We collect the following categories of personal data:

• Account and contact data: name, email address, and password when you register a User Account.
• Order and payment data: billing details, transaction history, and payment confirmation data. Full card numbers are processed directly by our PCI DSS-compliant payment processors and are not stored on our own servers.
• Device and eSIM data: device model, device eSIM identifier (EID), IMEI (where provided for activation or support purposes), and eSIM installation/activation status.
• Usage and network data: data volume consumed, Plan activation date and time, approximate location at country/network level (necessary to connect you to the correct local network), connection timestamps, and top-up history.
• Technical data: IP address, browser type and version, operating system, and other data collected via cookies and similar technologies, as described in our Cookie Policy.
• Support data: correspondence and information you provide when you contact our customer support team.

We do not knowingly collect the content of your communications, browsing activity, or call/SMS records, as our Services are data-only and we do not provide voice or SMS functionality.

2. How We Use Your Personal Data

We use your personal data for the following purposes and on the following legal bases under the UK GDPR:

• To provide the Services — to process your order, provision and activate your eSIM, connect you to the relevant local network, and provide top-ups and customer support. (Legal basis: performance of a contract.)
• To process payments and prevent fraud. (Legal basis: performance of a contract; legitimate interests in preventing fraud.)
• To communicate with you about your order, Plan status, data usage notifications (including the 70% usage alert), and support requests. (Legal basis: performance of a contract.)
• To improve our Services, including network performance monitoring, troubleshooting, and product development. (Legal basis: legitimate interests.)
• To send marketing communications about offers, new destinations, or products, where you have consented to receive them, or where permitted as an existing customer under the "soft opt-in" rule; you may opt out at any time. (Legal basis: consent, or legitimate interests for existing customers.)
• To comply with legal obligations, including tax, accounting, and regulatory requirements, and to respond to lawful requests from authorities. (Legal basis: legal obligation.)
• To detect, prevent, and investigate fraud, unauthorised use, or breaches of our Terms and Conditions. (Legal basis: legitimate interests.)

3. Sharing Your Personal Data

We share personal data with the following categories of recipients, only to the extent necessary for the purposes described above:

• Local and international mobile network operators and connectivity aggregators/partners, in order to provision, activate, and maintain your eSIM connection in your destination country or region.
• Payment processors, who are PCI DSS compliant, to process transactions securely.
• IT, hosting, and customer support service providers, who process data on our behalf under data processing agreements.
• Analytics and marketing providers, where you have consented to related cookies, as described in our Cookie Policy.
• Professional advisers and regulators, including auditors, legal counsel, and tax authorities, where required.
• Any purchaser or successor, in the event of a merger, acquisition, or sale of some or all of our business assets, subject to appropriate safeguards.

We do not sell your personal data to third parties.

4. International Data Transfers

Because our Services connect you to local mobile networks in over 200 countries and regions, certain technical and usage data necessarily is processed by network operators and partners located outside the UK, including in countries that have not been assessed by the UK Government as providing an adequate level of data protection.

Where we transfer personal data outside the UK, we do so on the basis of the UK's "adequacy regulations" where applicable, or by using appropriate safeguards such as the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, together with additional technical and organisational measures where necessary. You may request further information about the safeguards we use by contacting us at [email protected].

5. Data Retention

We retain personal data only for as long as necessary for the purposes set out in this Policy, including:

• Account data — for as long as your User Account remains active, and for a reasonable period afterwards in case you wish to reactivate it or to comply with legal obligations.
• Order and payment data — for up to 7 years, in line with our statutory accounting and tax record-keeping obligations.
• Usage and network data — typically retained for up to 24 months for support, fraud prevention, and service-improvement purposes, after which it is deleted or anonymised.
• Marketing data — until you withdraw consent or object to further processing.

6. Your Rights

Under the UK GDPR, you have the right to:

• Access the personal data we hold about you;
• Request rectification of inaccurate or incomplete personal data;
• Request erasure of your personal data, subject to certain legal exceptions;
• Request restriction of processing in certain circumstances;
• Object to processing based on legitimate interests or for direct marketing purposes;
• Request data portability, where technically feasible;
• Withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact us at [email protected]. We may need to verify your identity before responding. We will respond to your request within one month, or explain if an extension is required.

If you are not satisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at https://ico.org.uk or by calling 0303 123 1113.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction, including encryption of data in transit, access controls, and regular security reviews. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Children's Privacy

Our Services are intended for use by individuals aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If you believe a child has provided us with personal data, please contact us at [email protected] so that we can take appropriate action.

9. Cookies and Similar Technologies

We use cookies and similar technologies on the Website to enable core functionality, remember your preferences, and (where you consent) measure performance and deliver relevant marketing. Full details are set out in our separate Cookie Policy, available on the Website.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will post the revised Policy on the Website with an updated "Last updated" date, and where changes are material, we will take reasonable steps to notify you.

11. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at:

[email protected]

BIT&UNION LTD, company number 16541499, registered address: 20 Wenlock Road, London, England, N1 7GU