PRIVACY POLICY

1. Introduction

This Privacy Policy applies to the use of our website Miio (accessible to https://www.esim-miio.com/) and the eSIM card services we offer.

As the website publisher, Miio is the Data Controller personal data collected in connection with the sale of our products, in accordance with applicable laws, including the General Data Protection Regulation (GDPR).

Our commitment: to guarantee the security, confidentiality and transparency in the processing of your data.

2. The Data We Collect and the Purpose

We collect personal data only when necessary to provide you with the service ordered, improve our offering or comply with our legal obligations.

Data Type	Examples	Purpose of the Processing	Legal Basis (GDPR)
Identification Data	Name, surname, email address, telephone number.	Managing your customer account, sending eSIM information and QR code, support communication.	Contract Execution
Transaction Data	Purchase history, payment method (not stored), order number.	Order processing, invoicing, warranty follow-up.	Contract Execution
eSIM Technical Data (via our partner)	Device IMEI (if required for activation), data usage, network information.	eSIM provisioning, service activation, technical support (diagnostics).	Contract Execution
Navigation Data	Cookies, IP address, pages viewed, session time.	Website improvement, audience measurement (Google Analytics), targeted advertising (if you accept it via the cookie banner).	Consent (for marketing) or Legitimate Interest (for safety).

Export to Sheets

3. Sharing Your Data (The Key Point)

We do not sell or rent your personal data to third parties. However, to provide you with the eSIM service, we are required to share certain information with our technical partner.

• Technical Partner (KeepGo/Esimba): We share your email address, order details, and device technical data (if necessary) with our eSIM provider., KeepGo (or Esimba), so that it can provision and activate your data plan. Some of our technical partners may be located outside the European Union. In this case, we ensure that appropriate safeguards are in place to secure your data.
• Payment Services: Transactions are handled through a secure provider, which has its own privacy policies.
• Legal Authorities: We may be required to share your data if required by law.

4. Data Retention

Your personal data is kept for the time necessary to perform our services, plus the retention periods imposed by law (e.g. 10 years for accounting documents).

• Customer data retention period: 3 years after the last business activity or the expiry of the last package

5. Your Rights (In accordance with the GDPR)

As a user, you have the following rights regarding your data:

• Right of Access: You can request a copy of the data we hold about you.
• The Right to Data Portability: The ability to retrieve one's data in a readable format.
• The Right to Complaint: Mention that the user can contact the CNIL (in France) if he believes that his rights are not being respected.
• Right of Rectification: You can correct incomplete or inaccurate data.
• Right to Erasure: You can request the deletion of your data (subject to legal retention obligations).
• Right to Object: You can object to the processing of your data for marketing purposes.

To exercise these rights, please contact us at the following address: contact@esim-miio.com or by mail to our head office:

Miio – 60 rue François 1er – 75008 PARIS