Privacy policy
This policy explains how VOASIM LTDA ("VoaSim", "we") processes personal data when you visit voasim.com, ask for a quote, buy an eSIM or contact our support. We are the controller of this data. It is written to meet the EU General Data Protection Regulation (GDPR), the UK GDPR, the Swiss data protection act and the Brazilian General Data Protection Law (LGPD).
1. Data we collect
- Contact details: name, email address and, when you provide it, your phone/WhatsApp number (in some countries the WhatsApp number is requested to show your price and help with installation).
- Trip and order details: destination, travel dates, number of days and eSIMs, price, discounts and order status.
- Payment data: payments are processed by Stripe. We receive confirmation of the payment, the amount and limited details needed to manage refunds and prevent fraud; we never receive or store your full card number.
- eSIM service data: eSIM identifiers, installation and activation status and data usage reported by our network partners, used to deliver the plan and to help you when something does not work.
- Support conversations: messages you send us by chat, email or WhatsApp, including screenshots and device information you choose to share.
- Technical and usage data: IP address, approximate country derived from the IP address, browser and device type, pages visited and the source of your visit (for example a search engine, an AI assistant or an ad), collected through our servers and the cookies described below.
2. Why we use it and legal bases
| Purpose | Legal basis (GDPR / UK GDPR) |
|---|---|
| Showing your quote, processing your order, issuing and delivering the eSIM, sending the receipt and providing support | Performance of a contract or steps at your request before entering into it (Art. 6(1)(b)) |
| Keeping order, invoice and accounting records | Legal obligation (Art. 6(1)(c)) under Brazilian tax and consumer laws |
| Preventing fraud and payment abuse, securing our site and systems, and improving our service | Legitimate interests (Art. 6(1)(f)) |
| Follow-up messages about your quote or trip and offers about our eSIMs | Legitimate interests for messages related to a quote or purchase you made; consent where required by law. You can opt out at any time. |
Advertising measurement with Meta Pixel and Conversions API, and recording the source of your visit (cookie _vs_org) | For visitors in the EEA, the UK and Switzerland: your consent (Art. 6(1)(a)), given through our cookie banner. Elsewhere: legitimate interests in measuring our advertising. |
3. Cookies and similar technologies
We use a small number of cookies and local storage items:
| Name | Provider | Purpose | Duration |
|---|---|---|---|
vs_consent | VoaSim (first party) | Remembers your cookie choice (accept or reject). Strictly necessary. | 180 days |
| Chat storage (local storage) | VoaSim (first party) | Keeps your chat conversation open when you move between pages. Strictly necessary for the chat you use. | Until you clear it |
_vs_org | VoaSim (first party) | Records how you first reached our site (for example a search engine, an AI assistant or an ad) so we know which channels bring customers. Not shared with third parties. | 90 days |
_fbp, _fbc | Meta Platforms | Meta Pixel: measures visits and purchases coming from our ads on Facebook and Instagram and helps show relevant ads. | Up to 90 days |
| Google Ads conversion tag | Loaded only on the order confirmation page to measure purchases coming from Google ads. | Up to 90 days |
Visitors in the EEA, the UK and Switzerland: Meta Pixel and the _vs_org cookie are only activated after you click "Accept" in our cookie banner. If you click "Reject", or do not choose, they stay off and the rest of the site, including buying an eSIM, works normally. We detect your region from your IP address and, if that is not available, from your browser's time zone.
You can change your choice at any time: You can also delete cookies in your browser settings.
4. Who we share data with
We do not sell your personal data. We share it only with providers that help us run the service, under contracts that require them to protect it:
- Stripe, for payment processing and fraud prevention;
- eSIM network partners, which receive only what is needed to issue and operate your eSIM;
- Email delivery providers (such as Amazon Web Services and Postmark), to send your eSIM, receipt and support replies;
- Hosting and infrastructure providers (such as Oracle Cloud), where our site and systems run;
- Meta Platforms: Meta Pixel and the Conversions API (where you have consented, if you are in the EEA, UK or Switzerland), receiving events such as page views, quotes and purchases together with pseudonymised identifiers (for example a hashed email or phone number); and WhatsApp, if you talk to us there;
- Advertising platforms we use (such as Google Ads and OpenAI's ChatGPT ads), to measure purchases that came from our ads, using pseudonymised (hashed) identifiers;
- AI providers (such as Anthropic), which process support messages so our AI assistant can answer you;
- Our group companies (Acelera 10X group), only where needed to operate the service; and public authorities, when required by law.
5. International transfers
VoaSim is based in Brazil and some of our providers operate in the United States and other countries. When personal data from the EEA, the UK or Switzerland is transferred to countries without an adequacy decision, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses (and the UK addendum) offered by our providers.
6. How long we keep data
- Order, payment and invoice records: for the period required by Brazilian tax and consumer laws (generally 5 years after the purchase).
- Quote, support and eSIM service data: for as long as needed to provide the service, handle support and defend legal claims, after which it is deleted or anonymised.
- Marketing preferences: until you opt out or ask us to delete them.
- Cookies: for the durations listed in the table above.
7. Your rights
Depending on where you live, you have the right to: access your data; correct it; ask us to delete it; restrict or object to its processing (including objecting at any time to direct marketing); receive it in a portable format (portability); and withdraw your consent at any time, without affecting processing that took place before. We do not make decisions with legal or similarly significant effects about you based solely on automated processing.
To exercise any of these rights, email hola@voasim.com with the subject "Privacy request" from the email address used with us. We will answer within one month. You also have the right to lodge a complaint with your local data protection authority (in the EU, the authority of your country; in the UK, the Information Commissioner's Office; in Switzerland, the FDPIC; in Brazil, the ANPD).
8. Security
We use encryption in transit (HTTPS), access controls and reputable providers to protect your data. No system is completely secure, but we work to protect your information and will notify you and the authorities of a data breach when required by law.
9. Children
Our service is not directed to children under 16, and we do not knowingly collect their data.
10. Changes to this policy
We may update this policy. The current version is always published on this page, with its effective date at the top.
11. Contact
VOASIM LTDA · CNPJ 59.664.812/0001-84 · Av. Pedro Taques, 294, Torre Sul, 15th floor, room 1504, Maringá, Paraná, 87030-008, Brazil · hola@voasim.com