Privacy Policy

1. Data controller

Blitz eSIM (blitzesim.com) is a brand of AHIS, registered with the Dutch Chamber of Commerce under number 42036182, located at Saendelverlaan 144, 1567 JE Assendelft, the Netherlands. AHIS is the data controller for personal data processed through our website and our mobile application.

• Email (privacy and support): [email protected]
• Website: blitzesim.com

2. Data we process

We process data you provide yourself, such as contact details, order details and payment details.

We also process technical data such as IP address, browser or device information and security logs.

If you start a conversation with our customer support (on the website or in the app), we process the contents of that conversation, including any order details you share, in order to help you.

When you order an eSIM we process the technical identifiers needed to activate the plan and to show your data usage.

3. Data processing in the mobile application

In addition to the data above, our mobile application processes a number of app-specific items:

• Login data: your email address and a session token, stored securely on your device (in the iOS/Android system keychain) to keep you signed in
• Push notifications: a device-bound notification token, only when you grant permission, used to inform you about e.g. nearly depleted data plans or replies from customer support
• Your eSIM usage data: plan status and data usage, cached locally on your device so the app can show something while offline
• Anonymised or pseudonymised usage statistics of the app itself (which screens are used, whether a purchase succeeded), to improve the app and detect technical problems
• We do not use location data and we do not use your device's advertising identifiers

4. Purposes and legal bases

We process personal data for order handling, delivery of eSIM plans, fraud prevention, customer support, sending push notifications you have consented to, and compliance with legal obligations.

Depending on the purpose, this is based on performance of the contract, your consent, legitimate interest or a legal obligation.

5. Sharing with third parties

We only share data with parties that are necessary to deliver our service. The specific party may change over time; below we describe the categories:

• Payment processors, to process your payment securely
• Email service providers, to send order- and account-related emails
• Hosting partners, for the operation of our website, app backend and database
• Delivery partners, to actually activate and deliver eSIM plans
• A customer support platform, when a support conversation is handed over to an agent
• An AI chat assistant provider, for automated first-line answers to common questions in our chat
• Providers for push notifications, app analytics and error reporting, to keep the app reliable and to detect technical problems
• We have agreements with all of these parties covering security and confidential processing of data. You can request an up-to-date overview of the parties we work with via [email protected].

6. Transfers outside the EU/EEA

Some of the parties mentioned under 'Sharing with third parties' may process data outside the European Economic Area (EEA).

In that case we ensure appropriate safeguards, such as standard contractual clauses or an adequacy decision of the European Commission.

7. Retention periods

We do not keep personal data longer than necessary for contractual, operational and legal purposes.

We keep order data for as long as the statutory fiscal retention obligation requires for our administration (in the Netherlands, generally 7 years).

We keep chat conversations and app usage data no longer than needed to support you and improve the service.

After the relevant retention periods we delete or anonymise data.

8. Security

We take appropriate technical and organisational measures to protect personal data against loss or unauthorised access.

Sensitive data such as login tokens are stored in your device's secure system storage, not in regular app storage.

9. Your rights

You can request access, correction, deletion, restriction, portability or object to processing of your data, whether it was collected via the website or the app.

• Send your request to [email protected]
• We may ask for identification for verification purposes
• You can have your app account and the associated data deleted by contacting us via [email protected]
• You can also lodge a complaint with the competent supervisory authority (in the Netherlands: the Autoriteit Persoonsgegevens)

10. Changes to this privacy policy

This privacy policy may be updated when legislation, processes or services change — for example when we add new functionality to the app.

The most recent version is always available on this page.