Privacy policy

Who is responsible for your data?

Ramdani, operator of Tripcroco (Sole trader, Australia, ABN 78 864 299 049, 6A Donna Street, Morley WA, Australia). Contact: tripcroco@proton.me.

Data we collect

Orders: email address, destination, plan, amount, currency, date, order number and PayPal payment ID.

eSIM: technical identifiers of your eSIM (ICCID, install code), its status, data usage and expiry date, provided by our connectivity partner.

Account (if you create one): email, password stored with irreversible encryption (we cannot read it), or Google ID if you use “Continue with Google”.

Contact: information you send us through the form or by email.

Technical data: IP address and connection information briefly kept by our host for security.

We do not collect your card details: payment is entirely handled by PayPal.

Why we use it

To provide the service (legal basis: performance of contract): process your order, deliver and top up your eSIM, send order-related emails, manage your account, answer your requests.

To comply with legal obligations: accounting, tax, fraud prevention.

To improve and secure the service (legitimate interest).

We do not send advertising and never sell your data.

Who we share it with

Only with providers needed for the service, acting on our behalf:

• Vercel (website hosting, USA); • Neon (database, USA); • Resend (email delivery); • PayPal (payment); • our eSIM supplier (eSIM Access, Asia) to create and manage your eSIM; • Google, only if you choose “Continue with Google”.

These providers may be located outside your country (including outside the European Union). We ensure such transfers are covered by appropriate safeguards (for example the European Commission's standard contractual clauses where applicable).

We may also disclose data where required by law.

How long we keep it

Orders and invoices: for the period required by accounting and tax obligations (usually 5 to 7 years).

Account: while it is active; deleted on request (order data is kept for legal obligations).

Contact messages: as long as needed to handle your request.

Cookies and local storage

We only use what is necessary for the site to work: a secure session cookie when you are logged in, and your browser's local storage to remember your currency and current order. No advertising cookies or ad tracking.

Your rights

You can ask to access, correct, delete or receive your data in a readable format, or object to some processing: write to tripcroco@proton.me. We reply within one month.

You can also complain to the competent authority: in Australia, the OAIC (oaic.gov.au); in the European Union, your country's authority (in France, the CNIL — cnil.fr); in Canada, the Office of the Privacy Commissioner (priv.gc.ca).

Security

Data in transit is encrypted (HTTPS), passwords are stored with irreversible encryption, and access to data is limited to what is strictly necessary.

Minors

The service is intended for people aged 16 and over.

Changes

We may update this policy; the update date is shown at the top of the page.