Privacy Policy

eSIM Mongolia ("we," "us"), an independently operated service based in Mongolia, operates this website. This policy explains what data we collect, why, and who we share it with.

What we collect

• Order & contact info — email address and order details when you purchase, collected at checkout. We also keep the full transaction record from our payment processor in our own database for audit and retry purposes.
• Payment info — we don't collect or store payment card details ourselves. Our payment processor, acting as Merchant of Record, handles this directly.
• Support conversations — messages you send in our chat are kept in your browser for your current visit, and also logged on our servers together with the chat's reply and a hashed version of your IP address, for quality and troubleshooting. Support email works like any other email.
• Usage analytics — anonymized, aggregate site-usage data via a privacy-focused analytics tool that does not use tracking cookies.
• Local browser storage — your progress through the Trip Assistant is saved directly in your own browser's storage, not on our servers. Clearing your browser data clears this.

How we use it

• To process and deliver your order.
• To provide customer support, including AI-assisted chat responses.
• To alert our own team if something goes wrong with your order — for example, a bounced delivery email — so we can help; this may include sending your email address to our team through an internal notification tool.
• To maintain an internal order ledger, stored in our own database, for accounting and support purposes.
• To understand site usage in aggregate and improve the site.
• To detect and log technical errors, so failed orders aren't silently lost (our own server-side logging).

Who we share data with

We don't sell your data. To operate the service, we share the minimum data necessary with trusted third-party service providers that handle things like payment processing, order delivery, internal alerting when something needs our attention, customer support tooling, web hosting, and aggregate site analytics. Each provider only receives what it needs to perform its function and is bound by its own privacy and security obligations. Our eSIM supplier is a separate case — they provision your eSIM using only an internal order reference and the plan you purchased, never your name, email, or payment details.

International data transfers

Some of our service providers may process data outside your home country. Where required (e.g. for EU visitors), we rely on the safeguards those providers offer for international transfers, as set out in their own published privacy policies.

Why we're allowed to process this

In plain terms: order, contact, and payment info is processed because we need it to actually fulfill your purchase and deliver your eSIM — that's a contractual necessity, not a choice we make separately. Support conversations, error logs, and aggregate usage data are processed under our legitimate interest in running and improving the service. We don't use any of this for advertising or sell it to third parties.

How long we keep it

• Order records — kept for as long as needed for accounting, support, and any legal record-keeping obligations that apply to us.
• Support chat — the copy in your browser clears when you close the tab. The server-side copy (see below) is kept for 30 days. If a conversation is escalated to a human by email, that email is retained the same way as any other support email.
• Server logs (including chat conversations) — automatically deleted after 30 days.
• Analytics — our analytics provider stores anonymized, aggregate usage data only; nothing here is tied back to you individually.

Your rights

Depending on where you live, you may have rights to access, correct, or delete your personal data, or to object to certain processing. Contact support@esimmongolia.io to exercise these rights. If you're in the EU/EEA or UK, you also have the right to lodge a complaint with your local data protection authority at any time.

Children's privacy

This service is not directed at children, and we don't knowingly collect data from anyone under 16.

Changes to this policy

We may update this policy from time to time; the "Last updated" date above will reflect the most recent change.

Contact

Questions about this policy or your data: support@esimmongolia.io