GDPR - Data Protection Notice

This page explains how KudoSIM L.L.C. complies with the General Data Protection Regulation (GDPR) when providing services to EU/EEA residents or when data processing takes place within the EU. This notice complements the Privacy Policy and the Terms of Use.

1) Who we are & scope

Data controller: KudoSIM L.L.C., 651 N Broad St, Suite 201, New Castle, DE 19709, USA. Privacy email: support@kudoesim.com. This notice applies when we provide services to individuals in the EU/EEA or monitor their behavior.

2) Legal bases for processing

• Contract: to provide and administer the eSIM service (purchase, activation, support).
• Legitimate interest: preventing abuse/fraud, improving the service, minimal analytics.
• Legal obligation: retaining tax and accounting records.
• Consent: marketing and non-essential cookies (may be withdrawn at any time).

3) Categories of data we collect

• Account data: name, email, phone number, user ID.
• Order and eSIM data: plans, coverage, EID/ICCID, QR, activation dates, usage status.
• Payments: transaction reference (card data is processed by Stripe, Apple/Google Pay).
• Device & diagnostics: device model, OS, IP, error logs.
• Communications: support requests, live chat/WhatsApp/email conversations.
• Marketing & cookies (only with consent).

4) Purposes of processing

• Providing and managing the eSIM service.
• Payments and billing.
• Customer support.
• Limited analytics for improvement.
• Fraud prevention and security.
• Marketing (only with consent).

5) Processors & international transfers

We use trusted providers for payments, cloud hosting, analytics and support. When data is transferred outside the EU/EEA, we apply Standard Contractual Clauses (SCCs) or other valid mechanisms under the GDPR.

6) Data retention

• Active account: until the account is closed.
• Order/billing: 5 to 10 years in line with tax law.
• Technical logs: 90 to 365 days (except in security cases).
• Consent-based marketing: until withdrawal or expiry of purpose.

7) Your rights under the GDPR

• The right of access and to obtain a copy of your data.
• The right to rectification of inaccurate data.
• The right to erasure (the "right to be forgotten").
• The right to restriction of processing.
• The right to data portability.
• The right to object to processing based on legitimate interest and direct marketing.
• The right to withdraw consent.

How to exercise them: contact us at support@kudoesim.com or via live chat. We will respond within 30 days and may request identity verification.

8) Automated decision-making

We do not carry out fully automated decision-making that produces legal effects concerning you. Profiling is limited to security measures against fraud.

9) Complaints

If you believe your rights have been violated, you have the right to lodge a complaint with your national data protection authority. We encourage you to contact us first.

10) How to contact us

• Email (privacy): support@kudoesim.com
• Live chat: https://kudoesim.com/chat
• Legal address: KudoSIM L.L.C., 651 N Broad St, Suite 201, New Castle, DE 19709, USA.