QuiqSim Privacy Policy

Last updated: 2026-05-28

This Privacy Policy explains how Seldon Solutions S.L. ("Seldon Solutions", "we", "us", or "our") collects, uses, retains, and protects personal data in connection with the QuiqSim travel eSIM service ("QuiqSim", "the Service") delivered through WhatsApp.

This policy is written to meet the transparency requirements of Regulation (EU) 2016/679 (the General Data Protection Regulation, "GDPR"), in particular Articles 13 and 14, and applicable Spanish data protection law.

1. Who we are

The data controller for personal data processed in connection with QuiqSim is:

• Legal name: Seldon Solutions S.L.
• CIF (Tax ID): B26921650
• Registered address: Calle Zamora 45 Local 2, 08005 Barcelona, Spain
• Brand: QuiqSim
• Service contact: WhatsApp +34 671 619 991 (wa.me/34671619991)
• Privacy contact: [email protected]

Seldon Solutions S.L. is the entity responsible for determining the purposes and means of personal data processing for the QuiqSim Service.

2. What information we collect

We collect the following categories of personal data through the QuiqSim Service:

2.1 WhatsApp identifiers and message content. When you contact QuiqSim through WhatsApp, we receive your WhatsApp phone number and the content of the messages you send to us, together with metadata about those messages (timestamp, message identifier, delivery status). This includes any travel destination, dates, or data preferences you share in the chat in order to receive an eSIM bundle.

2.2 Payment information. When you purchase an eSIM bundle, payment is processed by Stripe Payments Europe Ltd. ("Stripe"). Stripe collects and processes your payment instrument data (card number, expiry, CVC, billing details). We receive from Stripe a transaction reference, the amount charged, the payment status, and the last four digits of the payment instrument used. We do not directly collect or store full payment card data.

2.3 eSIM provisioning metadata. When an eSIM is provisioned for your order, we receive from our upstream supplier (Airalo) the eSIM activation code, ICCID, validity window, data allowance, and activation status. This metadata is used to deliver the eSIM credentials to you and to support you if the eSIM does not work as expected.

2.4 Operational logs. We retain application-level logs (timestamps, message identifiers, error events, API request identifiers) for the purposes of service operation, debugging, security monitoring, and abuse prevention.

3. Why we collect this information (purposes of processing)

We process the personal data described above for the following purposes:

• Order fulfilment: to receive your eSIM bundle request, process payment, provision the eSIM, and deliver the activation credentials to your WhatsApp thread.
• Customer support: to respond to your messages, answer questions about your bundle, assist with installation, and process top-ups or refund requests where applicable.
• Service operation: to operate, monitor, secure, and improve the QuiqSim Service, including fraud prevention and abuse detection.
• Legal compliance: to retain transaction records and meet tax, accounting, consumer protection, and other legal obligations applicable in Spain and the European Union.
• Communication about your purchase: to notify you about your eSIM status, validity expiry, or material changes affecting your order or the Service.

4. Legal basis under GDPR

We process your personal data on the following legal bases (GDPR Article 6):

• Article 6(1)(b) — Performance of a contract: processing necessary to deliver the eSIM bundle you ordered and to respond to your service requests.
• Article 6(1)(c) — Compliance with a legal obligation: retention of transaction records for tax and accounting purposes under Spanish law.
• Article 6(1)(f) — Legitimate interests: processing necessary for fraud prevention, service security, debugging, and product improvement, balanced against your rights and freedoms.
• Article 6(1)(a) — Consent: for any specific purpose where we ask you to opt in. Where consent is the basis, you may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Who has access to your personal data

Access to your personal data is restricted as follows:

5.1 Seldon Solutions S.L. staff. Authorised personnel within Seldon Solutions S.L. with a strict need-to-know basis, bound by confidentiality obligations, for the purposes of operating the Service and supporting you.

5.2 Stripe (payment processor). Stripe processes payment instrument data as an independent controller for payment processing purposes. Stripe's processing is governed by Stripe's own privacy policy (stripe.com/privacy).

5.3 Airalo (upstream eSIM supplier). Airalo provides the underlying eSIM connectivity. We share the minimum information required to provision your eSIM (typically destination, bundle reference, and an internal order identifier). Airalo acts as a processor or sub-processor in respect of provisioning metadata, and as an independent controller in respect of the carrier-level data flows once the eSIM is in use. Airalo's processing is governed by Airalo's own privacy policy.

5.4 Meta Platforms / WhatsApp. Messages between you and QuiqSim are transmitted through the WhatsApp Business Platform operated by Meta Platforms. WhatsApp messages are end-to-end encrypted in transit between user devices and the WhatsApp infrastructure. Meta's processing of WhatsApp data is governed by the WhatsApp Privacy Policy and the WhatsApp Business Solution Terms.

5.5 Infrastructure providers. We use hosting and infrastructure providers within the European Union (Hetzner Online GmbH) to operate the QuiqSim backend. These providers act as processors on our instructions under written data processing agreements consistent with GDPR Article 28.

We do not sell personal data. We do not share personal data with data brokers.

6. How long we retain your personal data

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law:

• Transaction records (orders, invoices, payment references): 5 years from the end of the tax year in which the transaction occurred, as required by Spanish tax and accounting law.
• WhatsApp chat history: retained for the duration required to provide ongoing support and to satisfy our record-keeping obligations, after which it is deleted or anonymised. WhatsApp also retains chat data per Meta's own retention policies.
• eSIM provisioning records: 2 years from the date of the order, to support post-trip queries, refund disputes, and warranty handling.
• Operational logs: typically 90 days for application logs and up to 12 months for security and audit logs.

After the applicable retention period, personal data is deleted or irreversibly anonymised, except where continued retention is required by law (for example, to defend a legal claim).

7. International transfers of personal data

Some recipients of personal data are located outside the European Economic Area (EEA):

• Airalo Holdings Pte. Ltd. is headquartered in Singapore.
• Stripe operates infrastructure in the United States and other jurisdictions.
• Meta Platforms operates infrastructure in the United States and other jurisdictions.

Where personal data is transferred outside the EEA, we rely on the safeguards permitted under GDPR Articles 44 to 49, including (where applicable) European Commission adequacy decisions, Standard Contractual Clauses, and supplementary measures.

8. Your rights under GDPR

You have the following rights in respect of your personal data:

• Right of access (Article 15): to obtain confirmation as to whether we process your personal data and, if so, a copy of that data and information about the processing.
• Right to rectification (Article 16): to request correction of inaccurate or incomplete personal data.
• Right to erasure (Article 17): to request deletion of your personal data where one of the grounds in Article 17 applies (for example, the data is no longer necessary for the purposes for which it was collected).
• Right to restriction of processing (Article 18): to request that we limit processing in specific circumstances.
• Right to data portability (Article 20): to receive personal data you have provided to us in a structured, commonly used, machine-readable format and to transmit it to another controller.
• Right to object (Article 21): to object to processing based on legitimate interests on grounds relating to your particular situation.
• Right to withdraw consent (Article 7(3)): to withdraw consent at any time where consent is the legal basis. Withdrawal does not affect the lawfulness of prior processing.

9. How to exercise your rights

To exercise any of the rights above, contact us at:

• Email: [email protected]
• WhatsApp: +34 671 619 991 (wa.me/34671619991)
• Postal address: Seldon Solutions S.L., Calle Zamora 45 Local 2, 08005 Barcelona, Spain

We will respond to verified requests within one month of receipt (extendable by up to two further months for complex requests, in which case we will inform you of the extension and the reasons for the delay). We may request additional information to verify your identity before acting on a request.

10. Cookies and similar technologies

The QuiqSim service is delivered primarily through WhatsApp. Our marketing website at quiqsim.com currently uses only minimal essential cookies necessary to operate the site (such as session and security cookies). Advertising and third-party analytics cookies must remain disabled unless consent handling and this policy are updated before activation.

If we add any non-essential cookies in the future, we will request your consent through a cookie banner before setting them, in line with the ePrivacy Directive and the Spanish LSSI.

11. Children

The QuiqSim Service is not directed at children under 16. We do not knowingly process the personal data of children under 16. If you believe that a child under 16 has provided personal data to us, contact us and we will take steps to delete the data.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our processing, in applicable law, or in industry practice. When we make material changes, we will update the "Last updated" date at the top of this policy and notify active users through the WhatsApp chat. We encourage you to review this policy periodically.

13. Supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority if you believe that your personal data has been processed in a way that does not comply with the GDPR. In Spain, the competent supervisory authority is:

• Agencia Española de Protección de Datos (AEPD)
• C/ Jorge Juan, 6, 28001 Madrid, Spain
• aepd.es

You may also lodge a complaint with the supervisory authority in the EU Member State of your habitual residence, your place of work, or the place of the alleged infringement.

This Privacy Policy is published by Seldon Solutions S.L., CIF B26921650, Calle Zamora 45 Local 2, 08005 Barcelona, Spain, in connection with the QuiqSim Service. For questions about this policy, contact [email protected].