Privacy Policy

Effective: May 5, 2026

Lead2Sale L.L.C. ("we", "us", "our") operates sims-on.com and is the controller for the processing of your personal data under the EU General Data Protection Regulation (GDPR, EU 2016/679) and Kosovo Law No. 06/L-082 on the Protection of Personal Data.

1. Controller

Lead2Sale L.L.C., Flakadanët e Lirisë 9, 71510 Elez Han, Kosovo
Email: contact@sims-on.com
Phone: +383 49 448532

2. Data we collect

• Identity and contact: Name (optional), email address, phone (optional).
• Order data: Selected eSIM plan, order number, purchase date, activation status.
• Payment data: Transaction ID. We do not store card numbers or CVV — card data is entered directly on the RaiAccept hosted page (Raiffeisen Bank Kosovo).
• Technical data: IP address, browser type, device, operating system.
• eSIM data: ICCID, EID — to the extent required for provisioning.

3. How we use your data

• Provisioning and activation of the eSIM (contract performance, Art. 6(1)(b) GDPR).
• Payment processing through RaiAccept.
• Customer support and order communication.
• Fraud prevention and IT security (legitimate interest, Art. 6(1)(f) GDPR).
• Compliance with retention obligations (legal obligation, Art. 6(1)(c) GDPR).

4. Recipients (processors and sub-processors)

• Raiffeisen Bank Kosovo (RaiAccept): Payment processing, PCI-DSS and PSD2 compliant payment gateway.
• YeSIM: eSIM provisioning, activation, roaming routing.
• Hostinger International Ltd.: Server hosting (Frankfurt, EU).

5. International transfers

Personal data may be transferred to Kosovo (where Lead2Sale L.L.C. is established). Kosovo does not benefit from an EU adequacy decision; transfers rely on appropriate safeguards under EU Standard Contractual Clauses (Implementing Decision 2021/914).

6. Retention

Order data is kept for up to 10 years after completion to comply with commercial and tax retention duties. Technical logs are deleted after 30 days. Contact requests are kept for 24 months.

7. Your rights

You have the right to:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object (Art. 21 GDPR)
• Withdraw any consent at any time

To exercise your rights, write to contact@sims-on.com.

8. Right to lodge a complaint

You may lodge a complaint with a data protection supervisory authority — with the authority of your habitual residence (within the EU) or with the Information and Privacy Agency (AIP) of Kosovo (aip.rks-gov.net).

9. Cookies

We use technically necessary cookies (session, language, security tokens) needed to operate the website. Analytics or marketing cookies are only set with your consent.

10. Security

We use TLS encryption (HTTPS), Argon2id password hashing for administrative accounts, a restrictive firewall, and regular integrity-checked backups.

11. Children

Our service is not directed at persons under 16. We do not knowingly collect data from children.

12. Changes

We may update this policy. The current version is always on this page. Material changes will be communicated by email or by a clear notice on the site.