Privacy Policy

1. Who we are

SweetAsSIM is a data-only eSIM for travellers, a service of Rapid Roam ("Rapid Roam", "we", "us"), a New Zealand business. This policy explains what personal information we collect when you use our site, buy a plan, or install and use the eSIM, and how we handle it. We sell to customers in New Zealand, and this policy is written under New Zealand privacy law.

2. Information we collect

Depending on how you use SweetAsSIM, we may collect:

• Contact and order details: your email address, and billing details you enter at checkout to complete payment.
• Transaction information: which plan you bought, the order number, and payment status. Full card numbers are handled directly by Stripe - we never see or store them (see section 4).
• eSIM provisioning data: information needed to issue your eSIM and show your remaining data - see section 3 for what is and isn't shared with our eSIM provider to do this.
• Support communications: anything you send us by email, including any details you choose to share.
• Technical and security information: information such as IP address, browser and device details, and request information, collected by our website infrastructure provider as part of serving the site securely - see section 5.

3. How we use your information

We use the information above to: process your purchase and payment; provision and activate your eSIM; send your order confirmation and eSIM installation details; provide customer support and respond to enquiries; maintain the security and reliability of our website and systems; prevent fraud and abuse; and meet our legal, tax, and accounting obligations. We don't sell personal information. We work with a third-party eSIM provider to issue and provision the eSIM profile you install on your device - we do not pass your name, email address, billing information, or other personal contact details to them. The only information sent is the technical information needed to generate and route your eSIM, such as which plan to issue and an internal order reference.

4. Payments (Stripe)

Payments are processed by Stripe, a third-party payment processor. When you check out, your payment and billing details are handled directly by Stripe - we don't store your full card number. Stripe passes us your email address and order confirmation once payment succeeds, which we use as described in section 3. Stripe processes your payment information under its own privacy policy: stripe.com/privacy.

5. Website infrastructure and security

Our website is served through Cloudflare, which provides content delivery, security, and hosting infrastructure. As part of that, Cloudflare processes technical information about visits to our site - such as IP address, browser and device information, and request/security-related data - in order to deliver pages quickly and protect the site from abuse.

6. Marketing communications

We don't currently operate a newsletter or send promotional marketing emails. The only emails you'll receive from us are transactional - your order confirmation and eSIM installation details. If that changes in future, we'll only add you to marketing communications with your consent, and any such email will include a clear way to unsubscribe.

7. Data retention

We keep personal information only for as long as reasonably necessary for the purposes it was collected for - including order and payment records for as long as required under New Zealand tax and accounting rules, and support correspondence for as long as needed to resolve and later reference an issue. Where we no longer have a legitimate business, legal, or accounting reason to keep it, we delete or anonymise it.

8. Data security

We take reasonable technical and organisational steps to protect the personal information we hold, including relying on reputable third-party providers (Stripe, Cloudflare, and our eSIM provider) who maintain their own security measures for the information they process on our behalf. No method of storing or transmitting information online is completely secure, and we can't guarantee absolute security, but we work to keep the risk as low as reasonably possible.

9. Your privacy rights

Under New Zealand's Privacy Act 2020, which governs how we handle personal information as a New Zealand business, you have the right to ask what personal information we hold about you and to ask us to correct it. To do either, email support@sweetassim.co.nz. If you're not satisfied with our response, you can complain to New Zealand's Office of the Privacy Commissioner (privacy.org.nz).

10. Children

SweetAsSIM is not directed at children. You must be 18 or older to purchase or use a SweetAsSIM plan. If a plan is intended for someone under 18, it must be purchased by a parent or another adult on their behalf.

11. Changes to this policy

We'll update this page if how we handle personal information changes, and update the date at the top.

12. Contact

Questions about this policy or your personal information: support@sweetassim.co.nz.