Privacy Policy

Last updated: July 9, 2026

Vaya Con Data (“we”, “our”, “us”) is a Canadian business. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use vayacondata.com and buy our eSIM products.

We aim to comply with applicable Canadian privacy law, including the Personal Information Protection and Electronic Documents Act (PIPEDA), and other laws that may apply based on where you live (for example, GDPR if you are in the EEA/UK).

1. Information we collect

• Order data: name, email, device type (if provided), plan selected, quantity, coupon codes, order identifiers.
• Payment data: processed by Stripe. We do not store full card numbers on our servers. Stripe may collect billing address and payment method details.
• Delivery / eSIM data: ICCID, activation links, QR payload metadata needed to fulfill and support your order.
• Technical data: IP address (including for fraud prevention and rate limiting), browser/user agent, basic logs of checkout and webhook events.
• Support data: messages you send us by email or live chat (tawk.to).
• Analytics: Google Analytics events (page views, checkout funnel) if enabled on the site.

2. How we use information

• Process payments and deliver eSIMs
• Send order receipts, activation instructions, and support replies
• Prevent fraud, abuse, and security incidents
• Keep accounting, tax, and legal records
• Improve the website and product experience

We do not sell your personal information.

3. Legal bases (where required)

Where GDPR or similar laws apply, we rely on: performance of a contract (fulfilling your order), legitimate interests (security, fraud prevention, service improvement), consent (where required for non-essential cookies/marketing), and legal obligation (tax/records).

4. Sharing with processors

We share data only as needed with service providers under contract or as required by law, including:

• Stripe — payments (PCI-DSS)
• eSIM wholesale / network partners — provisioning your eSIM
• Email hosting (Bluehost / mail provider) — transactional email
• Cloudflare — DNS, security, API tunnel
• tawk.to — optional live chat
• Google Analytics — site analytics

5. International transfers

Your data may be processed in Canada, the United States, and the European Union (e.g. payment processors, network partners). We take reasonable steps to use reputable providers with appropriate safeguards.

6. Retention

We keep order and payment-related records as long as needed for support, accounting, tax, and dispute resolution (typically multi-year retention for financial records). Support emails and logs are kept only as long as reasonably necessary.

7. Security

• HTTPS/TLS for the website and API
• Stripe-hosted checkout (we never see full card data)
• Signed Stripe webhooks; server-side price calculation
• Access controls and restricted API keys for admin tools

No method of transmission or storage is 100% secure; we work to reduce risk reasonably.

8. Your rights

Depending on your location, you may request access, correction, deletion, portability, or restriction of processing, and you may withdraw consent where processing is consent-based. Contact support@vayacondata.com. We may need to verify your identity and retain certain data where the law requires it.

Canadian residents may also contact the Office of the Privacy Commissioner of Canada regarding privacy complaints.

9. Cookies

We use essential cookies for site function. Analytics and chat providers may set their own cookies. You can control cookies in your browser settings; blocking some cookies may limit features (e.g. chat).

10. Children

Our services are not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children.

11. Changes

We may update this policy by posting a revised version with a new date. Continued use after changes means you acknowledge the updated policy.

12. Contact

Vaya Con Data
Privacy inquiries: support@vayacondata.com
Phone: