Legal
Privacy Policy
Effective Date: March 2, 2026 · Last Updated: March 2, 2026
1. Who We Are
Innovative Cards Concepts LLC ("ICC", "we", "us", or "our") is a company incorporated under the laws of the Sultanate of Oman (CR No. 1505957), with our registered address at PO Box 386, Postal Code 112, Ruwi, Muscat, Sultanate of Oman.
We operate an eSIM platform that allows users to purchase and activate eSIM data plans for use on compatible devices worldwide. We are committed to protecting your personal data and respecting your privacy.
2. Information We Collect
We collect only the minimum personal information necessary to provide our eSIM services:
| Data Type | Purpose |
|---|---|
| Email address | Account creation, eSIM delivery, order confirmations, support |
| Phone number | Account verification, customer support |
| Payment data | Processed securely via Stripe — we do not store card details |
| Device compatibility info | To verify your device supports eSIM activation |
| eSIM activation data | To provision and deliver your eSIM plan |
We do not collect sensitive personal data such as government IDs, biometric data, or financial account numbers directly.
3. How We Collect Your Information
We collect your information when you:
- Create an account on our platform
- Purchase or activate an eSIM plan
- Contact us for support
- Make a payment
4. How We Use Your Information
We use your personal data to:
- Deliver your eSIM — provision, activate, and send your eSIM profile to your device
- Process payments — handle transactions securely via Stripe
- Communicate with you — send order confirmations, eSIM activation instructions, and support responses
- Manage your account — maintain your purchase history and active plans
- Ensure security — detect and prevent fraud or unauthorized access
- Comply with the law — meet our legal and regulatory obligations under Omani law
We do not sell your personal data to third parties.
5. Legal Basis for Processing
We process your personal data on the following grounds:
- Performance of a contract — to deliver the eSIM services you purchased
- Legitimate interests — to operate and secure our platform
- Legal compliance — to satisfy obligations under applicable Omani law
- Your consent — where you have explicitly agreed to specific processing
6. Third-Party Services
We use the following trusted third-party providers:
- Stripe — Payment processing. Stripe handles all payment card data in accordance with PCI-DSS standards. Your card details are never stored on our systems. See Stripe's Privacy Policy.
- Supabase — Secure database and authentication infrastructure. Your account data and purchase records are stored in encrypted, access-controlled environments. See Supabase's Privacy Policy.
- eSIM Providers/Network Partners — To fulfill your eSIM order, we share necessary provisioning data with our network partners. These partners are contractually bound to handle your data securely.
These providers act as data processors and are contractually required to handle your data only for the purposes we specify.
7. Data Storage and Security
- Your data is stored on secure, encrypted servers via Supabase
- Payment transactions are processed exclusively through Stripe's PCI-compliant infrastructure
- We implement appropriate technical and organizational measures to protect your data
- We do not store payment card information on our own systems
8. How Long We Keep Your Data
| Data Type | Retention Period |
|---|---|
| Account data | Duration of account + 3 years after closure |
| Transaction & eSIM records | As required by Omani commercial/tax law |
| Support communications | Up to 2 years |
Once data is no longer required, it is securely deleted or anonymized.
9. Your Rights
You have the right to:
- Access the personal data we hold about you
- Correct any inaccurate or incomplete data
- Delete your personal data (subject to legal obligations)
- Withdraw consent at any time where processing is consent-based
- Object to processing for certain purposes
- Lodge a complaint with the relevant authority in the Sultanate of Oman
To exercise any of these rights, contact us at: no-reply@simpliflyon.cloud
10. Children's Privacy
Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us and we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on our platform. Continued use of our services after changes constitutes acceptance of the updated Policy.
12. Contact Us
Innovative Cards Concepts LLC
PO Box 386, Postal Code 112, Ruwi
Muscat, Sultanate of Oman
CR No. 1505957
Email: no-reply@simpliflyon.cloud
