Privacy Policy

1. Who we are

GPT Cellular Ltd is the data controller for personal data collected through the GPT Cellular service. We are registered with the Information Commissioner's Office (ICO), registration reference ZC220571.

For any data protection question, contact us via our contact form.

2. What data we collect

We collect the following categories of personal data:

• Identity data: name, date of birth
• Contact data: email address, mobile number, postal address
• Financial data: payment card details (processed by Stripe, not stored by us)
• Usage data: call records, data usage, SMS records
• Technical data: IP address, device identifiers, browser type, and sign-in records (the time, IP address and device for each sign-in, which we show back to you in your account)
• Communications data: customer service interactions, support tickets

• Identity data: the name you give us at checkout
• Contact data: email address — this is where your eSIM is sent
• Financial data: payment card details (processed by Stripe, not stored by us) and the billing country Stripe returns to us
• Usage data: how much of your bundle's data has been used, and the eSIM identifier it was used on. A travel eSIM has no phone number, so there are no call or text records
• Technical data: IP address, device identifiers, browser type, and sign-in records (the time, IP address and device for each sign-in, which we show back to you in your account)
• Communications data: customer service interactions, support tickets

3. How we use your data

We use your personal data to:

• Provide and manage your mobile serviceIssue your travel eSIM and manage the bundle you bought
• Process payments and send billsProcess your payment and send you a receipt
• Verify your identity and prevent fraud
• Respond to your queries and complaints
• Comply with legal and regulatory obligations (including Ofcom requirements)
• Send service-related notifications (usage alerts, billing reminders)Send service-related notifications (your eSIM and its QR code, and alerts about the data or days left on your bundle)
• With your consent: send marketing communications

4. Legal basis for processing

We process your data on the following legal bases under UK GDPR:

• Contract: processing necessary to provide your service
• Legal obligation: compliance with Ofcom regulations and law enforcement requests
• Legitimate interests: fraud prevention, network security, improving our services
• Consent: marketing communications (you can withdraw consent at any time)

5. Data retention

We retain your data for as long as you are a customer, and for up to 6 years after your account closes for legal and regulatory purposes. Call and usage records are retained for 12 months. A travel eSIM produces no call or text records. Records of the data used on a bundle are retained for 12 months.

6. Sharing your data

We share your data with:

• Transatel: our MVNE and network partner, to provide your mobile service our eSIM supplier, to issue your eSIM and connect it to a network at your destination
• Stripe: payment processing
• Amazon Web Services: hosts our website, our database, your sign-in and the emails we send you, in the UK and Ireland
• Law enforcement: where required by law or court order

When we activate a SIM or issue an eSIM, we are required to tell Transatel which country you live in, so that they can meet their own obligations to the mobile operators they buy access from. We take this from the billing country on your payment — we do not ask you for it separately, and it is an indication of where you live rather than something we have verified. Transatel is based in France, so this is a transfer outside the UK, made under the UK government's adequacy decision for the EU.

We do not sell your personal data to third parties.

7. Your rights

Under UK GDPR you have the right to:

• Access your personal data
• Correct inaccurate data
• Request erasure of your data
• Object to or restrict processing
• Data portability
• Withdraw consent at any time

To exercise any of these rights, contact us via our contact form. We will respond within one month.

8. Cookies and browser storage

We do not use cookies, and we do not use analytics or advertising trackers. Our website does keep a small amount of information in your browser's local storage:

• your sign-in session, so that you stay signed in to your account;
• saved copies of our site settings and prices, so that pages load quickly;
• the currency you chose on our travel store; and
• if you arrived through a partner's link, that partner's referral code, kept for 30 days so that the partner can be credited if you buy.

None of this is shared with anyone else. You can remove it at any time by clearing your browser's site data.

9. Complaints

If you believe we have handled your data unlawfully, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.