Privacy policy

ASTAROAM / LEGAL

This Privacy Policy explains how we handle personal information when you browse Astaroam, purchase an eSIM, manage your plan or contact our support team.

Last updated: 11 October 2026

01. Who we are

Astaroam is operated by M&U GROUP LTD, a company registered in England and Wales. We are the controller of personal information we process for our own business purposes, including orders, customer support and operation of our website. Shopify and certain connectivity providers may also act as independent controllers for particular processing activities, as described in their own privacy notices.

For privacy enquiries or to exercise your rights, email support@astaroam.com.

02. Information we collect

Depending on how you interact with us, we may process:

• Contact and order details: name, email address, billing information, country, order reference, purchased plans and transaction history.
• Payment information: payment status, payment method, transaction identifiers and fraud-screening information. Payment details are processed by our payment providers; we do not need to receive or store your full payment card number to fulfil an order.
• eSIM and connectivity information: eSIM identifiers (which may include ICCID), package details, installation or provisioning status, activation status, validity dates, data allowance and usage information made available to us by connectivity suppliers. We use this information to deliver plans, display plan status, assist with technical issues and assess refund eligibility.
• Customer support information: messages, troubleshooting details, device model, screenshots or other information you choose to provide when contacting us by email, WhatsApp or other support channels.
• Website and device information: IP address, browser and device information, cookie identifiers, pages visited, shopping activity and security logs, subject to applicable cookie choices.
• Marketing preferences: subscriptions, consent records and communications preferences where relevant.

Please avoid sending passwords, complete payment card details or unnecessary sensitive personal information to our support team.

03. Where information comes from

We obtain information directly from you, automatically through our website and Shopify store, from payment and fraud-prevention providers, and from eSIM suppliers or network partners involved in providing your plan. We may also receive information from customer support, analytics and marketing service providers where those services are in use.

04. Why we use information and our legal bases

• To perform our contract: process orders, issue eSIM details, enable account or plan-management features, arrange eligible top-ups, provide support and handle contractual refund requests.
• For legitimate interests: maintain and secure our services, investigate suspected fraud, prevent misuse, troubleshoot service problems, keep appropriate business records and improve our website, provided those interests are not overridden by your rights.
• To comply with legal obligations: maintain accounting and tax records, respond to lawful requests and comply with applicable consumer, financial and data-protection requirements.
• With consent where required: send certain marketing communications and use non-essential cookies or similar tracking technologies. You can withdraw consent where applicable.

We may rely on different lawful bases for different processing activities. We do not treat your acceptance of this policy as blanket consent to all processing.

05. eSIM fulfilment and network partners

To provide a purchased eSIM, we share or exchange the information reasonably necessary for provisioning, activation, usage reporting, top-ups, support and service administration with our eSIM suppliers and their relevant network partners. This may include order or package references and technical eSIM identifiers. We may receive activation and usage status from those partners, even when no mobile data has been consumed.

Some connectivity providers process technical network information under their own legal responsibilities and privacy notices. We do not control all processing performed by independent mobile network operators.

06. Who we share information with

We may disclose relevant personal information to Shopify (our ecommerce platform), payment processors, fraud-prevention providers, eSIM fulfilment and connectivity partners, hosting and IT providers, customer support and communications services, and analytics or marketing providers used by our store. We may also disclose information to professional advisers, regulators or authorities where legally required, or in connection with a lawful business reorganisation.

We do not sell customer order records to data brokers. Certain advertising and Shopify features may involve disclosures or uses of data that are regulated as targeted advertising or a “sale” or “sharing” under some privacy laws; applicable choices and rights are described below.

07. Shopify and its privacy features

Our store is powered by Shopify, which processes information to provide checkout, payments, store operations and other services. Shopify may also process data as an independent controller for certain features, including enhanced services and advertising-related functions where enabled. Read the Shopify Consumer Privacy Policy and use the Shopify Privacy Portal for applicable Shopify-specific choices and requests.

08. Cookies, analytics and marketing

Our website uses technologies needed to operate the store, remember preferences, secure checkout and understand website performance. Other analytics or advertising technologies may be used where enabled and permitted by law. Where consent is legally required for non-essential cookies, we will seek it before setting or reading those cookies.

You can manage available cookie preferences through our website's privacy or cookie controls, where displayed, and through your browser settings. You may unsubscribe from promotional emails using the link in the message. We may still send essential transactional or service communications, including eSIM delivery and support messages.

09. International transfers

Our ecommerce, payment, support and connectivity partners may process information outside the United Kingdom or European Economic Area. Where required, we use or rely on appropriate transfer safeguards, such as adequacy decisions, recognised contractual safeguards or other lawful transfer mechanisms. The protections applicable to a particular transfer depend on the recipient and circumstances.

10. How long we keep information

We retain personal information only for as long as reasonably necessary for the purposes described here, including providing services, maintaining order and accounting records, investigating disputes or fraud, and meeting legal obligations. Retention periods differ by record type. For example, certain financial and transaction records must be kept for statutory accounting or tax purposes, while support records and technical logs may be retained for shorter periods when no longer needed. We delete, anonymise or securely dispose of information when retention is no longer justified.

11. Security

We use appropriate organisational and technical measures intended to protect personal information, including access controls and reliance on established ecommerce and payment providers. No internet service or transmission method is completely secure. Please do not send sensitive payment details through ordinary email or chat.

12. Your privacy rights

Depending on the law that applies to you, you may have rights to access, correct, delete or receive a portable copy of your personal information, to object to or restrict certain processing, and to withdraw consent where processing relies on it. You may also have rights relating to certain automated decisions or targeted advertising. These rights are subject to legal conditions and exceptions, including where we must retain records to comply with the law.

To make a request, contact support@astaroam.com. We may ask for reasonable information to verify your identity before acting. We will respond within the timeframe required by applicable law. You may also use Shopify's privacy portal for requests concerning Shopify's own processing.

13. Complaints

If you have concerns about how we handle your personal information, please contact us at support@astaroam.com. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) or another relevant data protection authority.

14. Children and third-party websites

Astaroam is not directed at children and we do not knowingly seek to collect personal information from children. If you believe a child has provided information to us inappropriately, please contact us. Links to third-party websites and services are governed by those parties' own privacy policies; we encourage you to review them before sharing information.

15. Changes to this policy

We may update this policy to reflect changes in our services, suppliers, legal requirements or data practices. We will publish the updated version on this page, revise the date above and provide any additional notice required by law.