Last updated: 16 April 2026

 

1. Who we are and how this policy applies

This Privacy Policy explains how Worldexa OÜ collects, uses, and protects your personal data when you use our website and services.

Worldexa OÜ
Registry Code: 17478438
Harju maakond, Tallinn, Kesklinna linnaosa, Vesivärava tn 50-201, 10152, Estonia
Phone: +371 20516208
Email: help@worlexa.com

Worldexa OÜ acts as the data controller for the purposes of applicable data protection laws.

We provide digital eSIM services that allow you to access mobile data globally. In doing so, we process certain personal data. We take this responsibility seriously and aim to handle your data in a transparent and secure way.

By using our services, you acknowledge this Privacy Policy.

 

2. What data we collect

We collect only the data necessary to provide and improve our services. We follow the principles of data minimisation and purpose limitation when processing personal data.

This includes:

Information you provide directly:

• name (if provided)
• email address
• country or region (where relevant)
• information submitted through support requests or communication

Transaction-related information:

• purchase details
• selected plans and usage-related metadata
• payment status

We do not store full payment card details. Payments are processed by third-party providers.

Information collected automatically:

• IP address
• device type and operating system
• browser type
• interaction with the website
• approximate location (based on IP)

We may also use cookies and similar technologies. Details are provided separately in our Cookie Policy.

3. How we use your data

We use your data in a practical and limited way, primarily to deliver the service you requested.

This includes:

• processing purchases and delivering your eSIM
• enabling activation and connectivity through partner networks
• communicating essential service information (such as confirmations or updates)
• responding to support requests
• improving the functionality and performance of the platform
• detecting and preventing fraud or misuse

Where permitted, we may also use your email to inform you about product updates or relevant offers. You can opt out at any time.

4. Legal basis for processing

If you are located in the EU or EEA, we rely on the following legal grounds:

• Performance of a contract — to deliver the service you purchased
• Legitimate interest — to operate, improve, and secure the platform
• Legal obligation — to comply with applicable laws and regulations
• Consent — where required, for example for marketing communications

You may withdraw consent at any time where it applies.

5. How we share your data

We do not sell your personal data.

We may share limited data where necessary to provide the service:

• Mobile network partners — to enable your eSIM to connect to local networks
• Payment providers — to process transactions
• Service providers — such as hosting, analytics, and customer support tools

These parties only receive the data required to perform their function and are bound by confidentiality and data protection obligations. Depending on the circumstances, such parties may act as data processors or independent data controllers.

We may also disclose data where required by law or in response to lawful requests by authorities.

6. International data transfers

Because the service operates globally, your data may be processed outside your country of residence.

This includes transfers to:

• network providers in different jurisdictions
• technical service providers

Where required, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) or other approved mechanisms to ensure your personal data remains protected in accordance with applicable data protection laws.

7. Data retention

We retain your personal data only for as long as necessary:

• to provide the service
• to comply with legal and regulatory requirements
• to resolve disputes or enforce our agreements

Certain data (including transaction records, billing data, and fraud-related information) may be retained for up to 5 years where required for legal, tax, or regulatory purposes.

When data is no longer needed, it is securely deleted or anonymised.

8. Your rights

Depending on your location, you may have the right to:

• access your personal data
• request correction of inaccurate data
• request deletion of your data
• restrict or object to processing
• request a copy of your data in a structured, commonly used format
• withdraw consent where applicable

You also have the right to lodge a complaint with a competent data protection authority.

To exercise your rights, contact us at: help@wordlexa.com

We may need to verify your identity before processing such requests.

9. Security

We implement appropriate technical and organisational measures to protect your data against:

• unauthorised access
• loss or misuse
• alteration or disclosure

These measures include, where appropriate, access controls, system monitoring, and secure infrastructure practices.

While no system is completely secure, we continuously improve our safeguards to maintain a high level of protection.

10. Third-party services

Our platform relies on third-party providers for key functions such as payments and connectivity.

These providers may process your data independently under their own privacy policies and may act as separate data controllers.

We recommend reviewing their policies where relevant.

11. Children’s data

Our services are not intended for individuals under the age of 18.

We do not knowingly collect personal data from children. If we become aware that such data has been provided, we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our services or legal requirements.

The latest version will always be available on the website. Continued use of the service means you accept the updated policy.

13. Contact

If you have any questions about this Privacy Policy or how your data is handled, you can contact us at:

Email: help@worlexa.com