Privacy policy

1. Who we are

localsimegypt.com is run by the company named in the seller block on this page (“Local SIM Egypt”, “we”). We are the controller of the personal data described here. We are a Polish company, so we handle personal data under the EU General Data Protection Regulation (GDPR). Write to contact@localsimegypt.com with any question, request or complaint.

2. What we collect

When you visit. Your browser sends technical data with every request: IP address, browser and device type, the page asked for and the page you came from. Cloudflare, which delivers our pages, uses it to deliver them and to protect the site.

When you accept analytics cookies. The pages you view, the site and campaign that brought you, the plans you select, your browser and device type, an approximate location worked out from your IP address, and a random visitor id in a cookie. We measure this with Umami, which runs on our own server: no analytics company receives it. Nothing is collected for this if you switch analytics off, and your browser’s Global Privacy Control signal counts as a refusal.

When you accept marketing cookies. The Meta Pixel loads in your browser and, with our server (Meta’s Conversions API), tells Meta Platforms Ireland Limited which pages you view and which plans you select, with your IP address, browser and device type, the Meta cookies in section 7, and the ad click id when an ad brought you. Meta uses this to measure and improve the company’s ads, and may link it to your Meta account. Nothing is sent to Meta if you switch marketing off, and Global Privacy Control counts as a refusal.

When you choose a plan. This site takes no orders and holds no order data. A buy button opens the plan on BaobabSIM, the company’s store for Africa and the Middle East, where your order is kept under that store’s own privacy policy. The link carries the plan, which of our links you used and, if an ad brought you, its click id; nothing else about you.

When you write to us. Your email address, your name and your message.

3. Why we use it

Purpose	Legal basis under the GDPR
Delivering the pages and protecting the site	Our legitimate interest in a working, secure site (Article 6(1)(f))
Answering your messages	Our legitimate interest in answering you (Article 6(1)(f))
Measuring how the site is used	Your consent (Article 6(1)(a))
Measuring and improving ads on Facebook and Instagram	Your consent to marketing cookies (Article 6(1)(a))

You can withdraw a consent at any time with Cookie settings at the foot of every page. We send no marketing messages and sell no personal data.

4. Who receives it

• Cloudflare, Inc. delivers and protects the website.
• Our hosting company runs the server our Umami analytics runs on.
• Meta Platforms Ireland Limited receives the marketing data in section 2, only if you accept marketing cookies. We and Meta are jointly responsible for collecting that data and passing it to Meta; what Meta then does with it is governed by Meta’s Privacy Policy.
• BaobabSIM, the company’s store, receives nothing from this site except the link you follow to it.
• Our accountants and legal advisers, and public authorities where the law requires it.

5. Transfers outside the European Economic Area

Cloudflare and Meta may process data in the United States and other countries. We rely on the safeguards the GDPR provides: the European Commission’s standard contractual clauses, or its adequacy decision for companies certified under the EU-US Data Privacy Framework.

6. How long we keep it

• Analytics data: no longer than 14 months.
• Messages you send us: as long as needed to handle them, and no longer than 3 years after the matter is closed.
• Data received by Meta: as set out in Meta’s Privacy Policy.

7. Cookies and browser storage

We ask for your consent before we set any analytics or marketing cookie.

Cookie	Purpose	Kept for
lsm_consent	Remembers whether you allowed analytics cookies	180 days
lsm_ads	Remembers whether you allowed marketing cookies	180 days
_lsm_id	A random visitor id, set only after you allow analytics	400 days
_lsm_sid	The current visit, set only after you allow analytics	400 days; a visit ends after 30 minutes without activity
_fbp	Meta Pixel browser id, set only after you allow marketing	90 days
_fbc	The click id of an ad that brought you, set only after you allow marketing	90 days

Switching a category off in Cookie settings deletes its cookies. Cloudflare may set strictly necessary security cookies.

Your browser also keeps, for itself only: the language you picked (lsm-locale) and whether you turned down our offer of a page in your language (lsm-language-hint), in local storage; and, while the tab is open, the click id of an ad that brought you (lsm-click-ids), in session storage, so the link to the store can carry it.

8. Your rights

Under the GDPR you can ask for access to your data and a copy of it, to correct it, to delete it, to restrict its use or to receive it in a portable format, and you can object to uses based on our legitimate interests. You can withdraw a consent at any time. We reply within one month.

You can complain to the President of the Personal Data Protection Office in Poland (UODO, uodo.gov.pl), or to the data protection authority where you live or work. If you are in Egypt, the Personal Data Protection Law, Law No. 151 of 2020, gives you rights over your personal data, and its authority is Egypt’s Personal Data Protection Center. If you are in the United Kingdom, the UK GDPR gives you the same rights as above.

9. Security and children

The site is served only over HTTPS and keeps no order or payment data. Never post a real eSIM QR code in a chat or on social media. The site is not aimed at children under 16, and we do not knowingly collect their data.

10. Changes

When our processing changes, we update this policy and the date at the top of the page. The English text is the binding one.