Last updated
Arel eSIM ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and eSIM services. We process personal data in accordance with the Turkish Law on Protection of Personal Data (KVKK), and the EU General Data Protection Regulation (GDPR) where applicable.
By using our services, you consent to the data practices described in this Privacy Policy. Please read this policy carefully to understand our practices regarding your personal data.
We collect information that you provide directly to us, including:
We do not store full credit card numbers; payment card data is held and processed only by our payment provider, Paddle.com.
When you use our services, we automatically collect:
We use the collected information for the following purposes:
We do not sell your personal information. We may share your information only in the following circumstances:
We share information with trusted third-party service providers who assist in operating our business. Key partners include:
These providers are contractually bound to protect your information and use it only for the purposes we specify, in compliance with applicable data protection law.
We may disclose your information if required by law, regulation, or legal process, or to:
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections.
If you participate in our referral programme, we may notify referrers when a referral is successfully completed (for example, that a qualifying purchase was made). Referrers do not receive the referred customer's personal details (such as name, email, or contact information); we only use referral data as necessary to operate the programme and award credits in accordance with our Terms of Service.
We implement industry-standard security measures to protect your personal information, including:
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
We retain your personal information for as long as necessary to:
When information is no longer needed, we securely delete or anonymize it. Account information is typically retained for up to 7 years after account closure for legal and accounting purposes.
Depending on your location, you may have the following rights regarding your personal information:
To exercise these rights, please contact us at [email protected]. We will respond to your request within 30 days.
We use cookies and similar tracking technologies to enhance your experience, analyze usage, and provide personalized content. For detailed information about our use of cookies, please see our Cookie Policy.
You can control cookies through your browser settings. However, disabling cookies may limit your ability to use certain features of our website.
Your personal data may be transferred to and processed in countries outside Turkey and the European Economic Area (EEA). Our operations and service providers are located in several jurisdictions: we are based in Turkey; our Merchant of Record (Paddle.com) is established in Ireland and may process data there and in other locations; and our network infrastructure provider (e.g. Redtea Mobile) may operate or use facilities in regions such as Singapore or China. These countries may have data protection laws that differ from those in your country.
Where we transfer personal data outside Turkey or the EEA, we ensure appropriate safeguards are in place as required by KVKK and EU GDPR. These may include: (i) transfers to countries that have been deemed to provide an adequate level of data protection by Turkey or the European Commission; (ii) standard contractual clauses (SCCs) approved by the European Commission; (iii) binding corporate rules or other approved mechanisms. We will ensure that any such transfers are made in compliance with applicable law and that your data remains protected in line with this Privacy Policy.
Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child without parental consent, we will take steps to delete that information.
Our website may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by:
The "Last updated" date at the top indicates when this Privacy Policy was last revised. Your continued use of our services after changes are posted constitutes acceptance of the updated Privacy Policy.
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: