Privacy Policy
Last updated 21 October 2026
Who you are dealing with. "Acqua Telecom" is the trading name of Renato Andre de Andrade Reis, Forchwaldstrasse 30a, 6318 Walchwil, Switzerland (a Swiss sole proprietorship). Services supplied to customers in the United Kingdom are supplied by Septoo Limited, a company registered in England and Wales (company no. 14752958), Building 2 First Floor, Croxley Business Park, Watford, Hertfordshire WD18 8YA. In these pages "we", "us" and "our" means whichever of them is supplying the service to you.
Contact: support@acquatelecom.com · Privacy: privacy@acquatelecom.com
This policy explains what personal data we collect, why, and your rights. It covers our websites (acquatelecom.com and the travel eSIM shops), our mobile and travel eSIM services, and the Connexa CRM platform and its Marketing feature used by our business customers. For UK customers the data controller is Septoo Limited; otherwise it is Acqua Telecom (details above). We process data in line with the UK GDPR, the Data Protection Act 2018 and the Swiss Federal Act on Data Protection.
1. Shoppers and mobile customers
| Data | Why | Legal basis |
|---|---|---|
| Email address, name (if given), order details | To deliver your eSIM or SIM, send receipts and support you | Performance of a contract |
| Payment confirmation and last four card digits (held by Stripe) | To take payment and handle refunds or disputes | Contract; legal obligation |
| Postal address (physical SIM only) | To post your SIM | Contract |
| eSIM identifiers (ICCID, activation code) and usage data (data volume, country, network, dates) | To provide and bill the service, prevent fraud and misuse, and meet our obligations to network partners | Contract; legitimate interests; legal obligation |
| Messages you send us | To answer you | Legitimate interests |
| Technical logs (IP address, browser, pages requested) | Security and keeping the site running; held briefly by our hosting provider | Legitimate interests |
| Website usage data collected by analytics cookies (Google Analytics), only if you accept them | To understand how the site is used and improve it | Consent |
2. Business users of our platform
If you are a member of staff of a club, brand or partner that uses Connexa CRM or the Travel CRM, we hold your name, work email, role, sign-in records (including Google sign-in, where you choose it) and an audit log of what you do in the system. We use this to run your account securely. The legal basis is our contract with your organisation and our legitimate interest in security.
3. Advertising accounts (Google Ads and Meta)
The Marketing feature lets a business customer connect its own Google Ads and Meta (Facebook and Instagram) ad accounts to our platform. It is used only by the business that connects its account, and only after an authorised person signs in with Google or Meta and approves the access screen. In this section "you" means that business.
What we access
- Your ad account names, identifiers, currency and time zone.
- Campaign, ad set and ad names and status, budgets, and performance figures (spend, impressions, clicks, results).
- Where you ask us to, we pause or resume a campaign, change a budget, or create a new campaign. New campaigns are always created paused.
We do not use this access to read customer lists, audiences or the personal data of people who see or click your ads.
What we store
- The access and refresh tokens Google or Meta give us, stored encrypted.
- Your ad account identifiers, names and currency, and the date you linked each account.
- A daily record of spend and any management fee calculated on it, kept for accounting.
How we use it
Only to show you your own results in the Marketing section, carry out the changes you ask for, and calculate our management fee. We do not sell this data, we do not use it to build profiles, to train advertising or machine-learning models, or to show ads to anyone, and we do not share it with other customers. It is shared only with our hosting and infrastructure providers under contract, or where the law requires.
Google API Services User Data Policy
Acqua Telecom's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Meta Platform Terms
Data received from Meta is handled in line with the Meta Platform Terms and Developer Policies. We use it only to provide the Marketing feature to you.
Disconnecting and deleting
You can disconnect at any time (see how to disconnect and delete your data). Disconnecting stops all access and deletes the stored tokens.
4. Who we share data with
Only the providers needed to run the service, each under contract: Stripe (payments), Postmark and Resend (email delivery), Bridge4IP / eSIMVault (travel eSIM network platform, EU), Transatel (UK mobile network platform), Vercel and Amazon Web Services (hosting), Google Workspace (our email), and Google and Meta where you connect ad accounts. Some of these providers are outside the UK and Switzerland; where they are, transfers are protected by adequacy decisions or standard contractual clauses. We do not sell personal data and we do not use customers' personal data for advertising.
5. How long we keep it
Order and billing records, including advertising spend and fee records, for 6 years (tax and accounting law). Service usage records for 12 months unless needed longer for a dispute. Support messages for 2 years. Technical logs for up to 30 days. Advertising access tokens are deleted when you disconnect; other advertising account details are deleted within 30 days of a deletion request, except the accounting records above.
6. Your rights
You can ask for a copy of your data, ask us to correct or delete it, object to or restrict processing, and ask for your data in a portable format. Email privacy@acquatelecom.com. UK customers can complain to the Information Commissioner's Office (ico.org.uk); Swiss customers to the Federal Data Protection and Information Commissioner (edoeb.admin.ch).
7. Changes
We will update this page when anything changes and show the date at the top. Our cookie policy is on the legal page.