Privacy Policy

1. Introduction & Data Controller

TravelTrip World, operating TravelTrip World / Traveler eSIM (traveltrip.world), is dedicated to safeguarding your personal privacy. This Privacy Policy details how we collect, handle, store, and protect your information when using our international eSIM store and customer portal.

2. Personal Information We Collect

We collect only the minimum personal data necessary to provision, deliver, and support your travel connectivity:
• Contact Information: Full name and checkout email address for eSIM profile delivery, order confirmation, and customer account access.
• Technical & Order Metadata: IP address, device model (for compatibility verification), selected destination, package code, ICCID (SIM serial number), and transaction timestamps.
• Financial Data: We do NOT collect, view, or retain your credit card number, security code (CVV), or bank credentials. All financial transactions are processed by certified third-party payment gateways.

3. Legal Grounds & Purpose of Data Processing

We process your personal information strictly for legitimate commercial and operational purposes:
• Fulfillment of Contract: Communicating with carrier SM-DP+ clearinghouses to generate your GSMA-compliant eSIM profile, QR code, and LPA string.
• Customer Care: Providing assistance by email, verifying orders, and resolving technical connectivity inquiries.
• Security & Fraud Mitigation: Enforcing dual-factor verification (Order ID + checkout email) on guest order lookups to ensure unauthorized parties cannot access your eSIM credentials.
• Statutory Compliance: Complying with applicable accounting, tax, and anti-fraud regulations.

4. Authorized Third-Party Processors

We never sell, lease, or monetize customer data. Data is shared solely with certified infrastructure partners essential to service execution:
• Payment Processors: PayPal Inc. (earlier card orders: Stripe Inc.) (secure PCI-DSS Level 1 payment authorization).
• Carrier SM-DP+ Infrastructure: Authorized telecommunications clearinghouses to generate cryptographic SIM credentials.
• Hosting & CDN: Vercel Inc. (global edge distribution and SSL-secured infrastructure).

5. Security Architecture & Encryption

All client-server communications are protected with modern TLS 1.3 encryption with Perfect Forward Secrecy. Passwords for registered accounts are cryptographically hashed and salted using industry-standard algorithms. Guest eSIM lookups strictly mandate matching both the secret Order ID and the original checkout email.

6. Data Retention Period

Order history, ICCID records, and invoices are retained for the statutory period required under applicable commercial and accounting regulations. Registered account profiles remain active until deletion is requested by the user.

7. Customer Rights & Data Inquiries

You have the right to request access to your personal records, demand correction of inaccurate information, or request the deletion of your customer profile (subject to legal retention mandates). To exercise your rights, contact our Data Protection desk at support@traveltrip.world.

8. Cookies & Analytics

We use Google Analytics 4 (which sets first-party cookies such as _ga) and cookie-free Vercel Web Analytics to count visits, see which campaigns bring visitors, and measure checkout steps. We never send your name, email address or card details to these tools; purchase events contain only the plan, destination, price and order reference. We also store a referral code and campaign tags (utm_source, utm_medium, utm_campaign) in your browser for 30 days so a later order can be attributed to the link you came from. Essential cookies keep you signed in and protect checkout (Cloudflare Turnstile). You can block or delete cookies in your browser settings, or opt out of Google Analytics at tools.google.com/dlpage/gaoptout.