Privacy policy

1. Who we are

localsimvietnam.com is run by LuKas Holdings sp. z o.o. in Warsaw, named in the seller block on this page (“Local SIM Vietnam”, “we”). We are the controller of the personal data described here. We are a Polish company, so we handle personal data under the EU General Data Protection Regulation (GDPR). Write to contact@localsimvietnam.com with any question, request or complaint.

2. What we collect

When you visit. Your browser sends technical data with every request: IP address, browser and device type, the page asked for and the page you came from. Cloudflare, which delivers our pages, uses it to deliver them and to protect the site.

Anonymous measurement. The visit is counted anonymously: the pages you view, the site and campaign that brought you, the plans you select, your browser and device type, and an approximate location worked out from your IP address. We measure this with Umami, which runs on our own server: no analytics company receives it. We set no cookie and keep no identifier that points back to you: the count is a one-way hash, salted with a secret of ours, that changes every 30 minutes.

When you choose a plan. This site takes no orders and holds no order data. A buy button opens the plan on VietSIM, the company’s store for Vietnam and Asia, where your order is kept under that store’s own privacy policy. The link carries the plan, which of our links you used and, if an ad brought you, its click id; nothing else about you.

When you write to us. Your email address, your name and your message.

3. Why we use it

Purpose	Legal basis under the GDPR
Delivering the pages and protecting the site	Our legitimate interest in a working, secure site (Article 6(1)(f))
Answering your messages	Our legitimate interest in answering you (Article 6(1)(f))
Measuring how the site is used (anonymously)	Our legitimate interest in understanding and improving the site (Article 6(1)(f))

We set no cookie for measurement, so there is nothing to switch off; where we rely on our legitimate interests you can object, as section 8 explains. We send no marketing messages and sell no personal data.

4. Who receives it

• Cloudflare, Inc. delivers and protects the website.
• Our hosting company runs the server our Umami analytics runs on.
• VietSIM, the company’s store, receives nothing from this site except the link you follow to it.
• Our accountants and legal advisers, and public authorities where the law requires it.

5. Transfers outside the European Economic Area

Cloudflare may process data in the United States and other countries. We rely on the safeguards the GDPR provides: the European Commission’s standard contractual clauses, or its adequacy decision for companies certified under the EU-US Data Privacy Framework.

6. How long we keep it

• Analytics data: no longer than 14 months.
• Messages you send us: as long as needed to handle them, and no longer than 3 years after the matter is closed.

7. Cookies and browser storage

We set no cookies for measurement, and this site carries no tracking, so there is no cookie banner to answer. Your visits are counted anonymously, as section 2 describes. Cloudflare may set strictly necessary security cookies.

Your browser also keeps, for itself only: the language you picked (lsm-locale) and whether you turned down our offer of a page in your language (lsm-language-hint), in local storage; and, while the tab is open, the click id of an ad that brought you (lsm-click-ids), in session storage, so the link to the store can carry it.

8. Your rights

Under the GDPR you can ask for access to your data and a copy of it, to correct it, to delete it, to restrict its use or to receive it in a portable format, and you can object to uses based on our legitimate interests. We reply within one month.

You can complain to the President of the Personal Data Protection Office in Poland (UODO, uodo.gov.pl), or to the data protection authority where you live or work. If you are in Vietnam, Vietnam’s personal data protection law gives you rights over your personal data. If you are in the United Kingdom, the UK GDPR gives you the same rights as above. Where another country’s law gives you rights over your personal data, you keep them as well.

9. Security and children

The site is served only over HTTPS and keeps no order or payment data. Never post a real eSIM QR code in a chat or on social media. The site is not aimed at children under 16, and we do not knowingly collect their data.

10. Changes

When our processing changes, we update this policy and the date at the top of the page. The English text is the binding one.