Privacy policy

Updated 2026-11-14

SimPig is a business name of Sidequest Labs Pty Ltd (ABN 40 693 165 141), an Australian company ("SimPig", "we", "us"). This policy explains what personal information we collect when you visit simpig.com, buy or use a SimPig eSIM, or contact us, and what we do with it.

We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). The short version: we collect what we need to sell you an eSIM and make it work, we do not sell your information, and we keep it only as long as we need it.

What we collect

Your email address. It is how you buy, sign in and receive your eSIM. If an AI assistant or another person buys an eSIM for you, they give us your email address.
Account details: a password (stored only as a one-way hash by our authentication provider; we never see it), passkeys (we store the public key only), and two-factor authentication settings if you add them.
A display name, only if you choose one, for example on a mates link.
Orders and payments: what you bought, when, the price, and the payment status. Card details are entered on Stripe's page and held by Stripe; we never see or store your full card number. Stripe tells us the outcome and may share limited details such as the card brand, the last four digits and the billing country.
eSIM details: the eSIM's identifiers (such as the ICCID, and the EID where the network provides it), its activation code, its status, and how much data it has used and when, as reported by our eSIM supplier and the mobile networks it uses.
Technical information: your IP address, browser and device type, pages you visit, referring site, and the time of each visit. Our site and its partners use cookies and similar technologies (see "Cookies, the Meta Pixel and analytics").
Messages you send us, and anything you include in them, such as screenshots or device details.

We do not ask for your name, address, date of birth or identity documents to sell you an eSIM. Some countries require travellers to register a SIM with the local network; where that applies, the network or our supplier will tell you, and the information goes to them under their terms.

You can browse simpig.com without giving us your name. You cannot buy without an email address, because it is how we deliver the eSIM and how you get help with it.

How we collect it

Mostly from you: when you type your email at the checkout, sign in, or write to us. Some comes from others: an AI assistant or person buying on your behalf, Stripe (payment results), our eSIM supplier and mobile networks (eSIM status and data usage), and automatically from your browser when you use the site.

Why we use it

To sell you an eSIM, deliver it, help you install it, process top-ups, and send receipts and service emails (for example "your eSIM is ready" or "you are running low on data").
To run mates links: to work out the discount, show the people who have bought from a link (by the display name they chose, or "Mate 2" and so on) and settle each payment.
To keep your account secure and to prevent, detect and investigate fraud, chargebacks, abuse and breaches of our terms. This includes automated checks by us and by Stripe (for example Stripe Radar) that can decline or flag a payment.
To answer support requests and resolve refunds, disputes and complaints.
To measure and improve our advertising and our site (see the next section).
To meet legal obligations, such as keeping tax and financial records, and responding to lawful requests from authorities.

We only use your information for another purpose if you agree, if you would reasonably expect it and it is related to the above, or if the law allows or requires it.

Cookies, the Meta Pixel and analytics

We use a small number of cookies. One keeps you signed in (it is essential and only works on our own sites). Others belong to Meta (Facebook and Instagram): the Meta Pixel on our pages tells Meta which pages you viewed and what you did (for example viewing a plan, starting a checkout or buying), so we can measure whether our ads work and show ads to people likely to be interested. Our servers also send Meta the same events through Meta's Conversions API, including your email address converted into a one-way code (a "hash") so Meta can match the event to an account without us sending the address itself.

We use Cloudflare Web Analytics to count visits in aggregate. It does not use cookies to track you across sites.

You can block or delete cookies in your browser settings, use an ad blocker, and change how Meta uses information for ads in your Facebook or Instagram ad preferences. The site still works without the Meta cookies.

Emails

We send emails you need: your eSIM, receipts, mates link updates, sign-in codes and important changes to your service. We will only send marketing emails if you have agreed, and every marketing email has an unsubscribe link, as the Spam Act 2003 requires.

We do not sell personal information. We share it only with the businesses that help us run SimPig, and only what each needs:

Stripe (payments and fraud prevention): United States and Australia, among others.
Supabase (our database and sign-in): hosted in Sydney, Australia.
Cloudflare (our website, servers and visit counts): a global network, including the United States.
Resend (sending our emails): United States.
eSIM Access, our eSIM wholesaler, and the mobile networks your eSIM connects to: they receive the eSIM's identifiers and see its data usage. eSIM Access is based in Hong Kong; the networks are in the countries you travel to.
Meta Platforms (advertising measurement, as above): United States and Ireland, among others.
Our professional advisers, banks, insurers and, where the law requires or allows it, government agencies, courts and law enforcement.
A buyer of our business, if SimPig is ever sold, so they can keep serving you under this policy.

Several of these are overseas, so your information may be stored or processed in the United States, Hong Kong (our eSIM supplier), Ireland and the countries you travel to. We take reasonable steps, including contractual terms, so that these providers protect it in a way consistent with the APPs. By using SimPig you understand that information may be disclosed overseas as described here.

How we protect it

Access to our database is limited to what each part of SimPig needs, connections are encrypted, and staff access needs two-factor authentication. Your eSIM's activation code is treated as a secret: it is only shown to you (and to whoever you or your assistant gave the order link to), never put in a web address and never written to our logs.

No system is perfectly secure. If a data breach is likely to cause you serious harm, we will tell you and the Office of the Australian Information Commissioner (OAIC) as the Notifiable Data Breaches scheme requires.

How long we keep it

We keep account and order information while your account is open and for as long as we need it afterwards for the purposes above, including at least five years for tax and financial records. Data usage records are kept while the eSIM is active and for a period afterwards to handle support, refunds and disputes. When we no longer need information, we delete it or remove anything that identifies you.

Seeing, correcting or deleting your information

You can ask for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete your account, by emailing hello@simpig.com from the address on your account. We will reply within 30 days. We may need to confirm it is you first, and we may keep some information where the law requires it (for example tax records) or to deal with a dispute. Deleting your account does not cancel an eSIM that has already been delivered.

Children

SimPig is for people aged 18 and over. We do not knowingly collect information from children. A parent or guardian can buy an eSIM for a child's device using their own email address.

Questions and complaints

Email hello@simpig.com with "Privacy" in the subject. We will acknowledge your complaint and aim to resolve it within 30 days.

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner: oaic.gov.au, 1300 363 992.

Changes to this policy

We may update this policy as SimPig changes. The date at the top shows the latest version. If a change matters to how we use your information, we will tell you by email or on the site before it takes effect.