Privacy policy

1. Who processes your data

The data controller is Bivid Telecom SL, tax ID (NIF) B25537127, with its address at Avda. Industria 414, Nave 2, 25191 Lleida.

For anything to do with your data you can write to our data protection officer: dpd@bivid.store.

2. What data we process

• The data you give us when you buy or sign up: your email and your name. Your password is stored in a transformed form, so that we cannot read it.
• Your purchase data: what you bought, when, for how much, and the result of the payment that the gateway reports to us. We neither receive nor store your card details.
• Your eSIM data: its identifier, its installation code (encrypted) and its status: whether it is installed, how much data has been used and until when it is valid.
• Proof of what you accept when you buy: the version of the terms, the boxes you ticked, the date and time, the IP address and the browser.
• Technical data: the IP address and the date of your orders and of your sign-in attempts, and the language in which you use the website.
• What you write to us and what we send you: queries, complaints, withdrawals and the emails about your purchase.
• If you use the website assistant: what you write to it and what it answers, the page you were viewing and the language. It does not ask for your name or your email.

We do not process special category data. We do not see where you browse or what you do on the internet when you use the eSIM: only how much data has been used.

The data must be true and yours. If you give us another person’s data, you must have informed them beforehand and have their permission.

3. Where it comes from

From you, when you buy, sign up or write to us. From the payment gateway, which tells us whether the payment has gone through. And from the connectivity provider, which tells us the status and usage of your eSIM.

4. What we use it for and on what basis

• To handle your purchase, deliver your eSIM, maintain your account, show you your usage, handle withdrawals and refunds and answer your queries. Basis: it is necessary to perform the contract with you.
• To comply with our legal obligations: accounting and tax, consumer and data protection obligations.
• To protect the website and prevent fraud (for example, by limiting sign-in attempts), and to be able to show what was accepted, what was delivered and what was used if there is a complaint or a charge is reversed. Basis: our legitimate interest in security and in defending our rights. You can object by writing to us.

We do not send you advertising, we do not build profiles with your data and we do not take automated decisions that affect you: the website assistant answers using artificial intelligence, but it only gives information. If one day we wanted to send you offers, we would ask your permission first.

Giving us your email and your name is necessary in order to buy: without them we cannot deliver the eSIM to you.

5. Who we share it with

• With the payment gateway (Redsys) and the banks involved in the payment, which receive the amount, the order number and the name you give.
• With the providers that supply us with the platform and the hosting for the website, protection against attacks (Cloudflare) and email delivery. They process the data on our behalf, under a contract that obliges them to protect it.
• The connectivity provider that issues the eSIM receives the order for the plan, but not your name or your email.
• The network operators of the country you visit process the technical data that is essential to give you a connection (the eSIM identifier and the traffic), as in any mobile service. They do so as controllers in their own right and do not receive your name or your email.
• If you use the website assistant, what you write to it is sent to Anthropic, the provider of the artificial intelligence model that drafts the answer. It processes it on our behalf, under a contract that obliges it to protect it, and deletes it within 30 days at most, unless it has to keep it by law or to investigate misuse of its service.
• With public authorities, judges and law enforcement bodies, when a law obliges us to; and with our advisers, as far as necessary to meet our obligations or defend a claim.

We do not sell your data or pass it on to third parties for their own purposes.

6. Outside the European Economic Area

Cloudflare is a United States company that participates in the EU–US Data Privacy Framework, and it also works with the European Commission’s standard contractual clauses.

When you use the eSIM in a country outside the European Economic Area, the operators of that country process the technical connection data there: it is essential to give you the service you have bought.

Anthropic may process in the United States what you write to the assistant. That transfer is made under the European Commission’s standard contractual clauses.

7. How long we keep it

• Your account data, for as long as you have the account open. If you ask us to close it, we delete the data, except for what follows.
• Your purchase data and the related receipts, six years, because of accounting and tax law.
• Proof of what you accepted and of what was delivered, and complaints, for as long as they may give rise to liability: five years as a general rule.
• Conversations with the website assistant, 90 days.
• Sign-in attempts, two days. Links to set a password expire after 48 hours.

After those periods, the data is deleted. In the meantime, data that is no longer needed day to day is kept blocked, available only to judges and public authorities.

8. Your rights

You can ask to access your data, correct it, delete it, restrict its use, object to its use or take it with you, by writing to dpd@bivid.store from your account’s email address. We will reply within one month at most.

You can change your name, your language and your password yourself under “My details”, in your account.

If you think we have not dealt with your request properly, you can complain to the Spanish Data Protection Agency (AEPD, www.aepd.es).

9. How we protect it

The website always runs over an encrypted connection. Passwords are stored in a transformed form, eSIM installation codes and the emails we send are stored encrypted, and only the people who need it in order to help you have access to the data.

10. Minors

To buy on this website you must be aged 18 or over. We do not knowingly process data of minors; if you think we hold data about one, write to us and we will delete it.

11. Changes to this policy

If we change this policy we will publish the new one here, with its date. If the change is significant and you have an account, we will let you know by email.