Privacy Policy

1. Information We Collect

To provide you with stable and secure communication services, we collect the following types of personal information when you interact with us:

• Account and Contact Information: Your name, email address, phone number, and account login credentials (such as encrypted passwords) provided when you register or use our platform.
• Transaction and Payment Information: When you purchase a plan, your payment is processed securely by trusted third-party payment service providers (such as Moneris and PayPal). We do not collect or store sensitive payment credentials such as your full bank card number or CVV security code on our servers; we only retain the order number, transaction amount, and payment status for reconciliation.
• Technical and Network Usage Data: Basic device information: IP address, browser type, operating system, access date and time, and device model. Essential communication data: Your device's EID (eSIM Identifier), IMEI (International Mobile Equipment Identity), and basic network logs when you activate and use data (such as activation time, country code, and data usage consumed). Please note that we do not collect or monitor your specific browsing content, voice calls, or communication privacy.
• Identity Verification Information (KYC): In accordance with the telecommunications laws and regulations of some destination countries or regions, mandatory real-name authentication may be required to use the local communication network. In these specific cases, we may ask you to provide a scanned copy or ID number of a government-issued identity document (such as a passport or ID card).

2. How We Use Your Information

We strictly use the collected information for the following purposes within legal, legitimate, and necessary boundaries:

• Service Provision and Management: To create and maintain your account, process your orders, deliver eSIM profiles or mail physical SIM cards, and ensure smooth network activation.
• Customer Service and Notifications: To send you verification codes, order confirmation emails, service updates, network billing reminders, and to answer your customer service inquiries.
• Security and Fraud Prevention: To detect, investigate, and prevent malicious credit card theft, fraudulent transactions, hacking attacks, spam traffic abuse, and other behaviors that violate the Terms of Service or laws and regulations.
• Legal Compliance: To fulfill applicable legal obligations, telecommunications regulatory requirements, court subpoenas, or government mandates (for example, submitting real-name authentication information to local underlying operators).

3. Information Sharing, Disclosure, and Transfer

We solemnly promise never to sell, rent, or resell your personal information to any third party. We only share your information with trusted third parties under the following necessary and limited circumstances:

• Third-Party Service Providers: We share necessary data with vendors who assist in our operations, including payment processors (Moneris, PayPal), email and SMS service providers, and cloud server and database hosts. These service providers can only process data according to our instructions and must comply with strict confidentiality agreements.
• Basic Telecommunications Operators: To activate the communication network at your travel destination, we must share the device identification codes (such as EID/IMEI) required for activation or real-name authentication information required by local laws with local or international basic telecommunications network partners.
• Legal and Law Enforcement Requirements: If we must disclose your personal information to cooperate with an investigation in accordance with laws, regulations, legal proceedings, or mandatory government requirements, we will do so to the extent permitted by law.

4. Cross-Border Data Transfer

As a global communications service provider headquartered in Ontario, Canada, the information we collect may be transferred, stored, and processed in Canada, your destination country, or other countries where we and our service providers have servers. Data protection laws may vary across countries, but no matter where the data is processed, we will adopt reasonable contractual and technical measures to ensure your information receives a level of protection consistent with this policy.

5. Data Retention and Security Mechanisms

• Security Protection: We use industry-standard physical, electronic, and administrative security measures (such as HTTPS encrypted transmission and multi-layer database access control) to protect your information from unauthorized access, disclosure, modification, or destruction. However, please understand that due to the complexity of the internet environment, no method of electronic storage or transmission can guarantee 100% absolute security.
• Retention Period: We retain your personal information only for the minimum period necessary to achieve the purposes stated in this policy. After the retention period expires, or after you successfully cancel your account or request data deletion, we will completely delete or anonymize your personal information, unless laws (such as tax, audit, or telecommunications regulations) require us to retain it for a longer period.

6. Your Rights

Under applicable laws, you have the following rights regarding your personal information, which you can exercise by logging into your account or contacting official customer service (info@gianttree.ca):

• Right of Access and Correction: You have the right to review the personal information we hold about you and correct any inaccurate or incomplete information.
• Right to Deletion (Right to be Forgotten): Subject to legal conditions, you can request that we delete your account and related personal information.
• Withdrawal of Consent: You may withdraw your previously granted consent for us to process your information at any time (for example, by unsubscribing from marketing emails). Withdrawing consent does not affect the lawfulness of data processing based on your consent before the withdrawal.

7. Cookies and Tracking Technologies

We use Cookies and similar tracking technologies on our website to ensure platform operation and optimize user experience:

• Core Essential Cookies: Used to maintain your login status, security verification, shopping cart item preservation, and other core functions. Disabling these Cookies will prevent the website from functioning properly.
• Preference Settings Cookies: Used to remember your personalized preferences, such as selected interface language and display currency, to avoid repetitive settings.
• Analytics and Performance Cookies: Help us anonymously calculate how visitors browse and use the website so we can improve site performance and user experience.
• Control Methods: You can clear or disable Cookies at any time through your browser settings. We solemnly declare that we do not use Cookies for targeted advertising purposes, nor do we sell such tracking data to third-party advertisers.

8. Minors' Privacy

Our services are primarily intended for adult travelers with full civil capacity. We do not knowingly collect personal information from children under 13 (or the applicable upper age limit for minors under your local laws). If we discover that any minor has provided us with information without the consent of a parent or guardian, we will immediately take steps to delete that data.

9. Changes to Privacy Policy

We may revise this Privacy Policy from time to time. When significant changes occur, we will publish the latest version on our website and update the "Last Updated" date at the top. If you continue to use our services after the revised privacy policy takes effect, it means you have read and agreed to the newly modified content.

10. Contact Us

If you have any questions, comments, complaints, or suggestions regarding this Privacy Policy or the processing of your personal information, please contact our privacy compliance team through the following official channels:

Company Name: Giant Tree Canada Inc.

Registered Address: Oakville, ON, Canada

Official Email: info@gianttree.ca