Skip to content

Effective August 26, 2026 · legal-2026.08.26-2

Privacy notice

This notice explains how Alaveno handles personal data for browsing, purchases, delivery, account access and support.

Controller and contact

SIRIUS DIGITAL LTD, trading as Alaveno, is the controller of the personal data described here. Its registered office is 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ. For privacy requests, contact hello@alaveno.com or use the account privacy controls.

Lawful bases

We process account, order, payment, eSIM delivery and support data to perform our contract with you. We keep required financial, tax and rights-request records to meet legal obligations. We use proportionate security, fraud-prevention and service-reliability data for our legitimate interests. Optional analytics and advertising measurement rely on your consent, which you can withdraw at any time.

Service providers and transfers

Depending on the feature you use, necessary data is handled by eSIM Access to prepare and deliver your eSIM; Stripe or Cryptomus for payment; Resend for email; Vercel, DigitalOcean and Cloudflare for hosting and media; Grafana Cloud for redacted operational monitoring; and Wise or Xero for financial records. PostHog, Google or Meta measurement is used only when enabled and consented to. Where data leaves the United Kingdom, we use an applicable adequacy regulation or contractual transfer safeguards and minimise the data shared.

Your rights and complaints

You may ask for access, correction, deletion, restriction or portability, object to processing based on legitimate interests, and withdraw consent without affecting earlier lawful processing. Some rights depend on the circumstances and retained legal records cannot always be erased immediately. You may also complain to the UK Information Commissioner's Office or your local data-protection authority.

Data we use

We use contact and order details, payment status, eSIM lifecycle and usage summaries, device choices, support messages and necessary security records. Payment card details are handled by the payment service and are not stored in this frontend.

Why we use it

We use data to provide the contract, deliver and support your eSIM, prevent fraud, meet legal obligations and operate the service. Optional analytics is used only after consent.

Sharing and international processing

We share only what is necessary with payment, eSIM delivery, email, hosting and support providers. Travel connectivity can require providers in other countries; appropriate contractual and technical safeguards must be used where required.

How long we keep it

Your profile remains while your account is open. If you request deletion, we normally wait seven days and until any active eSIM service ends, then remove or pseudonymise the profile and revoke access.

QR and activation secrets are removed 30 days after confirmed expiry or cancellation. Resolved support content is kept for 24 months, opted-in raw product analytics for 30 days and sanitised diagnostics for 7 days. Minimum order, payment, refund and tax records may be kept for up to 10 years for accounting and VAT obligations. A dispute or legal preservation request can extend only the affected record.

Security

Installation credentials are encrypted and must never enter analytics, monitoring or support URLs. Access controls and audit records protect sensitive operations. Alaveno does not store the card or wallet credentials entered in the payment provider's secure payment surface.

Your choices

Account settings provide analytics, export and deletion controls. You may also contact us to request access, correction, deletion, restriction, portability or to object where the applicable law provides those rights.

Optional advertising measurement

Allows us to measure which ads lead to a purchase and send consented purchase results to advertising platforms. This may use ad click identifiers and a securely hashed email address. It is separate from affiliate commission tracking.

You can change either choice at any time. Advertising tags and conversion exports stay off unless advertising measurement is allowed.