Privacy Policy

Updated: 13 September 2026

This Privacy Policy explains how Emodas LTD (Cyprus, reg. No. HE459036, Dalia Court, Flat 007, 7 Ikarou, Paphos 8041, Cyprus), operating the StayOn service at getstayon.com, processes personal data as a data controller under the EU General Data Protection Regulation (GDPR). Contact: hello@getstayon.com.

1. What we collect

Order data: email address, purchased plan, order ID, order status, locale, timestamps.
eSIM technical data: ICCID and activation parameters of the eSIM issued to you, data usage totals for your plan (provided by our network partner for service delivery and support).
Payment data: processed entirely by Stripe Payments Europe Ltd. We receive payment status and the last 4 digits of the card; we never receive or store full card numbers.
Website data: cookies and analytics events (pages viewed, device type, approximate location by IP) — see section 6.
Support communications: emails and WhatsApp messages you send us.

2. Why we process it (legal bases)

To deliver the service you purchased — contract performance (Art. 6(1)(b) GDPR): order processing, eSIM issuance, delivery emails, support.
To meet legal obligations (Art. 6(1)(c)): accounting, tax, and consumer law records.
Legitimate interests (Art. 6(1)(f)): fraud prevention, service security, improving the website, and — for existing customers — occasional service emails about their eSIMs. You can object at any time.
Consent (Art. 6(1)(a)): non-essential cookies/analytics and marketing emails, where requested. Consent can be withdrawn at any time.

Stripe — payment processing.
eSIM network partners (wholesale eSIM providers) — to issue and operate your eSIM; they process the technical identifiers needed to provide connectivity.
Email delivery provider (e.g. Resend) and Microsoft 365 — to send and receive service emails.
Hosting and infrastructure (EU-based servers, Hetzner, Germany/Finland).
Analytics (e.g. Google Analytics), where you consent. We do not sell personal data. Some partners (e.g. Stripe, Google) may process data outside the EEA under appropriate safeguards (EU Standard Contractual Clauses or adequacy decisions).

4. Retention

Order and eSIM records: while your account/orders are active and thereafter as required for accounting and legal claims (up to 6 years under Cyprus law). Support correspondence: up to 2 years. Analytics: up to 14 months.

5. Your rights

You have the right to access, rectify, erase, restrict, or port your data, to object to processing based on legitimate interests, and to withdraw consent. Write to hello@getstayon.com; we respond within one month. You may also lodge a complaint with your local supervisory authority or the Cyprus Commissioner for Personal Data Protection (dataprotection.gov.cy).

6. Cookies

Essential cookies keep the site and checkout working and require no consent. Analytics cookies are set only after your consent via the cookie banner and can be declined without affecting the service.

7. Children

Our services are not directed at children under 16, and we do not knowingly process their data.

8. Changes

We will post any changes on this page with an updated date.