Legal
Privacy Policy
Last updated: June 2025 · Effective: June 2025
This Privacy Policy explains how Nomadoverse (a trading name of THE MIND GAUGE LTD, registered in England & Wales) collects, uses, and protects your personal data. By using our website or purchasing our products, you agree to this policy.
Who We Are
Legal Entity
THE MIND GAUGE LTD
Trading Name
Nomadoverse
Registration
England & Wales
Website
nomadoverse.com
Data Controller
THE MIND GAUGE LTD
Contact Email
We operate nomadoverse.com and sell digital eSIM products to customers worldwide. As the data controller, we determine how and why your personal data is processed.
Data We Collect
Identity data
Full name
Contact data
Email address
Transaction data
Purchase history, eSIM order details
Communication data
Support messages, feedback
Technical data
IP address, browser type and version, operating system, device type
Usage data
Pages visited, time on site, referral source, click patterns
Cookie data
Session cookies, preference cookies (see Cookie Policy)
Payment Information
We do not store your payment card details. All payment processing is handled by Stripe, Inc. (PCI-DSS Level 1 certified). We receive only a transaction ID and anonymised payment confirmation. Stripe's privacy policy governs their data practices at stripe.com/privacy.
Information We Do NOT Collect
- Government-issued ID numbers (unless required for dispute resolution)
- Biometric data
- Sensitive personal data (health, religion, political views, etc.)
- Social security or national insurance numbers
How We Use Your Data
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Processing and fulfilling your eSIM order | Name, email, transaction data | Contract performance |
| Sending order confirmation and eSIM delivery | Email address | Contract performance |
| Customer support and dispute resolution | Name, email, order data | Legitimate interests |
| Fraud prevention and security | IP address, device data | Legitimate interests |
| Legal and regulatory compliance | Transaction records | Legal obligation |
| Service improvement and analytics | Usage data (anonymised) | Legitimate interests |
| Marketing emails (if opted in) | Email address, name | Consent |
We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.
Legal Basis for Processing (GDPR/UK GDPR)
If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data under the following lawful bases under Article 6 of the GDPR:
Contract (Art. 6(1)(b))
Processing necessary to deliver your eSIM purchase and manage your account.
Legal Obligation (Art. 6(1)(c))
Processing required to comply with UK company law, tax regulations, and financial regulations.
Legitimate Interests (Art. 6(1)(f))
Fraud prevention, security monitoring, and improving our services — where our interests do not override your rights.
Consent (Art. 6(1)(a))
Marketing communications, non-essential cookies. You may withdraw consent at any time.
Data Sharing & Third Parties
We do not sell your personal data. We share data only with the following trusted service providers under strict data processing agreements:
| Service Provider | Purpose | Location | Safeguards |
|---|---|---|---|
| Stripe, Inc. | Payment processing | USA / Global | SCCs, PCI-DSS L1 |
| eSIM Provider(s) | eSIM profile delivery | Global | DPA in place |
| Email Service Provider | Transactional email | EU/USA | SCCs or adequacy |
| Analytics (if used) | Anonymous usage analytics | EEA | GDPR compliant |
| Web hosting provider | Website infrastructure | EEA/USA | SCCs |
We may also disclose your data where required by law, court order, or to protect our legal rights.
Data Retention
| Data Type | Retention Period | Reason |
|---|---|---|
| Order & transaction records | 7 years | UK tax/legal obligation |
| Customer account data | Duration of account + 2 years | Legitimate interests |
| Support communications | 3 years | Dispute resolution |
| Marketing consent records | Until withdrawn + 3 years | Legal compliance |
| Website analytics data | 26 months | Service improvement |
| Fraud prevention logs | 5 years | Legal obligation |
After these periods, data is securely deleted or anonymised.
Your Rights (EEA & Global)
Under the GDPR and equivalent laws, you have the following rights:
Right of Access
Request a copy of all personal data we hold about you
Right to Rectification
Correct inaccurate or incomplete personal data
Right to Erasure
Request deletion of your data ("right to be forgotten")
Right to Object
Object to processing based on legitimate interests
Right to Restriction
Restrict how we process your data in certain circumstances
Data Portability
Receive your data in a structured, machine-readable format
Withdraw Consent
Withdraw consent for marketing at any time
Lodge a Complaint
Complain to your local data protection authority
To exercise any right, email us at [email protected]. We will respond within 30 days. EU residents may also contact the supervisory authority in their member state. UK residents may contact the ICO (ico.org.uk).
California Residents — CCPA/CPRA Rights
If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) grant you additional rights:
Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected, the sources, the business purpose, and third parties we share it with.
Right to Delete: Request deletion of personal information we hold about you, subject to certain exceptions.
Right to Correct: Request correction of inaccurate personal information.
Right to Opt-Out of Sale/Sharing: We do not sell or share your personal information as defined under CCPA.
Right to Limit Use of Sensitive Personal Information: We do not collect sensitive personal information beyond what is necessary.
Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.
To submit a California privacy request, email [email protected] with subject line "CCPA Request". We will verify your identity and respond within 45 days.
Categories of Personal Information Collected (Last 12 months)
| Category | Collected | Sold |
|---|---|---|
| Identifiers (name, email, IP) | ✓ Yes | ✗ No |
| Commercial information (purchase history) | ✓ Yes | ✗ No |
| Internet/network activity (usage data) | ✓ Yes | ✗ No |
| Geolocation data | ✗ No | ✗ No |
| Sensitive personal information | ✗ No | ✗ No |
UK Residents — UK GDPR
THE MIND GAUGE LTD is incorporated in England and Wales and is subject to the UK GDPR and Data Protection Act 2018. The UK Information Commissioner's Office (ICO) is our supervisory authority.
Your rights under UK GDPR mirror those under EU GDPR (see Section 7). To lodge a complaint with the ICO: ico.org.uk/make-a-complaint or call 0303 123 1113.
International Data Transfers
As a global business, your data may be transferred to and processed in countries outside the UK and EEA. When we transfer personal data internationally, we ensure adequate protection through:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- UK International Data Transfer Agreements (IDTAs)
- Adequacy decisions where the receiving country has been deemed to provide adequate protection
- Binding Corporate Rules where applicable
You may request details of specific transfer safeguards by contacting [email protected].
Children's Privacy
Our services are not directed at children under the age of 16 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately and we will delete it promptly.
Security
We implement appropriate technical and organisational security measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These include:
- SSL/TLS encryption for all data in transit
- Encrypted storage for data at rest
- Access controls limiting data access to authorised personnel only
- Regular security reviews and updates
Despite these measures, no internet transmission is completely secure. If you believe your data has been compromised, please contact us immediately at [email protected].
Contact Us
For any privacy-related questions, requests, or concerns:
Privacy Email
General Email
Legal Entity
THE MIND GAUGE LTD
Registration
England & Wales
We aim to respond to all privacy requests within 30 days. For complex requests, we may extend this to 60 days and will notify you accordingly.
Policy Updates
We may update this Privacy Policy from time to time. We will notify you of material changes by email or prominent notice on our website. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of our services after changes become effective constitutes acceptance of the revised policy.
Nomadoverse is a trading name of THE MIND GAUGE LTD, registered in England & Wales.
Registered Office: Office 8321, 182-184 High Street North, East Ham, London E6 2JA, United Kingdom