Privacy

Last updated: 30 September 2026

This page explains what we collect, why we need it, and your choices.
We have kept it short and plain. If anything is unclear, just ask us.

Who We Are

Nesslock is a trading name of Duneiden Limited.
Duneiden Limited is responsible for how your information is used.
We are registered in Scotland, company number SC872244.
Our registered office is 5 South Charlotte Street, Edinburgh, EH2 4AN.

How to Contact Us

Email info@nesslock.com. That counts as a privacy request.

What We Collect

When you pay, Stripe's secure page asks for your email address, your mobile number and your card details.
We record your order: the plan, the country, the price and the date.
We keep your eSIM details so we can deliver it and help you later.
While your plan is active, we can see how much data you have used.
If you contact us, we keep your message and anything you send with it.
Our website records which pages and steps were used, and whether each one worked.
Our own records do not include your IP address or which browser you use.
Where a record belongs to an order, we link it with a coded version of your email.

Card Payments

Payments are handled by Stripe, a regulated payment company.
We never see or store your full card number or security code.
Stripe may check a payment for fraud before it goes through.
If a payment is declined and you think that is wrong, contact us.

Why We Use It

We use your information to take your order and deliver your eSIM.
We use it to send your receipt and help with setup, top-ups and refunds.
We need all of this to carry out your purchase.
We keep sales and tax records because the law requires us to.
We use technical records to keep our website safe and stop fraud.
That is in our legitimate interest in running a secure service.
We use your data usage to suggest the plan that suits you best.
That is also a legitimate interest, and you can switch it off.
We send you news and reminders unless you have opted out.

Buying for Someone Else

Every eSIM in your order is sent to your own email address.
If it is for someone else, you pass it on to them.
You can add a short note, such as "Dad", to tell eSIMs apart.
We do not keep that note.

Keeping in Touch

When you buy, email and text updates are switched on to start.
We only send updates about Nesslock travel eSIMs, top-ups and similar services.
You can switch them off at checkout, or at any time later by emailing info@nesslock.com.
Every message has a simple way to stop receiving them.
This includes reminders when your data is running low, with a top-up link.
Your receipt and delivery emails always arrive, because you need them.

Your Data Usage

We look at how much data you use to recommend the right plan.
We never look at the websites, apps, calls or messages you use.
The box for this is ticked at checkout. You can untick it there.
You can also ask us to stop at any time.

Who We Share It With

We share only what each company needs to do its job.
Stripe takes your payment.
Our eSIM network partner creates and runs your eSIM.
They receive only the plan code and our order reference, never your name, email or phone number.
Cloudflare runs our website.
Resend sends our emails.
Our text message provider sends our texts.
Our accountants see our records, and authorities do when the law requires it.
We never sell your information.

Outside the UK

Some of these companies handle information outside the UK.
When they do, we use the protections UK law requires.
Ask us, and we will tell you which protection applies.

How Long We Keep It

We keep order, payment and refund records for six years, as the law requires.
That six years counts from the end of the financial year of your order.
We keep your marketing choice until you opt out.
After that, we keep a short note so we never contact you again.
We keep support messages for six years.
We keep website records for six years.

Your Rights

You can ask for a copy of the information we hold about you.
You can ask us to correct it, delete it, or stop using it.
You can object to marketing at any time, and we will stop.
You can ask for a copy of your information to take elsewhere.
We may ask you to confirm who you are before we act.
We normally reply within one month.
Some records must be kept by law, even if you ask us to delete them.

Complaints

If you are unhappy, please email us first at info@nesslock.com.
We will confirm we have received your complaint within 30 days.
You can also complain to the Information Commissioner's Office at ico.org.uk.

Cookies and Fonts

Our own website does not set cookies.
It keeps your basket and a short note of your visit in your browser, so your basket is still there if you come back.
Cloudflare, which runs our website, may set a security cookie that helps block attacks.
Stripe sets its own cookies on its payment page, to take payment safely.
We do not use advertising or tracking cookies.
Our fonts are stored on our own site, so no font company sees your visit.
If we ever add optional cookies, we will ask you before using them.

Keeping It Safe

We protect your information with restricted access and secure connections.
Please keep your eSIM QR code private, just as you would a key.
If you think someone else has seen it, contact us straight away.

Changes to This Page

If we change how we use your information, we will update this page.
The date at the top always shows the latest version.