MyFlySim (a trademark operated by DIRLAND) respects your privacy and is committed to protecting your personal data, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés).
Data controller
The controller of your personal data is DIRLAND (SAS), whose registered office is located at 91 rue du Faubourg Saint-Honoré, 75008 Paris, France.
Data we collect
We collect the following data:
- Identity: last name, first name, email address, phone number.
- Billing address: for invoicing and order processing.
- Technical data: ICCID, MSISDN, IMEI when the eSIM is activated, in accordance with our obligations as an operator.
- Usage data: volume of data used, country of connection (without any browsing content).
- Payment data: processed via Stripe (PCI-DSS); we do not store your card number.
- Connection data: IP address, user agent, timestamps - for security purposes.
Purposes of processing
- Providing and invoicing the eSIM service you ordered.
- Providing customer support (after-sales service, refunds).
- Complying with the legal obligations attached to our status as a telecom operator (identification, retention of connection logs).
- Improving our services and our website (anonymised statistics).
- With your explicit consent: sending commercial offers.
Retention periods
- Account data: for the duration of the contractual relationship + 3 years for commercial purposes.
- Billing data: 10 years (statutory accounting obligation).
- Telecom connection data: 1 year (obligation under Article L34-1 of the French Postal and Electronic Communications Code).
- Analytics cookies: 13 months maximum.
Recipients of your data
Your data is only shared with:
- Transatel / NTT, our technical operator partner, for the provision of connectivity (ICCID, MSISDN, IMEI).
- Stripe, our payment provider (we do not store any card details on our side).
- Microsoft 365 (Office 365), our SMTP server for transactional emails (order confirmations, invoices, password resets).
- Competent authorities, upon lawful request only.
No data is ever sold to third parties for commercial purposes.
Your rights
In accordance with the GDPR, you have the following rights at any time:
- Right of access: obtain a copy of the data we hold about you.
- Right to rectification: correct inaccurate data.
- Right to erasure ("right to be forgotten"): have your data deleted, subject to legal obligations.
- Right to object: refuse processing for commercial purposes.
- Right to data portability: retrieve your data in a structured format.
- Right to withdraw your consent at any time.
To exercise these rights: send an email to contact@myflysim.com with proof of identity. You may also lodge a complaint with the CNIL (the French data protection authority).
Cookies
Our website uses cookies for:
- Operation (cart, session, language) - strictly necessary, no consent required.
- Audience measurement (anonymised Google Analytics) - subject to your consent.
- Marketing / advertising (Google Ads) - subject to your consent.
You can manage your preferences at any time via the cookie banner.
Security
We implement appropriate technical and organisational measures to protect your data: systematic HTTPS encryption, password hashing (bcrypt), access restricted to what is strictly necessary, regular security audits.
DPO contact
For any question regarding your personal data, contact our Data Protection Officer:
contact@myflysim.com
Last updated: June 2026.