Privacy Policy

1. Who we are

eSIM Sherpa ("eSIM Sherpa", "we", "our" or "us") is an independent eSIM comparison site operated by Javier Cristóbal Gutiérrez as a self-employed professional (autónomo) based in Spain. We are the data controller responsible for the personal data collected through this website, esimsherpa.com.

For any privacy-related enquiry you can reach us at [email protected].

2. What data we collect

This site has no user accounts, no newsletter and no contact form, so we collect very little. What we do collect is:

• Usage data: information about how you interact with the site (approximate location, device and browser type, pages visited, time on page), collected only if you accept analytics cookies.
• Outbound click data: when you click through to a provider, we record which provider, plan, destination and price was clicked. This is collected through analytics and is subject to the same consent.
• Consent preferences: your cookie choices are stored locally in your browser so we can remember them.

We do not ask for your name, email address, phone number or payment details anywhere on this site. When you buy an eSIM you do so on the provider's own website, under their privacy policy, not ours.

3. How we use your data

We process your personal data to:

• understand how the website is used and improve our comparisons (analytics, subject to consent);
• measure which providers and destination pages people find useful, so we can prioritise what to keep updated;
• keep the website secure and working;
• comply with our legal obligations.

We do not use your data to build advertising profiles, and we do not run ad-targeting or social-media tracking pixels on this site.

4. Legal basis for processing

Under the EU General Data Protection Regulation (GDPR) and Spanish Law 34/2002 (LSSI-CE), we rely on the following legal bases:

• Consent: for analytics cookies and the outbound click measurement described above.
• Legitimate interest: to keep the website secure and functioning.
• Legal obligation: where the law requires us to retain or disclose data.

5. Cookies and analytics

We use essential storage required for the site to work, and (only with your consent) Google Analytics 4 to understand traffic. Analytics runs under Google Consent Mode with storage denied by default, so no analytics cookies are set before you accept. You can accept, reject or change your choices at any time via the cookie icon in the bottom-left corner. See our Cookie Policy for the full detail.

6. Affiliate links and outbound clicks

Links to providers pass through /go/ on this site before forwarding you to the provider. We use this to count clicks and, where an affiliate program exists, to attribute the referral. Once you land on the provider's site, that provider may set its own cookies and will process your data under its own privacy policy, which we do not control.

We do not sell click data, and it plays no part in how we rank providers. See our methodology and disclosure for how rankings are actually decided.

7. Third parties and international transfers

We do not sell your personal data. We share it only with providers that help us operate the website, under appropriate data-protection terms. These include:

• Cloudflare: website hosting and content delivery (Cloudflare Pages).
• Google (Analytics 4): website analytics, only with your consent.
• eSIM providers and their affiliate networks: when you click an outbound link and leave this site.

Some of these providers may process data outside the European Economic Area. Where that happens, transfers are protected by mechanisms recognised under the GDPR, such as Standard Contractual Clauses.

8. Data retention

Analytics data is retained according to the retention settings configured in Google Analytics. Your consent preferences stay in your browser until you clear them or change your choice. Because we collect no contact details, there is nothing else for us to keep.

9. Your rights

You have the right to access, rectify, erase, restrict or object to the processing of your personal data, and the right to data portability and to withdraw consent at any time. Withdrawing analytics consent is immediate through the cookie icon. To exercise any other right, contact us at [email protected]. You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, aepd.es).

10. Children

This site is aimed at travellers arranging their own connectivity and is not directed at children. We do not knowingly collect personal data from children.

11. Security

We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or misuse. The site is served over HTTPS and is statically generated, which keeps the attack surface small. No method of transmission over the internet is fully secure, however, and we cannot guarantee absolute security.

12. Changes to this policy

We may update this Privacy Policy from time to time. The "last updated" date at the top reflects the latest revision. Material changes will be highlighted on this page.

13. Contact

For any question about this policy or your personal data, email [email protected].