Last updated: 15 September 2026
This Privacy Policy describes how Genesis Group AG, a company incorporated under the laws of Switzerland with registration No. CHE-135.623.633 and registered address at Bahnhofstrasse 4, 6340 Baar, Switzerland ("Yesim", "we", "us" or "our"), collects, uses, discloses and retains data in connection with the Yesim eSIM Shopify App (the "App").
This Privacy Policy applies to information relating to Shopify merchants that install the App (each, a "Merchant") and their customers whose orders are processed through the App.
The App collects and stores the following Merchant and Shopify store data:
When a customer purchases an eSIM data plan through a Merchant's Shopify store, the App stores the following information for that order:
We receive the data described above from Shopify and the Merchant when the Merchant installs and uses the App and when customers place orders through the Merchant's Shopify store. The App does not collect or store the customer's name, postal address or phone number and does not request access to those fields.
The App does not collect information directly from customers through cookies or other tracking technologies and does not track customers' browsing activity on the Merchant's Shopify store.
We use the data described above to:
The customer's email address is required to deliver the activation QR code and to create or reuse the customer's account in Yesim's systems so that repeat purchases are linked to the same account. Because the Yesim Partner API does not provide a method for looking up an existing account by email address, the App stores the mapping between the email address and the relevant Yesim account identifier. The email hash is used solely to perform this lookup without decrypting the stored email address.
The Merchant is the controller of its customers' personal data and determines which customer orders are processed through the App.
Yesim processes customer personal data on behalf of the Merchant and only as necessary to provide the App, process eSIM orders and deliver activation information. Such processing is governed by the Data Processing Agreement incorporated into the Yesim B2B Terms of Service accepted by the Merchant.
The Merchant is responsible for providing its customers with all information required under applicable data protection law and for ensuring that it has a valid legal basis for the processing of customer personal data through the App.
The App communicates with the Yesim Partner API at https://documenter.getpostman.com/view/19324374/2sA3kbgy28#intro in order to create or reuse the relevant customer account and fulfil eSIM orders. The customer's email address is transmitted to Yesim's systems for this purpose. The customer's name, postal address and phone number are not transmitted through the App.
We may also use service providers that support the hosting, storage, security, maintenance and operation of the App and the delivery of activation information. Such service providers may process information only as necessary to provide their services to us and subject to appropriate contractual safeguards.
Where information is transferred to a country that does not provide an equivalent level of data protection, we use appropriate safeguards as required by applicable data protection law.
We do not sell Merchant or customer personal data or use it for advertising or marketing purposes.
Merchant and store data are retained while the App is installed. Within 48 hours after the App is uninstalled, we permanently delete from our active systems all data associated with the Merchant's store, including store data, App settings and API tokens.
Residual copies of such data may remain in our database backups for up to 7 additional days. These backup copies are not used for any other purpose and are automatically deleted at the end of the backup retention period.
While the App remains installed, the App retains the customer's email address, email hash, Yesim account identifier and eSIM activation data for 24 months after the customer's most recent order.
If the App is uninstalled before the end of this period, the customer's email address, email hash, Yesim account identifier, QR code, management link and other customer-related information associated with the Merchant's store are permanently deleted from our active systems within 48 hours after uninstallation. We follow the same deletion process if Shopify sends us a valid request to delete the customer's data.
Residual copies of customer-related information may remain in our database backups for up to 7 additional days. These backup copies are not used for any other purpose and are automatically deleted at the end of the backup retention period.
We may retain the ICCID, plan identifier and internal payment reference solely for financial reconciliation purposes with the Merchant. Once the customer-related information listed above has been deleted, these remaining data cannot be linked to or used to identify the customer and therefore do not constitute personal data.
We use reasonable technical and organizational measures designed to protect information processed through the App against unauthorized access, loss, misuse, alteration or disclosure.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Merchants and customers may request access to, correction or deletion of personal data processed through the App, request restriction of its processing where applicable, and request a copy of such data in a structured, commonly used and machine-readable format.
Customers should submit their requests to the Merchant from whose Shopify store they purchased the eSIM data plan. If we receive a request directly from a customer, we may refer it to the relevant Merchant and assist the Merchant in responding to the request in accordance with applicable law and the Data Processing Agreement.
We may update this Privacy Policy to reflect changes to the App, our data practices, Shopify requirements or applicable law. The date shown at the top of this Privacy Policy indicates when it was last updated.
For privacy inquiries or requests, contact: info@yesim.biz