Privacy Policy

1. Information we collect

• Account details: username, email address and a securely hashed password.
• Order details: device identifiers such as IMEI or serial numbers that you submit for a service, the service ordered, and the result.
• Wallet and transactions: top-up amounts, payment references and wallet history. We do not store full card numbers.
• Usage and device data: IP address, browser or app version, pages visited and basic log information used for security and reliability.
• Communications: messages you send to support.

2. How we use information

• to create and manage your account and authenticate you;
• to process orders, rentals, top-ups and downloads;
• to send transactional messages, such as order status and security alerts;
• to prevent fraud, abuse and unauthorised access, and to keep the Service secure;
• to meet legal, tax and accounting obligations;
• to improve and support the Service.

3. Legal bases and consent

We process information to perform our contract with you, to pursue our legitimate interests in running a secure service, to comply with legal obligations, and where you have given consent. You can withdraw consent at any time, without affecting processing that happened before.

4. Sharing

We share information only where needed:

• Service providers that process orders, payments, hosting and messaging on our behalf, under contractual confidentiality duties;
• Payment providers to complete top-ups and payments;
• Authorities where required by law or to protect rights, safety and security;
• Business transfers, if the business is reorganised or sold, subject to this Policy.

We do not sell your personal information.

5. Retention

We keep account information for as long as your account is active. Order, transaction and wallet records are kept for as long as needed to meet accounting, tax and dispute obligations. We delete or anonymise information when it is no longer required.

6. Security

We use reasonable technical and organisational measures to protect your information, including encrypted connections, hashed passwords and access controls. No system is completely secure, so please keep your password private and tell us promptly if you suspect a problem.

7. Your rights

Depending on where you live, you may have the right to access, correct, update or delete your personal information, to object to or restrict certain processing, and to receive a copy of your data. To exercise these rights, contact us through your account's support channels. We may need to verify your identity before responding.

8. Cookies and local storage

We use cookies and local storage to keep you signed in, remember preferences such as theme and currency, and protect forms against misuse. Essential cookies are required for the Service to work.

9. Children

The Service is not intended for anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided information to us, contact us and we will delete it.

10. International transfers

Your information may be processed in countries other than the one where you live. Where this happens, we take steps to make sure your information remains protected in line with this Policy.

11. Changes to this Policy

We may update this Policy. We will change the "Last updated" date above and, for material changes, notify you through the Service.

12. Contact

For privacy questions or requests, use the support channels available in your GSMToolMint account.