Privacy Policy
Last updated: May 2026 · Applies to all Timbill users and services.
Introduction
Timbill is dedicated to providing the safest and most reliable digital marketplace services, including travel eSIMs and digital subscriptions, while fully respecting and protecting your privacy. We recognize that the rise of the internet and digital platforms brings important questions about the nature, use, and confidentiality of personal information. We apply our long-standing commitment to privacy protection to all our online operations and services.
By providing us with your personal information, you agree to this Privacy Policy and to the collection, use, access, transfer, storage, and processing of your personal data as described herein.
We regularly review our Privacy Policy and may amend it when necessary. In the event of major changes, we will notify you via the contact information you have provided. Unless you object, your continued use of Timbill's website or related services will constitute acceptance of the updated Privacy Policy.
Use of Personal Data
You may use Timbill's public web pages without submitting personal data. However, to use certain corporate or specialized services, we may need to process your personal data. If processing is required and no legal basis exists, we will obtain your consent in advance.
Timbill takes all practical and appropriate measures to safeguard your personal data from unauthorized or accidental access, deletion, or misuse. Security measures include physical, technical, and procedural safeguards to ensure that your data is only accessed by authorized personnel.
Legal Compliance
All processing of personal data complies with applicable data protection laws, including: the General Data Protection Regulation (GDPR) for users in the European Union, PIPEDA in Canada, the California Consumer Privacy Act (CCPA) for California residents, the Personal Data Protection Law in Saudi Arabia, the UAE Federal Data Protection Law, and similar regional legislation.
This policy explains the nature, scope, and purpose of our data processing activities, and informs you of your rights as a data subject.
1. Definitions
Key terms used in this Privacy Policy follow the definitions set out in the GDPR:
- Personal Data: Any information about an identified or identifiable natural person.
- Data Subject: The individual whose personal data is processed by Timbill.
- Processing: Any operation performed on personal data, such as collection, storage, alteration, use, transmission, or deletion.
- Restriction of Processing: Marking stored personal data to limit future processing.
- Profiling: Automated processing of personal data to analyze or predict behavior, preferences, or performance.
- Pseudonymization: Processing whereby data can no longer be attributed to a specific individual without additional information stored separately.
2. Cookies
Timbill uses cookies to enhance user experience, analyze website traffic, and remember preferences. When logging in, cookies save your session data and screen display preferences.
Cookies are used to:
- Anonymously analyze site traffic and user behavior to improve Timbill's structure and content.
- Remember your preferences between sessions, such as language or currency settings.
We use both session and persistent cookies. Session cookies expire when you close your browser, while persistent cookies remain until deleted or expired.
You can manage or delete cookies through your browser settings:
- Internet Explorer: Tools → Internet Options → Privacy
- Firefox: Tools → Options → Privacy
- Chrome: Settings → Privacy and Security → Cookies
3. Storage, Sharing, and User Rights
eSIM-Specific Data
When you purchase an eSIM, we may share necessary information with our eSIM provider partners (such as eSIM Access and Zetexa) to fulfill your order. This includes:
- Your email address (for QR code delivery)
- Your destination country
- For eKYC-required destinations: identity documents (processed by the local carrier per their privacy policy and applicable regulations)
We do NOT share your data with eSIM partners for marketing purposes.
Data Sharing
Timbill does not sell user data. We share personal data only where necessary to deliver services and only with authorized partners who comply with data protection regulations. Typical data recipients include:
- Payment processors (for transactions and fraud prevention)
- Technology and hosting providers
- Third-party login services (with your consent)
- Business partners and recharge or subscription service providers
- Regulatory or law enforcement authorities when legally required
- Corporate transaction partners in the event of mergers or acquisitions
Data Retention
Personal data is retained only as long as necessary to fulfill its purpose or comply with legal obligations:
- Account information: retained while your account is active, then deleted or anonymized after closure.
- Payment and transactional data: retained for legally required accounting and tax periods.
- Customer service and dispute data: retained as needed for operational or legal reasons.
- Security logs: retained for a reasonable period to maintain integrity and prevent misuse.
User Rights
Under the GDPR, users have the right to:
- (a) Access their data (obtain a copy)
- (b) Request correction of inaccurate data
- (c) Request erasure ("Right to be Forgotten")
- (d) Restrict processing under certain circumstances
- (e) Request data portability in a structured, machine‑readable format
- (f) Object to certain processing, including direct marketing
- (g) Withdraw consent at any time (without affecting prior processing)
Exercising Your Rights
Email: [email protected]
WhatsApp: +1 (202) 695-4446
Subject line: "Data Subject Rights Request"
Include your name, contact details, and a brief description of your request.
We respond within 30 days. Extensions (up to two additional months) may apply for complex requests, with prior notice.
4. Third‑Party Login and Authorization
If you log in via third‑party authentication services (such as Google or Facebook), we may receive certain information (e.g., name and email address) from those services as authorized by you.
We may also ask if you would like to receive promotional offers via WhatsApp. Messages are only sent if you voluntarily provide your WhatsApp number and explicit consent. You may withdraw consent at any time via customer support or by replying "unsubscribe."
5. General Terms
In case of any inconsistency between translations of this Privacy Policy, the English version shall prevail.
6. Processing of Recharge Information
When using Timbill's recharge services, we collect the account identifiers and related transaction details necessary to process orders and provide after‑sales support. This data is used exclusively to carry out these transactions in accordance with this Privacy Policy and is never used for unrelated purposes.