1. Data controller
The controller is EDBER NICEVIĆ PR RAČUNARSKO PROGRAMIRANJE ZONE NETWORK CO NOVI PAZAR, Deda Šehovića 12a, 36300 Novi Pazar, Serbia, company number 68583314, tax ID 115722257 (“Zone Network”, “ZoneSIM”, “we” or “us”).
2. Data we process
- account and profile data such as name, email, phone, city, selected language and account status;
- orders, purchased packages, vouchers, amount, currency and transaction status;
- eSIM technical data needed for delivery and support, including ICCID, activation status, usage, network and provider data;
- support messages, contact details and attachments you submit;
- app and device data such as platform, app version and diagnostic records;
- data required for fiscal receipts and payment confirmation. ZoneSIM does not store full card numbers or card security codes.
3. Purposes and legal bases
We process data to create and protect accounts, perform purchases and deliver eSIM services, process payment and fiscal receipts, provide support, prevent abuse, comply with legal duties and improve service reliability. Processing is based on contract performance, legal obligation, legitimate interests or consent where required.
4. Recipients and processors
Only where necessary, data may be shared with infrastructure and database providers, the eSIM provider, bank and payment processor, fiscalisation provider, email/support providers, and authorities when required by law. In the current architecture this may include Supabase, Transatel, Halkbank/Payten NestPay and Fiscomm.
5. International transfers
Some providers may process data outside Serbia. Where applicable, we use contractual and technical safeguards required by law and limit transfers to data necessary for the service.
6. Retention
Account and operational eSIM data is retained while the account is active and as needed to provide the service. Support messages are retained as needed to resolve requests and protect legitimate interests. Fiscal, accounting, payment and other legally required records are retained for statutory periods, with direct account linkage removed where possible after account deletion.
7. Your rights
You may request access, correction, deletion or restriction, object to processing, withdraw consent, and request portability where legal conditions apply. Email privacy@zonesim.co. We may verify your identity before acting.
8. Account deletion
You can permanently delete your account in the app: My profile → Delete account. Alternative steps and the data deleted or retained are described on the Account deletion page.
9. Security and children
We use access controls, encryption in transit, limited service privileges and logging of critical operations. No measure is absolute, but risks are assessed regularly. The service is not intended for children under 15 without consent from a legal guardian.
10. Changes and contact
Material changes will be posted here with a new effective date. For privacy matters email privacy@zonesim.co; for general support email support@zonesim.co.