Privacy Policy
byOne Privacy Policy
Effective Date: October 26, 2026
Last Updated: October 26, 2026
At byOne, we recognize the importance of protecting your privacy and personal information.
This Privacy Policy explains how byOne ("byOne," "we," "us," or "our") collects, uses, processes, discloses, stores, and protects your personal information when you access or use our products and services.
It also outlines your rights regarding your personal information and explains how you can contact us with questions or privacy-related requests.
By registering an account, purchasing an eSIM, or accessing our website, mobile applications, products, software, or related services (collectively, the "Services"), you acknowledge that you have been informed of the data processing practices described in this Privacy Policy.
Please read this Privacy Policy carefully.
1. Scope of This Privacy Policy
This Privacy Policy applies to all users of byOne Services worldwide, including individuals who access or interact with:
The byOne website at www.byone.travel.
byOne mobile applications on iOS and Android.
eSIM purchasing, installation, activation, and management services.
Customer support and communication channels.
Partner platforms and other authorized distribution channels.
Other services, features, and products operated by byOne.
This Privacy Policy applies to both registered users and customers purchasing through guest checkout, where available.
Where a specific service is governed by an additional or separate privacy notice, that notice may apply alongside this Privacy Policy.
Data Controller and Data Processor
A Data Controller determines the purposes and means of processing personal information, while a Data Processor processes personal information on behalf of a Data Controller.
The legal entity operating byOne acts as a Data Controller when it determines how and why personal information is processed for its Services.
When interacting with authorized eSIM connectivity providers, payment gateways, technology partners, and other third parties, the respective parties may act as independent Data Controllers or Data Processors, depending on their responsibilities and applicable agreements.
Our primary data processing activities include delivering eSIM services, managing customer accounts and transactions, preventing fraud, ensuring legal compliance, and improving the customer experience.
2. How We Collect Personal Information
We collect information in several ways depending on how you interact with our Services.
A. Information You Provide Directly
We may collect information when you:
Register or update a byOne account.
Purchase an eSIM or complete a transaction.
Subscribe to marketing communications.
Contact our customer support team.
Submit feedback, inquiries, complaints, or refund requests.
Participate in surveys or promotional activities.
B. Information Collected Automatically
When you visit our website or use our mobile applications, we may automatically collect information through cookies, application logs, server logs, and similar technologies, where permitted by applicable law.
This information may include your IP address, device details, application usage, browser information, and interaction with our Services.
C. Information From Third Parties
We may receive relevant information from authorized third parties, including:
eSIM and network service providers.
Payment processing partners.
Technology and infrastructure providers.
Authentication providers.
Customer support platforms.
Authorized distribution and business partners.
Publicly available sources, where legally permitted.
Information received from third parties is processed in accordance with applicable laws and the purposes described in this Policy.
3. Personal Information We Collect
The personal information collected by byOne depends on the Services you use.
A. Account Registration
When you create an account, we may collect:
Full name.
Email address.
Phone number, where provided.
Country or region.
Account credentials and authentication information.
Preferred language and currency.
Account login and activity history.
This information allows us to manage your account, provide access to purchased services, maintain transaction records, and improve your experience.
B. Purchase and Payment Information
When you purchase an eSIM, we may process:
Customer and billing information.
Order number and transaction reference.
Purchased eSIM package and destination.
Payment method and transaction status.
Transaction amount and currency.
Payment confirmation and refund records.
Payments may be processed by authorized third-party payment providers.
Complete payment card information is generally handled by the relevant payment provider rather than stored directly by byOne, subject to the actual payment integration.
C. eSIM and Connectivity Information
To provide and manage eSIM services, we may process:
eSIM identification numbers, including ICCID.
Purchased data package details.
Installation and activation status.
Package validity and expiration dates.
Data usage and remaining balance.
Network and connectivity status.
Technical information relevant to activation or troubleshooting.
Certain information may be shared with our eSIM and network service providers to facilitate service delivery.
D. Device and Application Information
When accessing our Services, we may collect:
Device type and model.
Operating system and application version.
Browser type and settings.
IP address.
Device or application identifiers.
Approximate location derived from network information.
Technical diagnostics and error reports.
Website and application usage activity.
This information helps us maintain platform security, identify technical issues, and improve service performance.
For clarity, byOne does not monitor, inspect, or log the browsing history or content of communications transmitted through the cellular data connection provided by the eSIM.
E. Customer Support and Feedback
When you contact our Support Team, we may collect your name, email address, order details, communication history, screenshots, technical information, and any other information you voluntarily provide.
We use this information to respond to inquiries, troubleshoot issues, and improve support quality.
F. Surveys and Promotional Activities
If you participate in a survey, promotional campaign, or other voluntary activity, we may collect the information submitted as part of that activity.
Where a survey or campaign is operated by a third party, additional privacy terms may apply.
4. How We Use Your Personal Information
byOne processes personal information for legitimate and lawful business purposes, including:
Service Delivery
Creating and managing customer accounts.
Processing eSIM purchases and transactions.
Delivering and activating purchased eSIM packages.
Maintaining order and usage history.
Providing package management features.
Processing eligible refunds or service replacements.
Customer Support
Responding to questions and complaints.
Troubleshooting technical or connectivity issues.
Verifying customer identity and order details.
Providing information about purchased services.
Following up on unresolved support requests.
Service Improvement
Evaluating website and application performance.
Improving checkout and purchase processes.
Developing new products and features.
Understanding service usage and customer preferences.
Identifying and resolving technical errors.
Marketing and Communications
Sending important service announcements.
Communicating promotional offers and product updates.
Sharing relevant destination and travel connectivity information.
Conducting surveys and customer satisfaction assessments.
Marketing communications will be sent in accordance with applicable laws and your communication preferences.
Security and Fraud Prevention
Detecting unauthorized access or suspicious transactions.
Preventing fraudulent purchases and misuse.
Investigating potential violations of our Terms and Conditions.
Protecting our systems and customers.
Maintaining transaction and security records.
Legal and Regulatory Compliance
Complying with applicable financial and legal obligations.
Responding to legally valid requests from authorities.
Maintaining records required by law.
Establishing, exercising, or defending legal claims.
Personal information may be processed for more than one purpose where an appropriate legal basis applies.
5. Legal Basis for Processing Personal Information
Depending on applicable data protection laws, byOne processes personal information based on one or more of the following grounds.
Performance of a Contract
Processing information necessary to fulfill purchases, deliver eSIM services, manage accounts, and provide customer support.
Legitimate Interests
Processing information necessary for business operations, service improvements, security, fraud prevention, and internal administration, provided such interests are not overridden by applicable privacy rights.
Consent
Processing information for activities requiring your permission, such as certain marketing communications or non-essential tracking technologies.
Legal Obligations
Processing or retaining information to comply with applicable legal, financial, regulatory, and reporting requirements.
Where processing is based on consent, you may withdraw your consent at any time, subject to applicable legal requirements.
Withdrawal of consent does not affect processing lawfully conducted before withdrawal or processing supported by another valid legal basis.
6. How We Share Personal Information
byOne does not sell personal information to third parties for monetary compensation.
However, we may disclose relevant information where necessary to operate our Services, fulfill contractual obligations, or comply with applicable laws.
A. eSIM and Network Service Providers
We may share relevant purchase, activation, device, and service information with our authorized eSIM and connectivity providers to fulfill orders, activate services, and resolve technical issues.
B. Payment Service Providers
Relevant transaction information may be shared with payment gateways, banks, financial institutions, and other authorized payment processing partners.
Payment providers may process information under their own privacy policies and applicable financial regulations.
C. Technology and Service Partners
We may share information with providers that assist with:
Website and application hosting.
Cloud infrastructure and data storage.
Analytics and system performance.
Customer support and communication.
Account authentication and security.
Email and notification delivery.
Payment processing and order fulfillment.
D. Affiliates and Business Transactions
Where applicable, information may be shared with affiliated companies, subsidiaries, or entities under common control for legitimate business purposes.
In the event of a merger, acquisition, restructuring, or transfer of business assets, personal information may be disclosed or transferred subject to appropriate safeguards and applicable law.
E. Legal and Regulatory Authorities
We may disclose information in response to valid court orders, legal proceedings, regulatory requirements, or other lawful requests.
F. Disclosure With Your Consent
We may disclose information to other third parties where you have provided valid consent or specifically requested the disclosure.
We seek to ensure that third parties processing information on our behalf apply appropriate data protection and confidentiality measures.
7. Data Storage and Retention
We retain personal information only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by applicable law.
When determining retention periods, we consider:
The nature and sensitivity of the information.
The purpose for which the information was collected.
The duration of the customer relationship.
Applicable legal, accounting, and reporting obligations.
Transaction and dispute resolution requirements.
Fraud prevention and security considerations.
The potential risks associated with unauthorized access or disclosure.
Where personal information is no longer necessary, we will take appropriate steps to securely delete or anonymize it.
Certain records, including payment transaction details and information required for legal or regulatory purposes, may need to be retained even after an account has been deleted.
8. Your Privacy Rights
Depending on your location and applicable laws, you may have the following rights.
Right to Access
Request information about the personal data we collect, use, store, or disclose about you.
Right to Correction
Request corrections to personal information that is inaccurate or incomplete.
Right to Deletion
Request deletion of eligible personal information held by byOne.
Right to Withdraw Consent
Withdraw consent previously provided for processing activities based on your consent.
Right to Object or Restrict Processing
Object to or request restrictions on certain processing activities where permitted by law.
Right to Data Portability
Request a copy of eligible personal information in a structured, commonly used, and machine-readable format where applicable.
Right to Opt Out of Marketing
Unsubscribe from promotional communications at any time.
Right to Review Certain Automated Decisions
Where applicable law grants this right, request information about or review of qualifying decisions made solely through automated processing.
To exercise your privacy rights, please contact byOne Customer Support through our official website or mobile application.
We may request reasonable information to verify your identity before processing certain requests.
In some circumstances, requests may be limited or declined where required or permitted by applicable law.
We will not unlawfully discriminate against individuals for exercising their privacy rights.
9. Marketing Communications and Preferences
byOne may send marketing communications regarding eSIM packages, destinations, special offers, promotional campaigns, and other relevant services, subject to applicable law and your preferences.
You may stop receiving promotional communications by:
Selecting the unsubscribe option provided in promotional emails.
Updating your communication preferences through your account settings, where available.
Disabling promotional push notifications through your device settings.
Contacting byOne Customer Support.
After receiving a valid opt-out request, we will update your marketing preferences within a reasonable period.
Please note that you may continue receiving essential non-promotional communications, such as order confirmations, payment notifications, account security alerts, and important service updates.
10. Account Deletion and Personal Data Removal
You may request deletion of your byOne account and associated personal information.
Where an in-app account deletion feature is available, you may initiate deletion through your account settings.
Alternatively, you may contact byOne Customer Support through our official website or mobile application.
Account Deletion Process
Submit an account deletion request.
Complete any necessary identity verification.
Allow byOne to review outstanding transactions, active services, and applicable retention requirements.
Receive confirmation once the eligible deletion request has been processed.
We will handle verified deletion requests without undue delay and within the timelines required by applicable law.
Please note:
Account deletion may affect access to purchased eSIM packages and order history.
Deleted account information may not be recoverable.
Certain personal information may be retained to comply with legal, financial, fraud prevention, or dispute resolution obligations.
Information independently processed by authorized third-party service providers may be subject to their respective legal obligations and retention policies.
Where required, byOne will coordinate with relevant service providers regarding valid deletion requests.
11. International Data Transfers
byOne provides international eSIM services to customers across multiple countries and regions.
To support these Services, personal information may be transferred to, stored in, or processed in countries outside your country of residence.
These locations may have different data protection laws and privacy requirements.
When conducting international transfers, byOne will implement applicable legal safeguards and reasonable measures designed to protect personal information.
These may include:
Contractual data protection requirements.
Access controls and security measures.
Transfer mechanisms recognized under applicable law.
Appropriate obligations imposed on third-party processors.
Where required by law, additional information or consent will be provided or obtained before an international transfer takes place.
You may contact byOne for further information regarding international data processing and the safeguards applicable to your personal information.
12. Data Security
byOne takes appropriate technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure, misuse, destruction, or loss.
Depending on the relevant systems, these measures may include:
Secure data transmission.
Authentication and access controls.
Restricted access to customer information.
Monitoring and prevention of suspicious activities.
Security procedures for third-party integrations.
Internal confidentiality and data protection practices.
However, no internet transmission, mobile technology, or electronic storage system can guarantee absolute security.
Customers are responsible for maintaining the confidentiality of their account credentials.
If you suspect that your byOne account or personal information has been compromised, please contact our Support Team immediately.
13. Cookies, Analytics, and Tracking Technologies
Our website and mobile applications may use cookies, software development kits (SDKs), server logs, and similar technologies to support essential functions, analyze performance, and improve customer experience.
These technologies may help us:
Maintain account sessions.
Remember language and currency preferences.
Improve website and application functionality.
Understand visitor and customer activity.
Identify errors and performance issues.
Measure promotional campaign effectiveness.
Provide relevant content and recommendations.
Where required by applicable law, byOne will request consent before enabling non-essential tracking technologies.
You may manage certain preferences through your browser, device settings, or available privacy controls.
Some features may not function properly if essential technologies are disabled.
14. AI-Assisted Customer Support
byOne may use artificial intelligence and automated customer support technologies to assist with inquiries, order information, and troubleshooting.
When interacting with AI-assisted support, information you provide may be processed to:
Understand and respond to your inquiry.
Identify relevant order or service information.
Provide installation and activation guidance.
Assist with technical troubleshooting.
Improve support quality and operational efficiency.
Authorized personnel may review conversations where necessary for quality assurance, security, issue resolution, or escalation.
Relevant information may also be processed by authorized third-party technology providers subject to applicable data protection requirements.
Customers should avoid sharing passwords, complete payment card information, or other unnecessary sensitive information through customer support channels.
Where appropriate, inquiries may be transferred to a human support representative.
15. Third-Party Platforms and Services
Our Services may contain links to third-party websites, applications, payment platforms, or other independent services.
These third parties may collect and process information under their respective privacy policies.
byOne is not responsible for the independent privacy practices of third-party platforms that operate outside our control.
We encourage customers to review the applicable privacy policies before sharing personal information with these services.
16. Children's Privacy and Age Restrictions
byOne does not knowingly collect personal information from children in violation of applicable data protection laws.
Our Services are not intended for children under 13 years of age.
Where the processing of a minor's personal information requires parental or guardian consent, we will seek the required authorization in accordance with applicable law.
If we become aware that personal information has been collected from a child without the required authorization, we will take appropriate steps to delete or otherwise lawfully process the information.
Parents or guardians may contact our Support Team regarding privacy concerns involving minors.
17. Compliance With Data Protection Laws
byOne is committed to handling personal information in accordance with applicable privacy and data protection laws.
Depending on the jurisdiction and circumstances, these may include:
Indonesia's Personal Data Protection Law (Law No. 27 of 2022).
The European Union's General Data Protection Regulation (GDPR), where applicable.
The United Kingdom's applicable data protection legislation.
Other national and regional privacy requirements relevant to our Services.
Where applicable laws impose additional obligations or provide users with additional rights, byOne will seek to comply with those requirements.
Users may also have the right to submit complaints to the relevant data protection authority in their jurisdiction.
18. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes to our Services, technologies, business operations, or applicable legal requirements.
Where material changes occur, we may notify customers through:
Our official website.
Our mobile applications.
Email or other appropriate communication channels.
The current version will be made available through the byOne website.
The Effective Date indicates when the current Policy takes effect, while the Last Updated date indicates when the Policy was most recently revised.
We encourage customers to review this Privacy Policy periodically.
19. Contact Information
If you have any questions, requests, concerns, or complaints regarding this Privacy Policy or the handling of your personal information, please contact us.
byOne Customer Support
Website: https://www.byone.travel
Support Channels: Available through the byOne website and mobile applications.
For requests involving access, correction, deletion, or other privacy rights, please use the designated privacy contact channel published by byOne.
We will make reasonable efforts to respond to privacy-related requests in accordance with applicable legal requirements.
