Privacy and personal data
How your data is used to manage your account, plans and support.
Version 2026-10-07.2
Controller and contact
Smartrends Technologies, 15 rue des Blés, 93210 Saint-Denis, France, is the controller for site processing. For rights requests or questions: contact@francesimcard.com, +33 7 52 66 44 88.
Data, purposes and legal bases
Account and cart: email, name, hashed password, products, dates and preferences, for requested pre-contract steps and account management. Orders: contacts, billing/delivery addresses, country, phone, plan, consents and payment references to perform the contract; billing records for accounting and tax duties. Support: messages and references to answer requests under the contract or our legitimate interest in providing help. Security: necessary technical identifiers, counters and logs to prevent abuse, on legitimate interests. Required fields are identified; essential missing information prevents the corresponding feature. No advertising use is planned in this flow.
Business customer verification
To check business billing, we process the company name, country of establishment, VAT number or local tax/registration ID. The VAT number and country may be checked with the European VIES service. For review of a non-EU business, the database retains the reference and date of evidence of business identity, activity and establishment, together with the status, decision date and validity. Authorised administrative staff conduct this human review; this feature does not decide eligibility automatically or add an evidence-file upload facility. These records support billing and tax treatment. When authorised, manual account erasure can delete pending or revoked reviews that are not linked to protected evidence. Approved reviews and those linked to protected evidence remain; their necessity and retention period require separate review, preserving only required evidence. Documents received by email also require that review.
Contact without an account and optional account
The public form uses your name, email, language and message to answer your request. No account or password is required. Account creation is optional: if requested, a pending account may be created and a link valid for 30 minutes lets you choose a password and verify your email. Submitting the form does not sign you in. Correspondence sent with an address matching a verified account may be linked to that account; viewing its history requires sign-in. Entering an email address alone never grants account access. Requests without an account follow the same support retention and data-rights rules.
Recipients and transfers
Access is restricted to authorised staff and providers needed for the feature used: OVH, Google Workspace, Monetico, the SIM/eSIM operator and carrier. Only necessary information is shared. The OVH server is in London, United Kingdom; Google services may process data in several countries. Processing is therefore not presented as exclusively French or European. For details of relevant recipients, processing locations and safeguards applicable to your data transfers, contact contact@francesimcard.com. Never send full card details to support.
Site service providers
OVH hosts the site and database. Google Workspace handles mail and service emails; Google receives the addresses, content and attachments needed for each message. The AI assistant runs on the website’s server without sending your questions to an external AI provider. ExchangeRate-API receives only a rates request, not your name, email, address, basket or order. Staff access is limited by duties. Deleting data on the website does not automatically delete messages and attachments in Google Workspace; those copies are reviewed separately.
Retention periods
Sign-in sessions expire after 12 hours; guest cart access after 30 days. Access lifetimes alone do not prove deletion of database records. Account data is used to manage your account and requests; erasure is reviewed against retention duties. Necessary accounting records are kept for 10 years from financial year closing. Other contract evidence is kept only for a legal duty or documented evidential need, with a justified retention period. The cleanup thresholds below are internal rules, not universal periods prescribed by CNIL. Maintenance can apply the automatic cleanup described below; account erasure remains a manually reviewed action.
What technical cleanup removes
When run, maintenance can delete expired sessions and security links, guest carts and conversion quotes. The default threshold for minimal operational audit is 365 days. Delivery records for email verification, password recovery and optional account setup are eligible for cleanup after 7 days, except while sending. Link expiry or message cleanup does not delete a pending account. Database cleanup does not remove copies already present in recipients’ mailboxes.
Manual and automatic cleanup
A tool previews eligible records before cleanup is manually confirmed. Support is eligible 365 days after a reliable closure date and can be cleaned by existing maintenance. SIM/eSIM codes, including LPA, and associated QR files can be purged automatically after 90 full days from plan expiry, never from purchase. Ordinary notifications still require manual confirmation, 365 days after their last update in a final state; counters, 30 days after their last recorded activity. Contract and fiscal evidence do not follow this notification rule. Active or uncertain service, open support, disputes, unresolved payments or refunds and legal preservation requirements block affected records. Missing dates are not guessed. Only QR files with verified linkage and structure are removable; others are retained and flagged for manual review. Database removal and file deletion may be separated by a processing queue with retries. Hashes preventing profile reassignment remain.
Inactive accounts and backups
After 2 years without reliably recorded activity, accounts are flagged for review, not deleted automatically. This includes inactive unfinished optional account setups; unknown activity is not treated as proven inactivity. You may request review or erasure without waiting for that threshold. Account erasure remains a manual administrator decision following proportionate verification and retention-duty checks. Backups follow the separate 30-day rule and exceptions below.
Backups and restoration
Recognised timestamped ordinary backups follow automatic cleanup after 30 days from the timestamp in their name, subject to a recent encrypted backup and its matching restoration check. The 2 newest and the copy associated with that check are retained. Pre-change, publication or unknown-name archives and ambiguous files remain and are flagged for manual review; 30 days therefore does not guarantee their deletion. No off-server copy is currently configured. A minimal erasure journal, separate from the database and limited to technical references and states, helps prevent erased data from reappearing. A restored database must be reconciled with the latest erasures before public reopening; inconsistency blocks restart pending review.
Mailbox copies and other files
Google Workspace is used for email. No other CRM or external customer database is currently used in this flow. Database erasure and website file cleanup do not automatically delete emails, attachments or other copies in Google Workspace. The administrator must review them, manually handle the relevant records, document that check and explain any retention duties. Old, unlinked or unverifiable QR files also require separate review; appearing on an exception list does not prove erasure. These checks and provider reviews are not a compliance certificate.
Guide and AI assistant
In FAQ mode, answers come from our FAQ and internal phone database. When AI mode is enabled, your question and up to four selected previous questions are processed by a local AI isolated on the website’s server, with relevant excerpts from that database. Your questions are not sent to an external AI provider. The chat performs no web search and does not send your questions to manufacturers or their websites. Displayed links are official references retained in our catalogue; they are not opened automatically. You can choose to open them, which takes you to the manufacturer’s website. Share only the exact model and country of purchase, never an IMEI, full EID, SIM/eSIM code, personal contact details or payment information. Missing or uncertain references are directed to our contact form for human review. No order data is automatically attached. The site does not record chat text in its database; rate-limit counters use hashed identifiers. The conversation is temporarily displayed in your browser and can be cleared. If you choose the contact form, a temporary draft may include your last question; it becomes a recorded request only when you submit it. Answers may be incomplete or wrong. The assistant takes no automatic action, guarantees no refund and does not determine your rights. No ChatGPT account is required.
A copy of your data
After verifying your request, we can prepare a structured copy of account data: contacts, saved cart, plans, dated agreements, support, withdrawal requests, documents and email delivery states. This export alone does not cover mailboxes or providers’ records; the response must include them where necessary. Passwords, tokens and installation codes are not copied into a general attachment. Useful codes remain in your secure account; a specific access request is reviewed separately. Exercising your rights requires neither accepting advertising nor waiving consumer rights.
Reviewing an erasure request
A person reviews an erasure request after proportionate verification of your identity and the records concerned. The tool previews what can be erased or anonymised and what must remain; a separate manual confirmation is required to act. This cleanup excludes data still needed for ongoing service, an unresolved payment, a dispute or a legal duty. Your request is still assessed for other records. Invoices, credit notes and legally necessary evidence do not disappear with the account. Public correspondence is included only after its connection to you is verified; knowing an email address alone is insufficient. Mailboxes, backups and providers’ records must be reviewed separately, and the limits of erasure are explained to you.
Limited scope of manual erasure
The account-erasure tool acts only after explicit activation and manual confirmation. It can minimise personal-data copies in genuinely unpaid orders without protected financial evidence; useful amounts, dates and consent choices remain, without contract text containing identity details. It can also clear SIM/eSIM codes in the database when service has reliably ended, or for a genuinely unpaid inactive order without a blocked case. Active or uncertain circumstances prevent this cleanup. QR files and references separately follow the 90-day rule after plan expiry; account erasure does not trigger their early removal. Profile-reassignment prevention hashes and paid or fiscal evidence remain; backups and mailboxes follow their separate controls. This is neither exhaustive erasure of all data nor evidence of overall compliance.
Your rights
Subject to legal conditions, you may request access, rectification, erasure, restriction and portability, and object to processing based on legitimate interests. Any consent used may be withdrawn without affecting earlier processing. Write to contact@francesimcard.com or the controller’s address; proportionate identity verification may be requested if there is doubt. A response is normally due within one month, with a reasoned extension where GDPR permits. You may complain to CNIL (www.cnil.fr) or your competent local authority. Deletion does not remove legally necessary archives.