Legal
Privacy Policy
Last updated: 10 July 2026
This Privacy Policy describes how SIA "BNS Solution", registration number 40203655901, registered address Stabu iela 92-18, Riga, LV-1009, Latvia, processes the personal data of customers of this website as data controller.
Contact for data-protection matters: info@bns-solution.com. We have not appointed a Data Protection Officer; data-protection queries and requests should be sent to that address.
1. Data we collect
To provide the Services we collect and process:
- —your e-mail address (provided at checkout);
- —order details (selected package, price, order date, order/transaction reference);
- —your country (for tax purposes) and, where you provide it, your name for the invoice;
- —technical data necessary to provide and secure the Service (e.g. IP address, the eSIM/ICCID identifier and its activation status);
- —records of your correspondence with our customer support.
We do not collect more data than is necessary to deliver the Services.
2. Purposes and legal bases
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Conclude and perform the distance agreement; deliver the eSIM activation details; provide customer support | Art. 6(1)(b) — performance of a contract |
| Process payments and refunds | Art. 6(1)(b) contract, and Art. 6(1)(c) legal obligation |
| Keep accounting and tax records (invoices) | Art. 6(1)(c) — legal obligation (Latvian accounting and VAT law) |
| Prevent fraud, secure the Service and defend legal claims | Art. 6(1)(f) — our legitimate interest in operating a secure, lawful business |
3. Payment security
All data exchanged with this website is encrypted in transit using SSL/TLS. Payment card data is entered exclusively on the secure hosted payment page of our payment service provider and is protected by payment card industry (PCI DSS) standards. We do not receive, process or store your payment card number.
4. Who receives your data
We share personal data only with the following categories of recipient, as necessary for the purposes above:
- —our payment service provider (to process card payments and refunds);
- —our website hosting and e-mail delivery providers (to operate the site and send activation details);
- —our eSIM / mobile-connectivity supplier (to provision your eSIM profile);
- —public authorities, where required by law.
Where a recipient acts as our processor, it is bound by a data-processing agreement under GDPR Art. 28. We do not sell your personal data.
5. International transfers
Our principal service providers are located within the European Economic Area (EEA): our eSIM / mobile-connectivity supplier is established in the Netherlands, and our payment processor in Latvia (any processing carried out in the United Kingdom is covered by the European Commission's adequacy decision for the UK). Where any other provider — for example a website hosting or e-mail delivery provider — is located outside the EEA, we ensure an appropriate safeguard is in place: an adequacy decision, the European Commission's Standard Contractual Clauses, or another lawful transfer mechanism under GDPR Chapter V. You may request a copy of the relevant safeguard using the contact details above.
6. Data retention
Order and invoicing data is retained for 5 years from the end of the financial year of the transaction, as required by Latvian accounting and VAT legislation. Personal data not required for accounting is deleted within 12 months of completion of your order, unless a longer period is required to handle a support matter or a legal claim.
7. Your rights
You have the right to request access to, rectification or erasure of your personal data; to restrict or object to its processing; and to data portability, in accordance with the GDPR. Where processing is based on your consent, you may withdraw that consent at any time; withdrawal does not affect the lawfulness of processing carried out before withdrawal.
To exercise any right, contact us at the address above; we respond without undue delay and within one month.
You also have the right to lodge a complaint with the Latvian supervisory authority, Datu valsts inspekcija (DVI), Elijas iela 17, Riga, LV-1050, www.dvi.gov.lv.
8. Is providing data mandatory?
Providing your e-mail address and payment details is necessary to conclude and perform the Agreement. Without them we cannot deliver the eSIM activation details or complete your order.
9. Automated decision-making
We do not make decisions producing legal or similarly significant effects about you based solely on automated processing.
10. Cookies
Our use of cookies and similar technologies is described in the Cookie Policy.
11. Changes
We may update this Policy; the current version and its date are shown at the top.