Privacy Policy
Last revised: March 2026
At TPG Mobile, we take your privacy seriously and are committed to keeping your personal data safe. This policy explains what information we collect, how we use it, and what rights you have concerning that data.
1. Who We Are
TPG Mobile runs the eSIM marketplace at tpgmobile.sg. When this policy mentions "TPG Mobile", "we", "us", or "our", it refers to the company running this service. For enquiries, reach us at [email protected].
2. Details We Collect
The types of information we collect include:
- Account data: your name, email address and password when you register.
- Order data: your purchase history, the eSIM plans you bought, and transaction IDs.
- Device data: device model and eSIM ICCID/EID used for plan setup.
- Payment data: handled securely through Stripe — we never store your card number.
- Usage data: the pages you visit, clicks, session length and IP address (anonymised after 30 days).
- Communications: any support tickets and emails you send our way.
3. How We Use This Information
We process your information to:
- Process and dispatch your eSIM orders
- Email order confirmations, QR codes, and account alerts
- Help you with customer support
- Enhance our platform and prevent fraud
- Send marketing emails (only with your consent; you can unsubscribe at any time)
- Comply with legal requirements
4. Legal Basis for Processing under GDPR
When GDPR applies, we rely on these legal bases: contract performance (to fulfil your order), legitimate interests (to prevent fraud, for analytics), consent (marketing), and legal obligation (tax records).
5. Cookies
We use cookies for session management, analytics (Google Analytics), and personalisation. Read our Cookie Policy for complete details and how to opt out.
6. Data Sharing
We never sell your personal data. We share information only with:
- eSIM providers (such as Zendit) — to activate your plan
- Payment processor (Stripe) — to handle payments
- Analytics (Google Analytics) — anonymous usage statistics
- Support tools — for handling your support tickets
- Legal authorities — if the law requires it
7. Data Retention
Order records are kept for 7 years to meet tax and legal requirements. When you close your account, your data is deleted within 30 days. Marketing consent is stored until you withdraw it.
8. Your Rights
Your location may give you the right to access, correct, or erase your data; to object to processing; to ask for portability; and to withdraw consent at any time. Send requests to [email protected].
9. Security
We protect data with TLS 1.3 encryption, hashed passwords, and regular security reviews. Payment information is handled only by processors that comply with PCI-DSS.
10. Updates to This Policy
This policy may be updated from time to time. If changes are material, we will notify you by email or with a banner on the site. Continuing to use the site after changes means you accept the new policy.
11. Contact
Got a question about this policy? Email [email protected].