Privacy Policy

Effective Date: July 18, 2025

At Gaza Online, we are committed to protecting your privacy. We only collect the information needed to deliver and manage our services — nothing more. This policy explains what data we collect, how we use it, who has access, and how we keep it secure.

By using Gaza Online's services — including submitting a request, receiving an eSIM, or communicating with our support team — you agree to the practices described in this Privacy Policy.

This policy applies to all individuals who use Gaza Online's services, including those who submit requests independently and those referred by partners.

1. What Data We Collect

Gaza Online only collects the minimum information necessary to fulfill your request and manage your service.

Information You Provide

• Phone Number — Used to identify your account and deliver the eSIM via WhatsApp.
• Region & Network Availability — Information about the mobile networks available in your area, used to match you with a compatible eSIM.
• Optional Notes — Any additional context you choose to provide when submitting a request.

Data Generated Through Use

• Activation Status — Whether your eSIM was successfully activated.
• Usage Metadata — Includes approximate data usage, renewal activity, and in some cases, the network the eSIM connected to. This helps us optimize packages and troubleshoot delivery issues.
• Request History — Timestamps, status updates, and any related support messages or submissions.

We do not — and cannot — access:

• Your personal messages or calls.
• Your browsing activity or internet traffic.
• Files, passwords, or personal content from your device.
• Location data beyond the general region you report for network compatibility.

2. Support Requests & Account Access

To help resolve technical issues, Gaza Online may request limited diagnostic information. This includes screenshots of your device's cellular settings, such as:

• Installed eSIM profiles.
• Mobile network settings.
• Error messages related to activation.

We never ask for:

• Your passwords.
• Personal photos or files.
• Any private or unrelated app data.

3. Account Access and Privacy

Each Gaza Online account is tied to the phone number used when submitting a request. For privacy and security:

• We only share subscription details (e.g., package type, usage, status) with the account holder identified by that number.
• If someone contacts us from a different number, even if claiming to act on the user's behalf, we cannot share any account details.
• Support agents may request verification through WhatsApp to confirm the identity of the account holder before providing sensitive information.

4. Requests Submitted on Someone's Behalf

Due to the situation on the ground, Gaza Online allows friends or family members to submit a request on someone else's behalf — especially when the intended recipient lacks internet access or the ability to submit it themselves.

In these cases, our system may return limited status information to help guide the process. This is only used to confirm whether a request can be submitted, renewed, or refreshed — and does not expose any personal or subscription details.

Examples of what may be shared:

• Whether the number already has an active eSIM or pending request.
• Whether the number is eligible for a renewal or replacement.
• How long until an eSIM expires or becomes refreshable.

This limited feedback helps prevent duplicate requests and reduce confusion — but full details about any request, subscription, or usage are only accessible to the verified account holder.

If a request is submitted on your behalf, you will receive a confirmation message via WhatsApp. If you do not wish to proceed, you can cancel the request directly through the message. This ensures you remain in control of your service, even when someone else initiates it for you.

5. How We Use Your Information

Gaza Online uses the information you provide — and the metadata generated through your use of the service — only for the purpose of delivering, maintaining, and improving our operations. We do not use your data for advertising, profiling, or commercial gain. Specifically, we use your data to:

• Assign the right eSIM for your region and available networks.
• Ensure fair distribution by enforcing our one-esim-per-person policy.
• Support renewals, package assignments and replacements based on usage history.
• Improve service delivery through system optimization and trend analysis.
• Prevent misuse or abuse of the system by identifying suspicious activity.
• Respond to your support requests and troubleshoot technical issues.

We do not use your data to build behavioral profiles, track your location, or infer anything beyond the limited scope of delivering your eSIM and managing its lifecycle.

6. How We Share Your Information

Gaza Online does not sell, rent, or trade your personal information to anyone.

We may share summary-level, non-personal information in the following ways:

• Public reports and communications — such as impact summaries or updates on our website and media channels (e.g. total number of eSIMs distributed or general usage trends).
• Trusted partners — such as NGOs or institutions we collaborate with, to demonstrate collective impact in specific regions or programs.
• Volunteers or contractors — who help us deliver services under strict confidentiality agreements and with access limited to what is necessary.

We do not share your individual request data, usage details, or account history with any third party unless:

• You submitted your request through an approved partner, in which case that partner may view the status of the specific request they facilitated.
• We are required to comply with a lawful request from authorities, in accordance with applicable regulations.

In all cases, we minimize what is shared, restrict access to authorized parties, and safeguard your data with care.

7. Data Security

Gaza Online takes your data security seriously. We use industry-standard practices to protect your information from unauthorized access, loss, or misuse. We implement the following safeguards:

• Access Controls – Only authorized personnel can access user data, and only for the purpose of delivering services or resolving issues.
• Data Encryption – All data in transit (e.g., messages, API requests) is encrypted using secure protocols.
• Minimal Retention – We retain only the information necessary to operate the service. Data is regularly reviewed and deleted when no longer needed.
• Secure Infrastructure – Our systems are hosted on secure cloud platforms with up-to-date security patches and continuous monitoring.

While no system is entirely immune to risk, we are committed to responding quickly to any security concerns or incidents and continuously improving our safeguards.

8. Your Rights and Choices

Gaza Online respects your rights when it comes to your personal data. While our system is designed to collect as little information as possible, you still have control over how it's used. You may:

• Request access to the information we have associated with your account.
• Ask us to correct inaccurate information tied to your request.
• Request deletion of your data, provided your eSIM service has concluded and no active request is in progress.
• Withdraw your request at any time before the eSIM is assigned.

Because we use WhatsApp numbers as the primary identifier, we may ask you to verify your identity through the number associated with your account before fulfilling any data-related request.

If you have questions or would like to exercise any of these rights, please reach out to our team via the contact form on our website.

9. Changes to This Policy

Gaza Online may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or operational practices. When we do, we will update the "Effective Date" at the top of the page.

We encourage you to review this policy periodically to stay informed about how your data is handled.

By continuing to use Gaza Online's services after changes are published, you agree to the updated policy.