Last updated: 2026-07-08 · Draft — pending legal review.
Order data (email address, chosen plan, order history, consent timestamp): needed to deliver your eSIM and comply with bookkeeping law. Legal basis: contract performance and legal obligation.
Newsletter data (email address, capture source, language): to send offers you asked for. Legal basis: consent — unsubscribe at any time.
Support data (WhatsApp number/messages if you contact us): to help you. Legal basis: legitimate interest.
Analytics (anonymized usage events via Google Analytics 4 with IP anonymization): to improve the service. Legal basis: consent/legitimate interest.
Stripe (payments), Resend (transactional email), our hosting provider, our eSIM supplier (receives the email address needed to provision your eSIM), Google (analytics). Data processing agreements are in place with each processor.
Order records: 7 years (bookkeeping law). Newsletter subscriptions: until you unsubscribe. Support conversations: 12 months. Analytics: 14 months.
You may request access, correction, deletion, restriction, portability, and object to processing. You may complain to IMY (the Swedish data protection authority).
Data deletion: email support@getkarib.com with the subject 'Delete my data' from the address you used. We delete newsletter and support data within 30 days. Order records are kept 7 years where bookkeeping law requires it, then deleted; they are excluded from marketing use immediately.