Brisk Consulting Services LTD ("we", "us") is the data controller for personal data processed through the Megarefill app. Registered office: 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom. Contact: [email protected].
Fraud prevention and security data
When you place an order, we automatically collect certain technical information about the request to detect and prevent fraud and abuse, and to protect the security of your account and our service:
We process this data on the basis of our legitimate interest in preventing fraudulent transactions and keeping our service secure. It is linked to the relevant order and account, retained only as long as needed for these purposes and to meet our legal and accounting obligations, and then deleted or anonymised.
We do NOT use this information for advertising, and we do NOT track you across other apps or websites. We do not sell it. It may be processed by our service providers (for example, our cloud infrastructure and payment provider) acting on our behalf and under contract, but it is never shared with third parties for their own purposes.
We use your data to: create and secure your account; provision, deliver and install your eSIM; process payments and wallet balances; show accurate usage; provide customer support; prevent fraud and abuse; send service messages; send promotional and low-data/expiry notifications only if you have opted in; and meet legal obligations.
We rely on: performance of our contract with you (providing the eSIM service); your consent (marketing and push/email notifications, which you can withdraw at any time); our legitimate interests (security, fraud prevention, improving the service); and compliance with legal obligations.
We share the minimum data needed with trusted processors: Airalo (eSIM provisioning and connectivity), Stripe (payments), SMTP2GO (transactional email), Expo (push notifications) and Cloudflare (secure hosting and storage). Where data is transferred outside the UK/EEA, appropriate safeguards are in place. We do not sell your personal data.
Promotional, product-update and usage (low-data/expiry) notifications are opt-in. You can turn them on or off at any time in the app's notification settings, or by contacting us.
We keep your data for as long as needed to provide the service and to meet legal, accounting and fraud-prevention obligations. You can delete your account from within the app; we then remove or anonymise your personal data, except where we must retain certain records by law.
Under UK GDPR you have the right to access, correct, delete, restrict or object to the processing of your data, and to data portability. To exercise these rights, email [email protected]. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.
Data is encrypted in transit. Sensitive credentials (payment, provider keys) are held server-side and never exposed to the app. Card details are processed by Stripe and are not stored by us.
Megarefill is not directed at children and is intended for users who can form a binding contract. We do not knowingly collect data from children.
We may update this Privacy Policy from time to time. The "Last updated" date above shows the latest version, and significant changes will be highlighted in the app.
For privacy questions or to exercise your rights, contact Brisk Consulting Services LTD at [email protected], 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom.