Last updated: 1 September 2026
Arouki Pty Ltd is committed to protecting your privacy. This policy is issued in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). It explains what data we collect, why we collect it, and how we keep it safe.
When you purchase an eSIM plan we collect the email address you provide, your payment details (processed by Stripe — we never store card numbers), the plan purchased, and your order reference.
We automatically collect standard server log data, including IP address, browser type, device type, and page timestamps. This data is used solely to operate and secure the service and is not linked to your identity. We do not require your name, passport, or any government-issued identification.
We use your email to deliver your eSIM QR code, send order confirmations, and provide customer support.
We do not sell, rent, or share your personal data with third-party advertisers.
To deliver your eSIM, we share your email address and order details with our eSIM platform provider — the company that provisions and delivers eSIMs on our behalf. This provider operates servers located in Singapore. We have a Data Processing Agreement in place that requires them to use your data only for fulfilling your order and to implement appropriate security measures.
Your personal information may therefore be transferred to and stored in Singapore. We take steps to ensure it is protected to standards consistent with the Australian Privacy Principles.
All payment information is handled by Stripe. We do not store card numbers on our servers. Stripe's privacy policy is available at stripe.com/privacy.
We use a session cookie required for checkout (expires when you close your browser). Stripe's payment element sets its own cookies subject to Stripe's privacy policy — see stripe.com/privacy. We do not use cross-site tracking or advertising cookies.
We retain order data for 5 years for legal and accounting purposes, as required by Australian taxation law. You may request deletion at any time by emailing [email protected]; deletion requests will be fulfilled to the extent not prevented by our legal retention obligations.
Under the Australian Privacy Principles you have the right to access, correct, or delete your personal data. Email [email protected] with "Privacy Request" in the subject line. If we do not resolve your concern within 30 days, you may lodge a complaint with the Office of the Australian Information Commissioner at oaic.gov.au.
In the event of a data breach that is likely to result in serious harm to you, we will notify you and the Office of the Australian Information Commissioner (OAIC) as soon as practicable, and within 30 days of becoming aware of the breach, in accordance with the Notifiable Data Breaches (NDB) scheme under the Privacy Act 1988 (Cth). Notification will describe the nature of the breach, the information affected, and the steps we have taken and recommend you take.
For privacy questions, contact [email protected]. We aim to respond within 5 business days.
Email us at [email protected] and we will respond within 5 business days.