Legal

Privacy notice

What this site collects, what happens to an enquiry you send through it, and how to reach us about your data.

Last updated: 30 October 2026

In short: analytics on this site is optional. Google Analytics loads only if you accept it, and never before you choose. Anything you send through the contact form goes to Ambimat Technologies Pvt Ltd so that we can reply. We do not sell your personal data. Questions about your data: support@ambimat.com.

1. Who we are

This notice covers esim.ambimat.com, the eSIM, eUICC and SIM-based authentication site of AmbiSecure, part of the Ambimat Group. This site is operated by Ambimat Technologies Pvt Ltd, a company within the Ambimat Group. Ambimat Technologies Pvt Ltd is responsible for the personal data you send through this site.

Other Ambimat websites have their own privacy notices. When you follow a link to one of them, that site’s notice applies.

2. When you browse

Server logs. This site is served by our web hosting provider. As with any website, your browser’s request for a page reaches the hosting provider’s servers, which process standard request data such as your IP address, browser type, the page requested and the time, in order to deliver the page and protect the service.

Before you choose. On your first visit, a notice asks whether you allow analytics. Until you accept, this site does not load Google Tag Manager or Google Analytics, so nothing about your visit is sent to Google for analytics. If you start using the contact form, Google reCAPTCHA loads (see section 4) and may set its own cookies or storage.

Your choice. Your answer is stored in your own browser on this site (local storage), not in an account. You can change it at any time with Cookie preferences, which is also at the foot of every page.

Choices made elsewhere. If you have refused analytics on ambimat.com, or your browser sends a Do Not Track signal, analytics stays off on this site even if you accept here. To do this, the site reads the ambimat_consent cookie that ambimat.com sets for Ambimat websites.

3. If you allow analytics

If you accept, this site uses Google Analytics 4, loaded through Google Tag Manager. It measures page views, how content is used and where visits come from. It also records clicks on this site’s calls to action and on links to other websites, and it counts enquiries that are sent successfully. That count includes the page, the form, the type of enquiry you chose and the campaign details described in section 4, but not your name, contact details or message.

Cookies. Google Analytics sets two cookies: _ga and _ga_BNEVD0M4D1. They are set for the whole ambimat.com domain, so other Ambimat websites on that domain can also read them, and they can last for more than a year.

How long Google keeps it. This site’s Google Analytics property keeps event-level data for 2 months, and user-level data for 14 months after your last activity on the site. These settings do not apply to aggregated reports.

If you change your mind. If you withdraw an earlier acceptance through Cookie preferences:

  • this site stops sending analytics data to Google;
  • if analytics was running on that page, it deletes the _ga_BNEVD0M4D1 cookie, which belongs to this site;
  • it does not delete the _ga cookie, because that cookie is shared with other Ambimat websites. The cookie stays in your browser, but this site sends no analytics data while your choice is “reject”. You can delete it yourself in your browser settings.

4. If you use the contact form

What is collected. Your name, work email address, message and the type of enquiry are required. For some enquiry types, so is your organisation type. You may also give your company, phone number, country, your role, the solution you are interested in, deployment geography and device volume. With your enquiry we also record:

  • the address of the page you sent it from;
  • the website you came from, by its host name only, where available;
  • where available, the campaign details of a tagged link that first brought you to an Ambimat website. These are read from the ambimat_attr cookie.

If you reject analytics on this site, or have refused it on ambimat.com, the website you came from and the campaign details are not sent.

Where it goes. When you press Send, your enquiry is submitted to Central Intake, the Ambimat Group’s enquiry system. It runs on Amazon Web Services and stores enquiries in the Asia Pacific (Mumbai) region, in India, encrypted at rest.

What it is used for. We use your enquiry to route it to the right team and to reply to you.

  • The team is notified that a new enquiry has arrived.
  • An automated acknowledgement is normally sent to the email address you gave.
  • Each submission is checked on the server to filter automated spam and to stop the same enquiry being recorded twice.
  • To recognise repeat or abusive senders, Central Intake keeps a keyed one-way code derived from your email address, and from your phone number if you give one, alongside the enquiry.

Submitting the form does not subscribe you to anything.

Google reCAPTCHA. The form is protected by Google reCAPTCHA. Its script loads when you start using the form, not before, and assesses whether the submission comes from a person. The resulting score is stored with your enquiry. Google’s Privacy Policy and Terms of Service apply to reCAPTCHA.

If you would rather not use the form, you can write to contact@ambimat.com.

5. Who else handles your data

We share personal data only with the service providers needed to run this site and answer your enquiry, and only as far as necessary. They are:

  • Hostinger, our web hosting provider, for the server logs described in section 2;
  • Amazon Web Services, which runs Central Intake. AWS also sends the acknowledgement email (Amazon Simple Email Service) and the team notification (Amazon Simple Notification Service);
  • Google, for reCAPTCHA on the contact form, and for Google Tag Manager and Google Analytics if you accept analytics. Google handles this data under its own privacy policy and may process it outside India;
  • Microsoft, which hosts the ambimat.com email service we use to correspond with you.

We may also disclose personal data where the law requires it.

6. How long we keep it

  • Enquiries. Enquiries are kept so that we can reply and follow up. Automatic deletion is not switched on today. An enquiry, and the sender codes and contact record linked to it, stay in Central Intake until they are deleted. We are building automated controls to delete or anonymise enquiries after a set retention period. We will update this notice when those controls are switched on. Until then, you can ask us to delete your enquiry at any time (see section 7).
  • Backups. Central Intake’s encrypted backups cover the previous 35 days, so a deleted enquiry can remain in a backup for up to 35 days.
  • Duplicate checks. Short-lived technical records used to stop duplicate submissions expire after at most 14 days, and are then removed automatically.
  • Analytics. See section 3.
  • Your analytics choice. It stays in your browser until you change it or clear this site’s data.

7. Your choices and requests

You can change your analytics choice at any time through Cookie preferences. To ask what personal data we hold about you, or to ask us to correct or delete it, email support@ambimat.com.

The same address is our contact for any question, concern or grievance about how this site handles personal data.

8. Security

This site is served only over HTTPS, so form submissions are encrypted in transit, and Central Intake stores them encrypted at rest. No method of transmission over the internet is completely secure, so please do not put passwords or other sensitive account details in the form.

9. Changes to this notice

We may update this notice, for example when the retention controls described in section 6 are switched on. When we do, we will change the “Last updated” date at the top.

Questions about this notice: support@ambimat.com.