Privacy Policy

Background

Intermob Limited understands that your privacy is important to you and that you care about how your personal data is used. We respect and value the privacy of all our clients, customers, and partners, and will only collect and use personal data in ways that are described here, and in a way that is consistent with our obligations and your rights under the law.

1. Information About Us

1.1 Intermob Limited, trading under the brand name TonMobile, is a limited company incorporated on 09 March 2026 in Hong Kong, registration number 79904463, with a registered office address at 8F, 30 Hollywood Road, Central, Hong Kong.

1.2 We ARE NOT a mobile provider or mobile network operator. Data services are provided by their respective network providers in their country. Although we are not the network provider, we will provide support to end-users who purchase services we resell.

1.3 WE DO NOT ASSUME ANY RESPONSIBILITY AND MAY NOT BE HELD RESPONSIBLE OR LIABLE FOR CONNECTIVITY AS SUCH, ITS QUALITY, QUANTITY, DIVERSITY, COVERAGE, SECURITY, OR ANY OTHER FEATURE OR OPTION A CONSUMER MAY EXPECT FROM A MOBILE OPERATOR OR PROVIDER.

1.4 We provide our services via the Platform, which includes our Telegram bot @tonmobile (also available as @mobile), the web application at https://web.tonmobile.com/, and the TonMobile eSIM mobile applications for iOS and Android. All channels are equally available. If you disagree with our Privacy Policy, Terms and Conditions, or any other policy, please do not use our services.

1.5 Contact details:

Email: info@tonmobile.com

2. What Does This Notice Cover?

This Privacy Policy explains how we collect, process, and use your personal data through our Platform and in the course of providing our services, including but not limited to the web application at https://web.tonmobile.com/, the TonMobile eSIM mobile applications for iOS and Android, and the Telegram bots @tonmobile (https://t.me/tonmobile) also available as @mobile (https://t.me/mobile) operated by us.

It also covers how we use personal data for analytics and advertising purposes, including behavioral data used for marketing through third-party advertising and analytics platforms.

Finally, it explains your rights under the law relating to your personal data.

3. What Is Personal Data?

Personal data is defined by the General Data Protection Regulation (EU Regulation 2016/679) (the "GDPR") as 'any information relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier'. As a company incorporated in Hong Kong, we also comply with the Personal Data (Privacy) Ordinance (Cap. 486) ("PDPO"), which governs the collection, use, and handling of personal data in Hong Kong. Together, these instruments (and any other applicable data protection laws) are referred to in this Policy as the "Data Protection Legislation".

Personal data is, in simpler terms, any information about you that enables you to be identified. Personal data covers obvious information such as your name and contact details, but it also covers less obvious information such as identification numbers, electronic location data, and other online identifiers.

4. What Personal Data Do You Collect and How?

We may collect and hold some or all of the following personal data:

• Email address: collected directly from you.
• Business information: business name, business address, contact details, collected directly from you via email.
• Payment information: card details, account number, bank name, and address. This data is handled securely by third-party payment processors. We do not directly collect or store this information.
• Public profile information: Telegram username, display name, and profile picture(s), automatically received via the Telegram Bot API when you interact with our bot. This information is limited to data you have chosen to make publicly available in your Telegram account settings. We do not have access to private account data such as your phone number or contacts. Please note that Telegram processes your data independently in accordance with its own Privacy Policy available at https://telegram.org/privacy.
• Cookies and similar technologies: IP addresses and general geolocation, browser type and version, device type and operating system, referring URL and website navigation patterns, session timestamps and activity logs. This data may be collected by first-party cookies (set by us) or third-party cookies and services, e.g., Google Analytics, Meta Pixel, Reddit Pixel, and Trustpilot widgets or tracking tools (as further described in Parts 11 and 12).

5. How Do You Use My Personal Data?

We may use your personal data for the following purposes:

• Administering our business;
• Supplying our services and support to you;
• Managing payments for our services;
• Personalising and tailoring our services for you;
• Communicating with you and supplying you with information on our services;
• Delivering relevant advertising and measuring its effectiveness, including via third-party platforms such as Google Ads.

With your permission and/or where permitted by law, we may also use your personal data for marketing purposes, which include contacting you by email and text message with information, news, and offers on our services. You will not be sent any unlawful marketing or spam. We will always work to fully protect your rights and you will always have the opportunity to opt-out.

We will only use your personal data for the purpose(s) for which it was originally collected unless we reasonably believe that another purpose is compatible with that or those original purpose(s) and need to use your personal data for that purpose.

In some circumstances, where permitted or required by law, we may process your personal data without your knowledge or consent. This will only be done within the bounds of the Data Protection Legislation and your legal rights.

We also use third-party analytics and advertising technologies (see Section 11) to help us understand how users interact with our Platform, optimize our advertising efforts, and deliver targeted advertisements. This includes the use of tracking technologies such as cookies and pixels. Where required by the Data Protection Laws, we obtain your consent before enabling these technologies.

With your permission and/or where permitted by law, we may also use tools from Trustpilot (see Section 11) to invite feedback, display reviews, and understand how users interact with embedded review components.

6. How Long Will You Keep My Personal Data?

We will retain your personal data only for as long as necessary to fulfill the purposes for which we collected it, including to comply with legal, accounting, or reporting obligations. Where no specific retention period applies, we determine the appropriate timeframe based on factors such as the nature and sensitivity of the data, the potential risk of harm from unauthorized use or disclosure, and the purposes of processing. Once your data is no longer required, we will securely delete or anonymize it.

7. How and Where Do You Store or Transfer My Personal Data?

We store your personal data electronically within the European Union. Specifically, production data is stored on servers located in Germany, and analytics data is stored on servers located in the Netherlands. Both locations are within the EEA and subject to the full protections of GDPR.

In certain circumstances, some data collected through third-party analytics or advertising tools (e.g., Meta Pixel, Google Analytics, Reddit Pixel) may be processed or stored outside the EEA by those third-party providers. Where such transfers occur, we ensure your personal data is protected through appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission or other legally recognised mechanisms.

Where such transfers occur, we ensure your personal data is protected by implementing appropriate safeguards in accordance with GDPR. These may include the use of Standard Contractual Clauses (SCCs) approved by the European Commission, adequacy decisions for certain countries, or other legally recognized mechanisms that ensure a level of data protection essentially equivalent to that in the EEA.

In particular, some data collected through third-party analytics or advertising tools (e.g., Meta Pixel, Google Analytics, TrustPilot, Reddit Pixel) may be processed or stored in such third countries. We take all necessary steps to ensure that your data remains protected in compliance with GDPR requirements.

8. Do You Share My Personal Data?

We do not sell your personal data. However, we may share certain data, such as cookies and online identifiers and usage data, with third-party analytics, advertising service providers and review platforms (e.g., Meta, Google, Reddit, Trustpilot) as outlined in Section 11.

We may share your details with a credit card processor, details of which will be provided to you separately.

If we share any of your personal data with third parties as described above, we will take appropriate steps to ensure it is processed securely and in accordance with your rights under applicable data protection laws.

Where any personal data is transferred outside of the European Economic Area (EEA), we will ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or adequacy decisions, so that your data is treated with a level of protection essentially equivalent to that guaranteed within the EEA.

9. Your Rights

Under applicable Data Protection Legislation, including GDPR and PDPO, you have the following rights in relation to your personal data:

9.1 Right of Access — you have the right to request a copy of the personal data we hold about you (commonly known as a subject access request). All such requests should be made in writing via the contact details in Section 10. There is normally no fee; however, if your request is manifestly unfounded or excessive, a reasonable administrative fee may be charged. We aim to respond within 20 calendar days and in any case no later than one month of receiving your request.

9.2 Right to Rectification — you have the right to request that we correct any inaccurate or incomplete personal data we hold about you without undue delay.

9.3 Right to Erasure ("Right to be Forgotten") — you have the right to request that we delete your personal data where there is no compelling reason for its continued processing, for example where the data is no longer necessary for the purpose for which it was collected.

9.4 Right to Restriction of Processing — you have the right to request that we restrict the processing of your personal data in certain circumstances, for example while we verify the accuracy of data you have contested.

9.5 Right to Data Portability — you have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.

9.6 Right to Object — you have the right to object at any time to the processing of your personal data for direct marketing purposes, or where processing is based on our legitimate interests.

9.7 Rights Related to Automated Decision-Making — you have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects on you.

9.8 To exercise any of the rights listed above, please contact us using the details provided in Section 10. We will respond to all legitimate requests within one month. We may need to verify your identity before processing your request.

9.9 If you are located in the EEA and are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority. If you are located in Hong Kong, you may contact the Office of the Privacy Commissioner for Personal Data (PCPD) at www.pcpd.org.hk.

10. How Do I Contact You?

To contact us about anything to do with your personal data and data protection, including to make a subject access request, please use the following details:

Email: info@tonmobile.com

11. Use of Analytics and Advertising Technologies

We use the following third-party technologies on our Platform and in our services to improve our performance and support the advertising efforts:

11.1 Google Analytics and Google Ads

We use Google Analytics to collect anonymized data about your interaction with our Platform and services (e.g., pages visited, time on page, referral source, device type). IP addresses are anonymized in compliance with GDPR.

We also use Google Ads, which may use this data to support remarketing — showing you ads across the web based on your interaction with our Platform.

These services may involve the transfer of personal data outside the European Economic Area (EEA). Where such transfers occur, they are protected by safeguards such as the European Commission's Standard Contractual Clauses (SCCs) or other legally recognized mechanisms.

Opt-out: https://tools.google.com/dlpage/gaoptout

Google's Privacy Policy: https://policies.google.com/privacy

11.2 Meta (Facebook) Pixel

We use Meta Pixel to measure advertising performance, understand user behavior, and show relevant ads on Meta platforms. Meta Pixel tracks actions such as visits to our Platform, clicks, and conversions. Data may be linked to your Facebook profile if you're logged into Facebook and may be used for personalized advertising.

Manage ad preferences: https://www.facebook.com/ads/preferences

Meta's Privacy Policy: https://www.facebook.com/about/privacy

11.3 Reddit Pixel

We use Reddit Pixel to track conversions and improve the effectiveness of our Reddit advertising campaigns. This may involve collecting IP addresses, browser data, and information about your actions on our Platform.

Manage Reddit ad preferences: https://www.reddit.com/personalization/

Reddit's Privacy Policy: https://www.reddit.com/policies/privacy-policy

11.4 Trustpilot

We use Trustpilot to collect and display customer reviews. When you interact with a Trustpilot widget on our Platform or receive an invitation to leave a review, Trustpilot may use cookies or similar tracking technologies to understand your interaction with their service. This may involve collection of personal data such as your IP address, browser details, and other device identifiers.

Manage Trustpilot cookies: through your browser settings or Trustpilot Cookie Policy

Trustpilot's Privacy Policy: https://legal.trustpilot.com/for-reviewers/end-user-privacy-terms

12. Cookies

Cookies means a small text file placed on your computer or device by our Platform when you visit certain parts of our site and/or when you use certain features of our services.

Our site and services may place and access certain first-party Cookies on your device. These Cookies are placed directly by us and are used solely by us to enhance and personalize your experience and to provide and improve our services. We ensure that your privacy and personal data are protected and respected at all times.

By using our site and services, you may also receive certain third-party Cookies. These are Cookies placed by websites, services, or parties other than us. Third-party Cookies are typically used for features like analytics, performance monitoring, or additional functionality. These Cookies are not essential to the functioning of our site or services and your use or experience will not be impaired if you refuse them. These Cookies are described in more detail in Part 11.

All Cookies used by and on our site and services are in accordance with current cookie laws, including GDPR.

Before any non-essential Cookies are placed on your device, you will be shown a clear prompt (e.g., a pop-up) requesting your consent to place them. By giving your consent, you enable us to offer you the best possible experience and service. You may choose to allow only first-party Cookies or block third-party ones. You may also withdraw your consent at any time.

Certain features of our site and services rely on Cookies to function correctly. These are considered "strictly necessary" Cookies under the law. Your consent is not required for these, but you may still block them in your browser settings. Please be aware that doing so may impact how our services function.

12.1 Managing and Deleting Cookies

In addition to the controls we provide, you can manage Cookies through your internet browser settings. Most browsers allow you to block all Cookies, only third-party Cookies, or specific Cookies. You may also delete Cookies already stored on your device.

Please note that deleting or blocking Cookies may remove saved preferences (such as login information) and affect the functionality and performance of our site or services.

We recommend keeping your browser and operating system up to date and referring to the official help and support resources from your browser or device manufacturer if you need assistance with privacy settings.

13. Complaints About Our Services

If you wish to make a complaint about our services or customer support, please refer to our Complaints Policy available at /complaints. All personal data submitted as part of a complaint will be processed in accordance with this Privacy Policy and treated with strict confidentiality.

14. Changes to this Privacy Policy

We may change this Privacy Policy from time to time. This may be necessary, for example, if the law changes, or if we change our business in a way that affects personal data protection.

Any changes will be made available on /privacy.

Intermob Limited · 79904463 · 8F, 30 Hollywood Road, Central, Hong Kong