Privacy Policy
Last updated: 26 October 2026
This policy explains how JDF Tech Limited, trading as MyPhoneCard (“MyPhoneCard”, “we”), collects and uses your personal data when you use myphonecard.co.uk or buy from us. We follow the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who we are
MyPhoneCard is a trading name of JDF Tech Limited (company number 08280019, registered in England and Wales), 396 Barking Road, London, E13 8HJ. We are the data controller for the personal data described in this policy. Contact: info@myphonecard.co.uk.
What we collect
- Account and contact details: your name, email address, phone number and billing or delivery address.
- Order details: what you buy, and the details needed to fulfil it, such as the mobile number to top up or a phone’s IMEI number for an unlock code.
- Payment information: payments are made by bank transfer from your own bank. We never see your card or online banking details. We keep a record of the payment and its reference.
- Messages: anything you send us by email, phone, our contact page or live chat.
- Reviews: if you review a product, the review and the name you give are shown publicly on the product page.
- Technical and security data: your IP address, browser type and the pages you request, recorded by our hosting in server and security logs.
- Usage data: if you accept analytics cookies, Google Analytics records how you use the site. See our cookie policy.
Details about other people
Many orders involve someone else: a top-up for a family member’s number, a SIM posted to a relative, or an unlock for a phone you are giving away. When you give us another person’s mobile number, name or address, you confirm that you are allowed to share it with us for that order. We use it only to fulfil the order and keep it with your order record.
Do you have to give us your data?
You do not have to, but we cannot fulfil an order without the details it needs. For example, we cannot apply a top-up without the mobile number, post a SIM without an address, or supply an unlock code without the IMEI. Your email address is needed so we can confirm your order and send codes or PINs.
Why we use it
- To fulfil your order (our contract with you): processing top-ups, sending voucher codes, PINs and unlock codes, posting SIM cards and answering your questions.
- To meet legal duties: keeping accounting and tax records, and responding to lawful requests from the authorities.
- To run and protect the shop (our legitimate interests): keeping the site secure, blocking attacks and spam, checking orders that look fraudulent and fixing problems.
- To deal with disputes and legal claims (our legitimate interests): see the next section.
- Analytics (your consent): only if you accept analytics cookies. You can change this at any time.
We do not sell your personal data, and we do not send marketing emails unless you have asked us to. We do not make decisions about you by automated means alone, and we do not build profiles of you for advertising.
Disputes, fraud and legal claims
We may use and keep your order records, payment references, messages, delivery records and the related technical data (such as IP addresses and order timestamps) to establish, exercise or defend legal claims. This includes payment disputes and claims raised with your bank, complaints, chargebacks, and claims that an order was not placed, not paid for or not received. We may also use it to investigate and report suspected fraud or misuse of the site, and share it with our bank, our legal and professional advisers, courts, the police or other authorities where that is necessary. Where we need to keep data for these reasons, we may keep it even if you ask us to delete it, for as long as the dispute or claim could arise or continues.
Who we share it with
- Our bank, to receive your payment and match it to your order.
- Mobile networks and top-up providers, only the details needed to apply a top-up or unlock.
- Our hosting and email provider, which stores the website and our emails securely and protects the site against attacks.
- Royal Mail and DHL, to deliver SIM cards and accessories in the UK and abroad. For international parcels this includes the delivery address and contact details the carrier needs.
- Google, for analytics, only if you have accepted analytics cookies.
- Our accountant and our legal and professional advisers, where they need it to advise us.
- The police, courts or other authorities, where the law requires it or to protect our legal rights.
Some of these providers may store data outside the UK. When they do, it is protected by safeguards approved under UK law.
Live chat and social media
The chat button on our site lets you message us on Facebook Messenger, WhatsApp or Telegram. Those services are run by Meta and Telegram, not by us, so your messages and account details are also handled under their own privacy policies. The links to our social media pages work the same way. If you would rather not use those services, email us instead.
How long we keep it
We keep order and payment records for six years, as required for tax and accounting. We keep your account until you ask us to close it. Messages are kept for as long as needed to deal with your query. Server and security logs are kept for a short period and then deleted by our hosting, unless they are needed for a dispute or a security problem. Records needed for a dispute or legal claim are kept until it is settled.
Your rights
You can ask to see the personal data we hold about you, to correct it, to delete it, to restrict or object to how we use it, or to receive a copy to take elsewhere. Where we rely on your consent, you can withdraw it at any time. Some rights have limits, for example we cannot delete records we must keep for tax or for a legal claim. To make a request, contact us. We may ask you to confirm your identity. We will reply within one month.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk.
Children
Our shop is for adults aged 18 and over. We do not knowingly collect personal data from children. If you think a child has given us their details, contact us and we will delete them.
Keeping your data safe
The site uses an encrypted (HTTPS) connection, account passwords are stored securely, our hosting monitors and blocks attacks, and access to customer data is limited to the people who need it to process your orders. If a data breach puts your rights at risk, we will tell you and the ICO as the law requires.
Changes to this policy
We may update this policy from time to time, for example when we add a payment method or a new service. The latest version is always on this page, with the date at the top.