Privacy notice
Pursuant to Article 13 of Regulation (EU) 2016/679 (GDPR). In force from 29 October 2026.
This notice explains how we process the personal data of people who visit thebigtown.com, buy our eSIMs, request support or take part in our partner programme.
1. Data controller
The Big Town is a brand of Line2LEAD S.r.l., with registered office at Via Santa Fumia 99, 00134 Rome, Italy, VAT no. 17557151002, which is the data controller (the "Controller"). For any privacy request you can write to: admin@line2lead.com
2. What data we collect
- Browsing data: IP address, browser and device type, pages visited, date and time, collected automatically by the systems that run the website.
- Account and order data: first and last name, email, phone, country, address and billing details (including tax code or VAT number, if you request an invoice), eSIMs purchased, destinations and periods of use.
- eSIM technical data: activation code and, where needed for support, the device model.
- Payment data: payments are handled by ROX Pay. We do not receive or store your full card details.
- Support requests: the data you send us via contact form, chat, WhatsApp or email.
- Partner programme: contact and company details of agencies and professionals who join the affiliate programme.
- Email communications: newsletter subscription, preferences expressed and, if you have consented, interactions with our emails, as described in the privacy notice on the tracking of email communications.
Providing the data needed for purchases and support is mandatory: without it we cannot provide the service. Other data is optional.
3. Why we process data, on what basis and for how long
| Purpose | Legal basis | Retention |
|---|---|---|
| Managing accounts and orders, activating and delivering eSIMs | Performance of the contract (Art. 6.1.b GDPR) | For the duration of the relationship and then 24 months |
| Issuing invoices and complying with tax and accounting obligations | Legal obligation (Art. 6.1.c GDPR) | 10 years |
| Responding to support and information requests | Performance of the contract or pre-contractual measures (Art. 6.1.b GDPR) | 24 months from closure of the request |
| Managing the partner programme and commissions | Performance of the contract (Art. 6.1.b GDPR) | For the duration of the partnership and then 10 years for accounting data |
| Sending newsletters and offers | Consent (Art. 6.1.a GDPR); for customers, offers on similar services without consent, with the right to object at any time (Art. 130(4), Italian Privacy Code) | Until consent is withdrawn or you object |
| Measuring email opens and clicks | Consent for individual measurement; no consent for aggregate statistics | Maximum 6 months for individual data |
| Ensuring website security and preventing fraud | Legitimate interest (Art. 6.1.f GDPR) | 12 months |
| Defending our rights in the event of disputes | Legitimate interest (Art. 6.1.f GDPR) | For the duration of the dispute |
Further information:
4. Who we share data with
Data is processed by the Controller's authorised staff and, only for the necessary activities, by providers acting as data processors under Article 28 of the GDPR:
- Odoo S.A.: website, e-commerce and management platform.
- ROX Pay: payment processing.
- ConnyLine: sending of SMS, newsletters and emails, a platform of Line2LEAD S.r.l.
If you buy our eSIMs on Amazon, Amazon processes your data as an independent controller under its own privacy notice.
If you buy through a partner agency, the agreement is made directly between you and the agency, which processes your data as an independent controller under its own privacy notice.
Data may be disclosed to authorities where required by law. We do not sell your data to third parties.
5. Transfers outside the European Union
Data is processed within the European Union.
6. Your rights
You may at any time request access to your data, rectification, erasure, restriction of processing and portability. You may object to processing based on legitimate interest and, at any time, to receiving commercial communications. Where processing is based on consent, you may withdraw it at any time, without affecting processing already carried out (Articles 15-22 GDPR).
To exercise your rights, write to: admin@line2lead.com
We respond within one month, extendable by two months for complex requests.
7. Complaints
You may lodge a complaint with the Italian Data Protection Authority, Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the supervisory authority of the EU country where you live.
8. Changes
We may update this notice. The version in force is always published on this page, with the date of the last update.
Last updated: October 2026