Legal

Privacy Policy

Last updated: 16 October 2026

1. Who we are

NUMIO LTD (company number 17448509, 128 City Road, London, EC1V 2NX, United Kingdom) operates numio-mobile.com and is the controller of your personal data. We process it under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Contact: [email protected].

2. Data we collect

Category	What it includes	Source
Contact data	Email address	You
Order data	Recipient mobile number, country, Operator, requested and final top-up amount, order reference and status	You, Operators
Payment data	Cardholder name, card type, last four digits, card issuing country, payment status. Full card details are handled only by our payment provider	Payment provider
Technical data	IP address, device and browser details, approximate location, log data	Your device, cookies
Support data	Messages you send us through the contact form or email	You

In some cases, we may ask for extra information to verify an order or prevent fraud.

3. How we use your data

Purpose	Lawful basis
Processing your order, delivering the top-up, sending order emails and verification codes	Performance of a contract
Answering support requests and complaints	Performance of a contract; legitimate interests
Preventing fraud and misuse, applying limits and sanctions screening	Legal obligation; legitimate interests
Accounting and tax records	Legal obligation
Running, securing and improving the Website	Legitimate interests
Analytics and marketing cookies, marketing emails	Consent, which you can withdraw at any time

We do not sell your personal data. We do not make decisions with legal or similarly significant effects about you based solely on automated processing, except automated fraud checks; you can ask for a human review of any declined order.

4. Who we share data with

Payment service providers, to process payments and prevent payment fraud.
Mobile Operators and our top-up distribution partners, to deliver the top-up.
Fraud prevention and sanctions screening providers.
IT, hosting and email service providers who act on our instructions.
Professional advisers, and law enforcement or regulators where the law requires it.

5. International transfers

To deliver a top-up, we share the recipient's number and order details with the Operator in the destination country. Some of our service providers may also process data outside the UK. Where data leaves the UK, we rely on UK adequacy regulations, appropriate safeguards such as the International Data Transfer Agreement, or, for delivering your order, the transfer being necessary to perform our contract with you.

6. How long we keep data

We keep order and payment records for 6 years to meet accounting, tax, fraud prevention and legal requirements. Support messages are kept for up to 2 years after the request is closed. Other data is kept only as long as needed for the purposes above.

7. Your rights

You can ask to access, correct or delete your data, restrict or object to its use, or receive it in a portable format. Where we rely on consent, you can withdraw it at any time. Contact [email protected]; we will respond within one month. Some data may need to be kept where the law requires it.

You can also complain to the Information Commissioner's Office (ICO): ico.org.uk.

8. Security

We use encryption in transit, access controls and trusted, PCI DSS-compliant payment providers to protect your data.

9. Children

Our service is for adults aged 18 and over. We do not knowingly collect data from children.

10. Changes

We may update this policy. The current version is always available on the Website.