Privacy Policy

Privacy Policy of vipnumbers247.co.uk · Last updated: 5 November 2026

This Privacy Policy explains which Personal Data vipnumbers247.co.uk collects from its Users, which services we use to run the shop, why the Data is used, where it is processed and what rights Users have under UK data protection law (the UK GDPR and the Data Protection Act 2018).

Owner and Data Controller

JDF Tech Limited, trading as VIP Numbers 247
Company number 08280019 (England and Wales)
396 Barking Road, London E13 8HJ, United Kingdom
Owner contact email: vipadmin@vipnumbers247.co.uk

Types of Data collected

The Personal Data that this website collects, by itself or through third parties, includes: first name, last name, billing and delivery address, email address, phone number, company name (if given), order details (the mobile numbers bought, price, payment method and order history), account login details, messages sent to us, the digits or patterns described in a custom number request, payment references (bank transfer payer name, or wallet address and transaction ID for USDT), IP address, device and browser information, Usage Data and Trackers.

Fields marked as required at checkout are needed to take and deliver an order; without them we cannot supply the SIM. Other fields are optional. Users who give us Personal Data about another person, for example when buying a number as a gift, confirm they are allowed to do so.

Mode and place of processing the Data

Methods of processing

We take appropriate security measures to prevent unauthorised access, disclosure, change or destruction of the Data. Processing is carried out on computers and secure online systems, following procedures strictly related to the purposes listed. Besides the Owner, the Data may be accessible to staff involved in running the shop (sales, dispatch and customer support) and to the external service providers named below, acting as Data Processors.

Place

The Data is processed at the Owner’s offices in London and wherever the providers listed below operate. Where Data is transferred outside the UK, the transfer relies on UK adequacy regulations or the UK International Data Transfer Agreement or Addendum.

Retention time

• Order, invoice and payment records: six years after the end of the financial year of the order, as UK tax law requires.
• Customer accounts: until the User asks us to close the account (order records are then kept as above).
• Support messages and custom number requests: up to two years after our last contact.
• Mailing list: until the User unsubscribes.
• Server and security logs: up to 90 days.
• Consent to advertising cookies: the choice is stored in the User’s browser until they change it or clear it.

The purposes of processing

The Data is collected so that we can take payments, process and deliver orders, move numbers between networks, register and sign in Users, contact Users about their orders, answer support and custom requests, host and secure the website, prevent fraud, meet our legal obligations and, with consent, measure our advertising.

Detailed information on the processing of Personal Data

Handling payments

SumUp (card payments): card payments at checkout are processed by SumUp Limited. We never see or store full card details.
Personal Data processed: name, billing address, email address, payment information, IP address.
Place of processing: United Kingdom and European Union. SumUp privacy notice.

PayPal: PayPal (Europe) S.à r.l. et Cie, S.C.A. processes PayPal payments and PayPal card payments. PayPal may carry out its own fraud checks.
Personal Data processed: name, email address, billing and delivery address, payment information.
Place of processing: see the PayPal privacy notice.

Bank transfer: Users may pay directly into our UK bank account. We match the payment to the order using the order number.
Personal Data processed: payer name, amount, payment reference.
Place of processing: United Kingdom.

USDT (cryptocurrency): Users may pay in USDT to a wallet address we provide. Transactions on public blockchains are visible to anyone and cannot be erased.
Personal Data processed: wallet address, transaction ID, amount.
Place of processing: the public blockchain network used.

Processing and delivering orders

WooCommerce order processing: orders are recorded in our WooCommerce shop, hosted on our own website.
Personal Data processed: order details, name, addresses, email, phone number.
Place of processing: see Hostinger below.

SIM delivery: SIM cards are posted by Royal Mail in the UK, and by DHL or UPS for international orders.
Personal Data processed: name, delivery address, phone number (for courier updates).
Place of processing: United Kingdom, and the destination country for international parcels.

Number transfers (PAC) and eSIM: when a User moves a number to their own network with a PAC code, or asks us to convert it to an eSIM, the receiving network handles that request under its own privacy policy. We only share what is needed to complete the request.
Personal Data processed: the mobile number, name, and the details the network requires.
Place of processing: United Kingdom.

Registration and authentication

Customer accounts: Users can create an account to see orders and save addresses. Passwords are stored encrypted.
Personal Data processed: name, email address, password, addresses.
Place of processing: see Hostinger below.

Contacting the User

Order emails: we send confirmations, dispatch notices and messages needed to complete an order.
Personal Data processed: name, email address, order details.
Place of processing: see Hostinger below.

Mailing list: we only send offers or new-number alerts to Users who have opted in. Every email has an unsubscribe link.
Personal Data processed: email address, name.
Place of processing: see Hostinger below.

Managing support and contact requests

Email, phone and contact form: messages sent through the contact page, the custom number request form or by email are used to answer the User.
Personal Data processed: name, email address or phone number, message content, requested digits.
Place of processing: United Kingdom and see Hostinger below.

WhatsApp, Telegram and Messenger: if a User chooses to message us on these apps, the messages are handled by the app provider under its own terms.
Personal Data processed: phone number or profile name, message content.
Place of processing: see the provider’s privacy notice (Meta for WhatsApp and Messenger, Telegram for Telegram).

Platform services and hosting

Hostinger: our website, database and order emails are hosted by Hostinger International Ltd, including its content delivery network (CDN) and LiteSpeed caching, which speed up the site.
Personal Data processed: all Data stored in the shop, IP address, Usage Data.
Place of processing: European Union and the CDN locations used to serve pages. Hostinger privacy policy.

Advertising measurement

Google Ads conversion tracking: with the User’s consent, Google Ads (Google Ireland Limited) measures which of our adverts lead to visits and orders. Without consent, Google Consent Mode keeps these cookies switched off.
Personal Data processed: Trackers, Usage Data, IP address.
Place of processing: European Union and United States. Google privacy policy.

Security and fraud prevention

Order checks: we may check high-value orders, unusual payment patterns or mismatched details before dispatch, to protect Users and the shop from fraud.
Personal Data processed: order details, name, addresses, IP address, payment information.
Place of processing: United Kingdom.

Website security: a security plugin and server logs record login attempts and suspicious requests so we can block attacks.
Personal Data processed: IP address, browser information, login attempts.
Place of processing: see Hostinger above.

Cookie Policy

This website uses the following Trackers. Essential ones are needed for the shop to work and are always on. Advertising Trackers are only set after the User clicks “Accept” on the cookie banner.

Changing your choice: use the “Cookie settings” link at the bottom of every page to reopen the banner, or clear cookies in your browser settings. Choosing “Essential only” does not affect buying a number.

Further information for Users

Legal basis of processing

• Contract: to take, deliver and support an order, and to manage a customer account.
• Legal obligation: to keep tax and accounting records and to respond to lawful requests from authorities.
• Legitimate interests: to answer enquiries, prevent fraud, secure the website and improve the shop, always balanced against the User’s rights.
• Consent: for advertising cookies and the mailing list. Consent can be withdrawn at any time.

Your rights under the UK GDPR

• Access: ask for a copy of the Personal Data we hold about you.
• Rectification: have inaccurate or incomplete Data corrected.
• Erasure: have your Data deleted where there is no reason to keep it (we must keep invoices for six years).
• Restriction: ask us to pause processing while a concern is checked.
• Objection: object to processing based on legitimate interests, and to direct marketing at any time.
• Portability: receive the Data you gave us in a common machine-readable format.
• Withdraw consent: at any time, without affecting earlier processing.
• Complain: to the Information Commissioner’s Office (ICO), ico.org.uk, telephone 0303 123 1113.

How to exercise these rights

Email vipadmin@vipnumbers247.co.uk or write to the address above. We answer within one month, free of charge in most cases, and may ask for proof of identity first. We would welcome the chance to resolve any concern before you contact the ICO.

Additional information about Data collection and processing

Legal action

Personal Data may be used by the Owner in legal proceedings, or where required by law or at the request of public authorities.

Automated decisions

We do not make decisions with legal or similarly significant effects about Users by automated means alone. Payment providers may run automated fraud screening under their own policies.

Children

This website is not aimed at children under 16, and we do not knowingly collect their Data. A parent or guardian should place orders for younger Users.

Changes to this privacy policy

We may update this policy, for example when we add a payment method or service. The date at the top shows the latest version. Significant changes will be highlighted on this page.

Definitions

• Personal Data (or Data): any information that identifies, or could identify, a living person.
• Usage Data: information collected automatically when the website is used, such as IP address, browser type, pages visited and time spent.
• User: the person using this website or buying from it.
• Data Controller (or Owner): JDF Tech Limited, which decides why and how Personal Data is processed.
• Data Processor: a provider that processes Personal Data on behalf of the Owner, such as our hosting or payment providers.
• Tracker: any technology that stores or reads information on the User’s device, such as cookies or browser storage.