Privacy notice
Which personal details Wavirel holds, what it does with them, who else sees them and how you stay in control.
Last updated: 6 October 2026
Who is responsible
This notice covers personal data handled through the Wavirel website and the services ordered on it. The business behind the Wavirel brand decides the purposes and means of that handling.
Information we hold
We hold only what is needed to run and bill your services, grouped as follows:
- Your account: name, email, phone number, language preference, and your password, kept in a one-way scrambled form that cannot be turned back into the original.
- Your orders: plan and term, address, start date and SIM type; if you are bringing a number, the number, the porting code if you gave one and your current provider; plus any note you wrote.
- Your services: each line or connection, its number or address, its dates, the SIM status and the agreed price.
- Usage: monthly totals of data, minutes and texts that our staff enter. The site keeps no record of individual calls or browsing sessions.
- Bills: each line, amount, VAT and whether it has been paid.
- Payment attempts: amount and currency, the exchange rate where one applied, the outcome and the Trezuz reference. Card details never reach us; they stay with Trezuz.
- Change and cancellation requests: what you asked for, your note and our decision.
- Contact form messages: your name, email, optional phone number, topic and text.
- Security data: sign-in sessions; your IP address, looked at briefly to run the site and to slow down abuse such as repeated password guesses; and a log entry each time a staff member opens your personal details.
A postcode typed into the coverage checker is used for that one search and is not saved.
What we use it for, and on what basis
- Running your account and delivering what you buy: necessary to perform our contract with you.
- Billing and bookkeeping: required by tax and accounting rules.
- Replying to contact form messages: based on the consent you give in that form.
- Protecting the site and your account and preventing fraud: our legitimate interest.
Our emails are about your service only: order and payment confirmations, bills, reminders and answers to your requests. We send no marketing.
Who else sees it
Your data is never sold. A few providers receive the part they need to help us run Wavirel:
- Trezuz, our card payment provider, when you pay a bill: your name, email, phone, billing address, account number, language, the amount and the bill reference. Trezuz handles your card details under its own privacy notice.
- The email service that delivers our messages to you.
- The hosting company whose servers run this site and its database.
- Your current provider, if you ask to bring your number to Wavirel.
We also disclose data where the law obliges us to, such as to tax authorities or in response to a lawful request.
Security and staff access
Passwords, and the tokens behind the links in our emails, are stored only as one-way hashes, and each email link stops working after a single use. Your sign-in cookie is out of reach of page scripts, and the server keeps only a hash of it.
Staff sign in to the back office with a password and a second verification step. They can open a customer's personal details only when their task calls for it and their account has been granted that permission, and every such opening is logged.
Retention
- Account, order and service records: as long as your account stays open, then only for as long as an unpaid bill, a dispute or a legal duty needs them.
- Bills and payment records: for the period tax and accounting law sets.
- Sign-in sessions: closed when you sign out, or after 30 days of inactivity.
- Links in our emails: one use each; an email confirmation link expires after 48 hours, an email change link after 24 hours and a password reset link after 1 hour.
Anything else is kept no longer than the purposes above require. Ask us if you want specifics.
Your rights
Under data protection law you may ask us to:
- send you a copy of what we hold about you;
- fix anything inaccurate or incomplete (most details you can edit yourself in My Wavirel);
- delete what we no longer need, apart from records such as bills that we must legally keep;
- restrict how your data is used, or object to uses that rely on our legitimate interest;
- hand over the data you gave us in a portable format.
Send requests to support@wavirel.shop or through the contact page.
If our reply does not satisfy you, a complaint can go to the data protection authority where you live or work.
Updates to this notice
When the way we handle personal data changes, we revise this notice and change the date shown under its title.