Privacy Policy

Last updated: 11 September 2026

Who We Are

BrisqNet Limited ("BrisqNet", "we", "us", "our") operates the BrisqNet website, customer app and portal at app.brisqnet.com, and related services (together, the "Services"). We're responsible for the personal information described in this Policy. BrisqNet serves customers internationally. Our business address is 77 Efun Olaogun, Ibadan, Oyo State, Nigeria.

Scope of This Policy

This Policy explains how we collect, use, share, and protect personal information when you:

browse the BrisqNet website
create or manage a BrisqNet account
purchase, install, or use a BrisqNet eSIM or data plan
send or receive Gift Data, or earn or use BrisqMiles
contact BrisqNet support

We serve customers internationally. Wherever you're located, we apply the standards in this Policy, and we explain below the rights that may apply to you depending on where you live, including under UK GDPR, EU GDPR, or other applicable data protection law.

Information We Collect

Account information — name, email address, phone number (optional), password (stored as a salted hash, never in plain text), country/market, and preferred currency.

Order and product information — the plans and destinations you purchase, order references, delivery status, eSIM installation status, and usage of BrisqMiles or Gift Data.

Payment information — handled directly by our payment providers. We receive confirmation that payment succeeded, a masked reference to the payment method (e.g. card type and last 4 digits), and billing details needed for receipts and fraud checks. We do not receive or store your full card number, CVV, or equivalent.

Support communications — anything you send us via email, chat, or contact forms, including attachments you choose to share.

Technical and usage information — device type, operating system, browser, IP address, approximate location derived from IP, pages visited, and in-product interactions, collected through analytics tools described in Cookies & Analytics.

Data usage on the network— how much of a plan's data allowance you've used, so we can show you usage in the app and warn you before you run out. We don't monitor the content of your internet traffic.

How We Use Your Information

We use personal information to:

create and manage your account, and process and fulfil your orders
deliver eSIMs, activate plans, and provide usage/top-up features
process payments and refunds, and prevent fraud and chargeback abuse
provide customer support
operate BrisqMiles and Gift Data
send service communications (order confirmations, low-data alerts, security notices)
send marketing communications, only where you've opted in
understand how the Services are used, to fix problems and improve them (via product analytics)
comply with legal, tax, and regulatory obligations

Our Legal Bases for Processing

Depending on where you're located, data protection law that applies to you — such as UK GDPR, EU GDPR, or Nigeria's Data Protection Act — may require us to have a lawful basis for processing your personal data. Where this applies, we rely on:

Contract — processing needed to create your account, fulfil orders, deliver eSIMs, and provide support.
Consent — for marketing communications and non-essential cookies/analytics, which you can withdraw at any time.
Legitimate interests — for fraud prevention, service analytics, and improving the Services, balanced against your rights and expectations.
Legal obligation — for tax, accounting, and regulatory record-keeping.

Cookies & Analytics

We use cookies and similar technologies as described in full in our Cookie Policy. In summary:

Essential cookieskeep you logged in, remember your basket, and secure checkout. These don't require consent because the Services can't function without them.
We use optional analytics technologies to understand how the website and apps are used and to improve the service. Optional analytics are consent-gated and are not required for the Services to work.
Google Analytics 4 is used on the public website (www.brisqnet.com) only after you allow Analytics. Advertising storage and ad personalisation stay disabled unless BrisqNet later introduces a separate advertising consent mechanism.
Microsoft Clarity is used for behavioural analytics on the public website and customer apps. Clarity may provide interaction and session analysis such as heatmaps and session recordings. Analytics cookies and recordings start only after you allow analytics. We do not use Clarity for advertising, and we do not send email addresses or other direct personal identifiers to Clarity.
PostHog may be used for product analytics where configured.
On the customer apps (app.brisqnet.com, iOS, and Android), we may also process consented product-usage events through BrisqNet systems to improve the service.

On the public website, optional analytics stay off until you allow Analytics through the cookie banner or Cookie settings. On the customer apps, analytics stay off by default until you explicitly choose Allow analytics.

You can withdraw analytics consent at any time:

on the public website through Cookie settings
in the customer app through Account → Privacy

Analytics consent is separate from push notification permissions and from marketing email or other communication preferences. Necessary operational processing continues if you reject analytics, including authentication, checkout, payments, eSIM fulfilment, error reporting needed to keep the Services working, and push notifications where you have separately allowed them.

Sensitive information is excluded or masked from optional analytics where applicable, including passwords, payment and card data, payment tokens, authentication tokens, eSIM activation details, QR content, ICCID/IMSI/EID/MSISDN, and SM-DP+ / activation codes.

You can also manage cookies through your browser settings.

Authentication & Account Security

When you sign in, we use secure, industry-standard authentication practices, including hashed and salted password storage and session tokens. If you use a third-party sign-in method where offered, that provider handles your credentials directly — we only receive the profile information needed to create or match your account.

Payment Information

Payments are processed securely through our payment providers, currently Stripe and Paystack, both of which are independently regulated payment institutions with their own privacy and security obligations (including PCI-DSS compliance for card data). We recommend reviewing their respective privacy policies for how they handle your payment details directly.

We share personal information only where necessary, with:

Payment providers (including Stripe and Paystack) — to process payments and refunds
Network partners — limited information needed to provision and activate your eSIM on their network (e.g. device/eSIM identifiers), not your full account profile
Analytics providers and error monitoring tools — as described above
Cloud infrastructure providers — to run the website, app, and database securely
Professional advisers and regulators — where required by law, or to establish, exercise, or defend legal claims
A buyer or successor, if BrisqNet is involved in a merger, acquisition, or asset sale, subject to equivalent protections for your data

We do not sell your personal information to third parties.

International Data Transfers

Because BrisqNet and its service providers operate internationally, personal information may be processed in countries other than the country where you live. Where required by applicable law, we use appropriate safeguards for international transfers. For customers in the UK or EEA, this includes recognised safeguards such as Standard Contractual Clauses or adequacy decisions, where applicable.

Data Retention

We keep personal information for as long as necessary to provide the Services, meet legal and tax obligations, resolve disputes, and enforce our agreements. As a general guide:

account and order data is retained for the life of your account and for a reasonable period afterwards for accounting and fraud-prevention purposes
payment records are retained as required by financial regulation
support communications are retained for a reasonable period to maintain service quality

You can ask us to delete your data earlier, subject to the exceptions described in Your Rights.

Your Rights

If UK GDPR, EU GDPR, or an equivalent local law applies to you, you generally have the right to:

access the personal data we hold about you
rectify inaccurate or incomplete data
eraseyour data ("right to be forgotten"), subject to legal exceptions
restrict or object to certain processing, including processing based on legitimate interests
port your data to another provider, where technically feasible
withdraw consent at any time, without affecting processing that already took place
lodge a complaint with a supervisory authority (see Contact & Complaints)

To exercise any of these rights, contact us at privacy@brisqnet.com. We may need to verify your identity before acting on a request.

Children

The Services are not directed at children, and we don't knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, please contact us so we can remove it.

Security

We use technical and organisational measures appropriate to the sensitivity of the data involved, including encryption in transit, access controls limiting who can view customer data, hashed credential storage, and monitoring for suspicious activity. No system is completely secure, and we encourage you to use a strong, unique password and to contact us immediately if you suspect your account has been compromised.

Automated Decisions & Fraud Prevention

We use automated checks (for example, rate limiting and fraud-risk scoring) to protect the Services against abuse, such as fraudulent orders or Gift Data/BrisqMiles abuse. These checks may result in an order being declined or an account being flagged for manual review. They don't produce legal or similarly significant effects based solely on automated processing without the option of human review — if you believe an automated decision affected you unfairly, contact us and we'll review it.

Support Communications

When you contact BrisqNet support, we use the information you provide to respond to your query, and we may keep a record of the conversation to maintain support quality and resolve related issues in the future.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or legal requirements. We'll post updates here with a new "Last updated" date, and where changes are material, we'll take reasonable steps to notify you.

Contact & Complaints

For any privacy question or to exercise your rights, contact us at privacy@brisqnet.com or +234 815 024 5529 — please contact us first so we can try to resolve your concern directly.

BrisqNet

77 Efun Olaogun

Ibadan, Oyo State

Nigeria

You also have the right to lodge a complaint with the data protection authority in your country of residence. This may include the Nigeria Data Protection Commission (NDPC). If you're in the UK or the EEA, you may also have the right to complain to the relevant local supervisory authority.