Your privacy matters to us. This policy explains, in plain language, what personal information we collect, why, how we protect it, and the rights you have over it.
This website is operated by [Legal entity name] ("we", "us", "our"), a company registered in [country] under number [number], at [registered office address]. For the purposes of data-protection law, we are the data controller of the personal information described here.
We collect only what we need to provide the unlocking service and run our business:
We do not ask for or store your device passcode, your Apple ID or Google account, or your full payment card details. Card payments are handled entirely by our payment processor (section 5).
On its own, an IMEI identifies a device. But when we hold it alongside your email address or order, it becomes personal data relating to you — and we treat it with the same care as any other personal information in this policy. We use it only to provide your unlock and to support your order, and we never sell it.
Under data-protection law we must have a lawful basis for using your information. Ours are:
| What we do | Lawful basis |
|---|---|
| Process and deliver your unlock; provide support; take payment on success | Performance of a contract with you |
| Prevent fraud, keep records of orders and consent, secure our systems, and defend against improper chargebacks | Our legitimate interests (running a secure, sustainable business) |
| Send you service updates about your order | Performance of a contract |
| Analytics and any marketing cookies | Your consent (which you can withdraw) |
| Comply with legal, tax and accounting obligations | Legal obligation |
Card payments are processed by Stripe, a PCI-DSS compliant payment provider. When you pay, your card details go directly to Stripe over an encrypted connection — we never see or store your full card number. Stripe processes your payment data as an independent controller under its own privacy policy, which we encourage you to read at stripe.com/privacy.
We receive from Stripe only what we need to manage your order — for example, confirmation of payment, the result, and a partial reference (such as the last four digits) to identify the transaction.
We operate internationally and serve customers around the world, so your information may be processed in countries outside the one where you live. Where we transfer personal data across borders, we take steps to ensure it remains protected — for example, relying on providers that offer recognised safeguards such as Standard Contractual Clauses.
We keep your information only as long as we need it: to provide your unlock, support you, keep records of the order and your consent, and meet legal, tax and accounting obligations. When we no longer need it, we securely delete or anonymise it.
We use appropriate technical and organisational measures to protect your information — including encrypted connections (HTTPS), access controls, and limiting who can see your data to those who need it to do their job. No system is perfectly secure, but we work to keep your information safe and to respond quickly if something goes wrong.
Depending on where you live, you have rights over your personal information. Under UK/EU GDPR these include:
| Right | What it means |
|---|---|
| Access | Ask for a copy of the information we hold about you. |
| Rectification | Ask us to correct information that's wrong or incomplete. |
| Erasure | Ask us to delete your information, where we no longer need it. |
| Restriction | Ask us to limit how we use your information. |
| Portability | Ask for your information in a portable format. |
| Object | Object to processing based on our legitimate interests. |
| Withdraw consent | Withdraw any consent you gave, at any time. |
To exercise any of these, contact us using the details in section 14. You also have the right to complain to your local data-protection authority — in the UK, the Information Commissioner's Office (ICO) at ico.org.uk.
Our service is not directed at children, and we do not knowingly collect information from anyone under 18. If you believe a child has provided us with personal information, please contact us and we will delete it.
We may update this policy from time to time. When we do, we'll change the "last updated" date above, and for significant changes we'll take reasonable steps to let you know.
For any privacy question or to exercise your rights:
[Legal entity name]
[Registered address]
Email: privacy@iphoneofficialunlock.com
[If appointed] Data Protection Officer: [name / email]