Privacy Policy
Last updated 15 October 2026
Draft — under legal review before launch. Details in [brackets] are still to be confirmed.
Controller
Megative PL sp. z o.o., ul. Odrodzenia 27/4, 59-140 Chocianów, Poland, is the controller of your personal data. Privacy contact: hey@heykolega.com.
What we collect
Account data (email, name); order data (plan, destination, amount); payment status (card details are handled by our payment provider); eSIM data (ICCID, activation details, usage status); support messages; technical data (IP address, browser, cookies).
Why (legal basis)
To provide the service you buy (contract); to meet tax and accounting duties (legal obligation); to prevent fraud and keep the service secure (legitimate interest); to send marketing only if you agree (consent).
Who we share it with
Service providers that help us run Kolega: payment processing, eSIM supply and network partners, hosting and email delivery. See our Subprocessors page. We do not sell your personal data.
International transfers
Some providers may process data outside the EEA. Where they do, we use safeguards such as EU Standard Contractual Clauses.
How long we keep it
Account data while your account is open; order and invoice records for the period required by Polish tax law (usually 5 years); support messages up to 2 years.
Your rights
Access, correction, deletion, restriction, portability, objection, and withdrawing consent at any time. You may complain to the Polish supervisory authority, UODO (Prezes Urzędu Ochrony Danych Osobowych), or your local authority.
Children
The service is not aimed at children under 16.