Privacy Policy

CargaCell is a website operated in Spain by Freddy Angel Poll Garcia as a self-employed professional. We currently offer top-ups for Cuban mobile lines. We are the data controller for the personal data you provide when using our services.

We collect only the information necessary to provide the service:

• Account data: name and email address. Optionally, your Telegram account if you link it for authentication.
• Transaction data: destination phone number, operator, country, top-up amount and order history.
• Payment data: payments are processed through MONEI, our secure payment gateway. We do not store card details or financial credentials on our servers.
• Technical data: IP address, browser type and session times, for security and diagnostic purposes.
• Analytics (optional): if you consent, we collect anonymous usage data to improve the service. You can disable it in the footer at any time.

• Process and deliver the top-ups you request.
• Manage your account and authenticate your identity.
• Send you transaction confirmations and relevant notifications.
• Prevent fraud, abuse and illegal activities.
• Comply with applicable legal obligations.
• Improve the service through aggregated and anonymous analysis (only if you have given consent).

To provide the service, we share minimal and necessary data with trusted providers:

• Top-up provider: DT One receives the destination phone number and amount to execute the transaction. For Cuban mobile lines, DT One is the service provider that maintains the connection with ETECSA.
• Payment gateway: MONEI processes financial transactions securely.
• Transactional email service: sends account confirmations, verifications and notifications.

We do not sell, rent or transfer your personal data to third parties for commercial purposes.

We retain your account data as long as it remains active. Transaction records are kept for the legally required period (generally 5 years) to comply with tax and audit obligations.

If you request account deactivation, identifiable personal data is removed from active access, but historical transaction records may be retained in anonymized form as required by law.

We apply reasonable technical and organizational measures to protect your data:

• TLS encryption on all communications between your browser and our servers.
• Passwords stored with high-cost cryptographic hashing, never in plain text.
• Short-duration session tokens with automatic secure renewal.
• HttpOnly session cookies inaccessible from JavaScript.

We recommend using a unique password and keeping your email account protected.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Rectify incorrect or incomplete data.
• Request deletion of your data ('right to be forgotten').
• Object to or restrict certain processing.
• Request portability of your data in a readable format.

To exercise any of these rights, contact us through our contact page.

We use strictly necessary cookies to keep your session active (HttpOnly access cookie). If you have enabled analytics, we may use an anonymous analytics cookie. You can disable analytics in the footer at any time without affecting service functionality.

We may update this policy occasionally. We will notify significant changes by email or through a prominent notice on the platform. Continued use of the service after notification implies acceptance of the updated policy.

If you have questions about this policy or wish to exercise your rights, contact us through our contact page.