Privacy Policy — Roamaly

Roamaly ("we", "us", "our") is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal data when you use our website and services at roamaly.com.

1. Information we collect

Account information: When you create an account, we collect your name, email address, and password. If you sign in with Google or Apple, we receive your name and email from those services.

Payment information: Payment details are processed directly by Stripe. We do not store your full card number. We receive a transaction reference and the last four digits of your card for order records.

Order data: We store your order history, eSIM profile details (ICCID, QR code), and usage data to provide our service.

Usage analytics: We may collect anonymised analytics data (pages visited, device type, country) to improve our service. We do not use third-party advertising trackers.

Support communications: If you contact us via live chat or email, we retain those conversations to provide support and improve our service.

2. How we use your information

To create and manage your account
To process orders and provision eSIMs
To send order confirmations, eSIM activation details, and usage alerts
To send optional marketing emails (only with your consent — you can unsubscribe at any time)
To detect and prevent fraud
To respond to support requests
To improve our products and services

3. Data sharing

We share personal data with trusted third-party service providers solely to deliver and improve our services. These providers include categories such as eSIM connectivity partners, payment processors, email delivery services, database hosting providers, and website hosting providers. Each provider processes data only for the purpose we engage them for and in accordance with applicable data protection laws.

We do not sell, rent, or trade your personal data to any third party.

4. Data retention

We retain your account and order data for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days, except where we are required to retain it for legal or financial reporting purposes.

5. Your rights

Under applicable data protection laws (including GDPR and UK GDPR), you have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data
Object to or restrict processing of your data
Request a portable copy of your data
Withdraw consent for marketing emails at any time

To exercise any of these rights, email us at support@roamaly.com.

6. Cookies

We use essential cookies to maintain your login session. We do not use advertising or tracking cookies. Analytics, if enabled, use privacy-friendly tools that do not track individual users across websites. For full details, see our Cookie Policy.

7. Security

We implement industry-standard security measures including encrypted connections (TLS), row-level security on our database, and Stripe Radar for payment fraud detection.

8. Children

Our service is not directed at children under 16. We do not knowingly collect data from children.

9. Changes to this policy

We may update this policy from time to time. We will notify you of significant changes by email or by a notice on our website.

10. Contact

If you have questions about this privacy policy, contact us at support@roamaly.com or visit our support page.