Privacy Policy

1. Scope

This policy applies to personal data processed by Roaming eSIM in connection with our Services. It does not apply to third-party websites, app stores, payment providers, or telecom partners that have their own privacy notices.

2. Data Controller and Contact

Roaming eSIM is the controller for personal data described in this policy, except where we act on behalf of a business partner.

• Privacy contact email: [email protected]
• Support channels: email and WhatsApp support listed on our site

3. Data We Collect

Information you provide directly

• Contact details such as name and email address
• Messages you send to customer support
• Newsletter preferences and marketing consents

Service and transaction information

• Plan selections, order details, activation status, and related service records
• Payment confirmation metadata from payment processors (we do not store full card numbers)
• Device or network identifiers needed to provision and secure service, where applicable

Technical and usage data

• IP address, browser/app version, referral pages, and timestamped log events
• Security and abuse-prevention signals, including captcha validation data
• Analytics or performance metrics collected using cookies or similar tools

4. Purposes and Legal Bases

We process personal data only where we have a valid legal basis. For EU/EEA, UK, and similar laws, this includes:

• Contract performance: to deliver eSIM services, process orders, and provide support.
• Legitimate interests: to secure our Services, prevent fraud, improve reliability, and communicate service updates.
• Consent: for optional marketing messages and certain non-essential cookies where required.
• Legal obligation: to comply with applicable tax, accounting, law-enforcement, and regulatory requirements.

5. How We Share Data

We share personal data only when necessary for service delivery or compliance, including with:

• Telecom and infrastructure partners that provide connectivity or activation support
• Payment providers and fraud-prevention vendors
• Cloud hosting, analytics, email, CRM, and customer support vendors acting as processors
• Professional advisers, auditors, and regulators where required by law
• A successor entity in a merger, acquisition, or asset transfer, subject to legal safeguards

We do not sell personal data for money. We also do not use personal data for cross-context behavioral advertising unless we obtain required permissions under applicable law.

6. International Data Transfers

Because roaming and cloud services are global, your data may be transferred outside your country. Where required, we use approved safeguards such as Standard Contractual Clauses, adequacy decisions, or equivalent legal mechanisms.

7. Data Retention

We keep personal data only for as long as needed for the purposes above, including to provide Services, resolve disputes, enforce agreements, and meet legal obligations. Retention periods vary by data type and legal requirements.

8. Your Privacy Rights

EU/EEA, UK, and Switzerland

• Right to access, correct, delete, or restrict your personal data
• Right to data portability
• Right to object to processing based on legitimate interests
• Right to withdraw consent at any time (where processing is consent-based)
• Right to lodge a complaint with your local supervisory authority

United States and other regions

• Depending on your state or country, you may have rights to know, correct, delete, or obtain a copy of your data.
• You may also have rights to opt out of certain data uses, including targeted advertising where applicable.
• We will not discriminate against you for exercising lawful privacy rights.

To exercise rights, contact us at [email protected]. We may need to verify your identity before fulfilling a request.

9. Cookies and Similar Technologies

We use cookies and related technologies for core functionality, security, performance measurement, and, when permitted, marketing. You can control cookies through browser settings and any consent banner provided in your region.

10. Data Security

We implement technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, or alteration. No system is fully secure, but we continuously improve our controls.

11. Children

Our Services are not directed to children under 16. We do not knowingly collect personal data from children where prohibited by law. If you believe a child has provided personal data, contact us so we can review and delete it where required.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If changes are material, we will provide an appropriate notice through our website, app, or email where required by law.

13. Contact Us

Questions or requests about this policy can be sent to [email protected].

If you are in the EU/EEA or UK, you may also contact your local data protection authority if you believe your rights were not handled correctly.