Privacy Policy

1. Who we are

Roamavia provides eSIM connectivity and prepaid mobile data services for travellers.

This Privacy Policy explains what personal information we collect, why we use it, how it is shared, and the rights you may have in relation to that information.

2. Information we collect

Depending on how you use Roamavia, we may collect:

• Your name and email address.
• Account and authentication information.
• Information about your Roamavia balance and transactions.
• eSIM information, including identifiers such as an ICCID and provisioning or installation information.
• Information relating to purchases and payment status.
• Technical information such as browser, device, IP address, and basic security or diagnostic data where this is generated by our website or service providers.
• Messages and information you provide when contacting Roamavia support.

3. Payment information

Payments are processed by Stripe.

Roamavia does not need to store your full payment card number or card security code on its own systems. Payment information is handled by Stripe in accordance with its own privacy and security practices.

We may receive limited information about a payment, such as its status, amount, transaction reference and other information needed to fulfil or reconcile your purchase.

4. How we use your information

We may use personal information to:

• Create and manage your Roamavia account.
• Authenticate you and keep your account secure.
• Process purchases and maintain your Roamavia balance.
• Provision, manage and support your eSIM.
• Provide mobile data connectivity and related services.
• Prevent fraud, misuse and unauthorised access.
• Investigate failed, duplicated or disputed transactions.
• Provide customer support.
• Maintain and improve the reliability and security of Roamavia.
• Comply with legal, regulatory and accounting obligations.

5. Legal bases for processing

Where UK data protection law applies, we process personal information where this is necessary to perform our contract with you, comply with legal obligations, pursue legitimate interests, or where you have given consent when consent is required.

Legitimate interests may include protecting Roamavia and its customers from fraud, maintaining service security, resolving payment or technical issues, and improving our services.

6. Service providers

We use third-party service providers to operate Roamavia.

These may include providers used for payment processing, authentication, database hosting, website hosting, email delivery, eSIM provisioning, telecommunications connectivity and technical infrastructure.

Examples include Stripe, Supabase, Vercel, Resend and our eSIM connectivity provider.

These providers may process personal information on our behalf or as independent controllers depending on the service they provide.

7. International data transfers

Some of our service providers may process or store information outside the United Kingdom.

Where required, appropriate safeguards may be used to protect personal information when it is transferred internationally.

8. How long we keep information

We keep personal information only for as long as it is reasonably necessary for the purposes described in this policy, including providing your account and services, resolving disputes, preventing fraud, maintaining records and meeting legal or accounting requirements.

Different types of information may be retained for different periods.

9. Security

We use reasonable technical and organisational measures designed to protect personal information from unauthorised access, alteration, disclosure or loss.

No online service can guarantee absolute security, but we take reasonable steps to reduce the risk of misuse or unauthorised access.

10. Your rights

Depending on the law that applies to you, you may have rights in relation to your personal information, including the right to:

• Request access to personal information we hold about you.
• Ask us to correct inaccurate information.
• Ask us to delete information in certain circumstances.
• Ask us to restrict certain processing.
• Object to certain processing.
• Request data portability where applicable.
• Withdraw consent where processing is based on consent.

Some information may need to be retained where we have a legal obligation or legitimate reason to keep it.

11. Cookies and similar technologies

Roamavia may use cookies or similar technologies that are necessary for account authentication, security, website functionality and user sessions.

If we introduce non-essential analytics, advertising or similar technologies that require consent, we will provide appropriate information and controls.

12. Children

Roamavia is not intended to collect personal information from children where doing so would require parental consent or otherwise breach applicable law.

13. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will be published on this page with an updated revision date.

14. Contact

For privacy questions or requests, contact:

hello@roamavia.com

If UK data protection law applies and you are unhappy with how your personal information has been handled, you may also have the right to complain to the Information Commissioner's Office.