Privacy Policy

This policy explains how Data Roaming collects, uses and protects personal information when you visit this website, contact us or buy a travel eSIM through it. We've written it in plain language. If anything is unclear, contact us.

Privacy at a glance

• No tracking without your consent. Analytics and advertising cookies only load if you accept them in our cookie banner, and you can change your choice at any time. We don't show ads on this website.
• Anonymous visit counts. We count page visits with our own cookieless counter. It doesn't store your IP address or any identifier.
• We use your details only for what you asked. We use your contact details to reply to you, and to deliver your eSIM if you buy one.
• We never sell your information. Advertising partners only receive information about your visit if you accept advertising cookies.
• You're in control. You can ask us to see, correct or delete your information at any time.

Who we are

This website is run by Data Roaming (company number [Company registration number]), [Registered business address]. In this policy, "we", "us" and "our" mean Data Roaming.

We decide how and why your personal information is used, so under European and UK data protection law we are the "controller" of that information.

Email: [email protected]

Information we collect

Information you give us

• When you contact us: your name, email address, the topic you choose, your message and, if you give one, your order number.
• When you share a review: the same details, plus anything you tell us about your trip.
• When you buy a travel eSIM: your email address, your name, your country if you give it, the plan you choose and whether your payment went through. You enter your card details on our payment provider's secure page, so we never see or store your full card number.

Please don't send us sensitive information, such as health details or passport numbers, through the contact form. We don't need it.

Information collected automatically

• Page visit counts: when a page loads, your browser tells us which page it is and, on the first page of your visit, which website sent you. We use that only to sort the visit into a group (search engine, social network, other website or direct), and we store the group, not the website address. We keep daily totals for each page, not records of individual visits.
• Button and search counts: we count how often some buttons are clicked, such as "Get this plan", and how often the site search is used, per page and per day. We don't store what you search for.
• Spam and abuse protection: our server uses your IP address for a few minutes to stop spam and attacks, for example by limiting how many messages can be sent at once. It's kept only in the server's temporary memory and is never saved to our database.
• Server logs: like most websites, our hosting provider records standard technical information, such as IP address, browser type and the time of each request, to deliver the website and keep it secure.
• Analytics and advertising tools, only if you accept them: the tools listed under "Cookies and similar technologies" collect information such as the pages you view, the buttons you click, your device and browser, an approximate location based on your IP address, and cookie identifiers. We don't send them your name, email address, messages or what you search for.

Information from other companies

• Our eSIM provider sends us the details of any eSIM you buy (its ICCID number and activation code), its status and how much data it has used. We need this to deliver your eSIM and to help you if something goes wrong.
• Our payment provider tells us whether a payment succeeded, the type of payment method (for example "card") and a payment reference, which we need for refunds.

How we use your information

We don't make automated decisions about you that have legal or similarly significant effects. If you accept advertising cookies, advertising platforms may use information about your visit to show you relevant ads.

We don't send marketing emails. If we start a newsletter, we'll only send it to people who sign up, and every email will include an unsubscribe link.

Cookies and similar technologies

We use two kinds of cookies and similar technologies:

• Strictly necessary: if we show you a cookie banner, we save your choice in your browser's local storage for 12 months so we don't ask on every page. Our own team also gets a sign-in cookie, "ra_admin", when they log in to the admin area; it can't be read by scripts on the page and expires after 12 hours. These don't need your consent.
• Optional analytics and advertising tools: these only load after you accept them in our cookie banner. If you reject them or haven't chosen yet, they don't load at all.

The optional tools we use at the moment:

None at the moment. We don't use any optional analytics or advertising tools right now, so you won't see a cookie banner.

If your browser sends a Global Privacy Control (GPC) signal, advertising tools stay switched off. If we add other tools, we'll update this list first.

Buying a travel eSIM

Online checkout isn't open yet, and plans marked "sample" can't be bought. When checkout opens:

• Payments will be handled by our payment provider on its own secure page.
• Your eSIM will be issued by our eSIM provider, which receives only the details it needs to create and support it.
• If a plan's checkout is run by the eSIM provider on its own website, that company's privacy policy will also apply, and we'll link to it before you pay.

We'll name these providers in this policy before checkout opens.

When you use a travel eSIM abroad, the mobile networks it connects to process the technical data needed to give you a connection, under their own privacy policies. This happens with any mobile connection.

Reviews

If you choose "Share a review of your trip" on our contact form, you agree that we may publish your review on this website. We show the first name you give us, your destination and your review. We never publish your email address.

We may shorten a review or remove personal details from it, but we won't change its meaning. A review is labelled "Verified purchase" only when our order system confirms a paid order, never by hand.

You can ask us to remove your review at any time.

Who we share information with

We share personal information only when we need to:

• Service providers that work for us under contract and only on our instructions: website hosting, email delivery, payment processing and eSIM provision. They can't use your information for their own purposes. You can ask us for their names at any time.
• Analytics and advertising partners, only if you accept their cookies: the tools listed under "Cookies and similar technologies" receive information about your visit directly from your browser and use it under their own privacy policies, which are linked in that list.
• Authorities and others when the law requires it, or when it's needed to protect our rights, your safety or the safety of others, or to prevent fraud.
• A new owner of our business, if we sell or merge all or part of it. We'll tell you before your information becomes subject to a different privacy policy.

We don't sell your personal information. If we use advertising tools and you accept them, advertising platforms receive information about your visit so they can measure our ads and show you relevant ones. You can stop this at any time with Cookie settings.

International transfers

Some of our service providers, and the analytics and advertising partners you accept, may process information outside the country where you live, including outside the European Economic Area (EEA) and the United Kingdom. When we transfer personal information from the EEA, the UK or Switzerland, we use the safeguards the law provides, such as an adequacy decision for the destination country or the European Commission's standard contractual clauses, with the UK and Swiss additions where needed. You can ask us for a copy of these safeguards.

How long we keep information

When we no longer need information, we delete it or make it anonymous.

How we protect your information

• Our website uses HTTPS, so information sent between your browser and our website is encrypted.
• Only authorised team members can use the admin area. Each person has their own account with only the permissions their role needs.
• Admin passwords are stored as salted hashes, sign-in attempts are limited, sign-ins expire after 12 hours and admin actions are logged.
• API keys and payment credentials are encrypted in our database and never sent to your browser.

No website can be completely secure. If a data breach is likely to put your rights at risk, we'll tell you and the relevant authorities as the law requires.

Your privacy rights

You can ask us to:

• Access the personal information we hold about you and get a copy of it
• Correct information that's wrong or incomplete
• Delete your information
• Restrict or object to how we use it
• Transfer information you gave us to you or to another company (data portability)
• Withdraw your consent at any time where we rely on it, for example for a published review. This doesn't affect anything we did before you withdrew it.

If you're in the EEA, UK or Switzerland

You have all the rights above under the GDPR, the UK GDPR and the Swiss Federal Act on Data Protection. You can also complain to the data protection authority in the country where you live or work, or where you think a problem happened. We'd appreciate the chance to help first, so please contact us.

If you're in California or another US state with a privacy law

You have the right to know what personal information we collect, use and disclose, and the right to access, correct and delete it. In the last 12 months, we have collected the categories described in "Information we collect", for the purposes described in "How we use your information".

• We don't sell personal information.
• If we use advertising tools and you accept them, information about your visit goes to advertising platforms, which some US state laws call "sharing" for cross-context behavioural advertising. You can opt out at any time by rejecting advertising cookies in Cookie settings, and we treat a Global Privacy Control (GPC) signal as an opt-out.
• We don't use sensitive personal information to infer characteristics about you.
• We won't treat you differently for using your rights.
• You can ask an authorised agent to make a request for you. We may ask for proof that you've given them permission.

How to make a request

Email us at [email protected] or use our contact form. To protect your information, we may need to confirm who you are, usually by asking you to reply from the email address we have for you.

We'll reply within one month (45 days for requests under US state laws). If a request is complex, we may need more time, and we'll tell you why. Making a request is free.

Children's privacy

This website isn't meant for children under 16, and we don't knowingly collect their personal information. If you think a child has sent us personal information, please contact us and we'll delete it.

Links to other websites

Our guides link to other websites, such as mobile carriers and eSIM providers. The share buttons on our articles are simple links, so nothing is sent to a social network unless you click one. Other websites have their own privacy policies, and we're not responsible for how they handle your information.

Changes to this policy

We'll update this policy when our services or the law change. The "Last updated" date at the top shows when it last changed. If we make a significant change, we'll show a notice on the website, or email you if you have an order with us.

Contact us

For any question about this policy or your personal information:

• Email: [email protected]
• Post: Data Roaming, [Registered business address]
• Online: our contact form