This policy explains what personal data Roambee collects when you use our website, apps and eSIM services, why we collect it, and the choices you have. We keep it short and specific; where the law requires more detail, you will find it in the numbered sections.

1. 1. Who we are

   The data controller is T&T 2026 Ltd (trading as Roambee), a private limited company registered in England and Wales (company number 17490180), registered office 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom ("Roambee", "we"). Our data protection contact is privacy@roambee.io.

2. 2. What we collect

   Account data: name, email, phone number, country, connected sign-in accounts (Apple, Google, Facebook, Telegram).

   Order data: plans bought, prices, payment method type and last four digits. Full card numbers are handled by our payment processors and never stored by us.

   eSIM data: ICCID, the EID of the device, activation state and data usage totals reported by partner networks.

   Technical data: device model, OS version, app version, approximate location derived from the network you connect to, and crash logs.

   Marketing preferences, referral activity and, when you arrive through a partner or invite link, the code and campaign parameters of that link.

3. 3. Why we use it

   To provide the service (deliver and activate eSIMs, show remaining data, send expiry alerts) — performance of a contract.

   To prevent fraud, secure accounts and credit referrals and partners correctly — legitimate interest.

   To send offers and the newsletter if you opted in — consent, which you can withdraw at any time in Settings → Notifications or with the link in every email.

   To comply with tax, accounting and telecom regulations — legal obligation.

4. 4. Who we share it with

   Mobile network partners that provision your eSIM (only what is needed to activate and bill the plan). Payment processors (Stripe, Apple, Google and our crypto settlement provider). Cloud hosting and content delivery providers in the EU and UK. Our email provider for service and opted-in emails. Analytics only if you accept analytics cookies or keep "Usage analytics" switched on in the app. We never sell personal data.

5. 5. International transfers

   Network partners are located in the country you travel to. Transfers outside the UK and EEA rely on adequacy decisions or standard contractual clauses.

6. 6. Retention

   Account data for as long as you have an account and 12 months after deletion. Order and invoice data for the period required by tax law. Usage totals for 24 months. Support conversations for 24 months.

7. 7. Your rights

   You can access, correct, export or delete your data in Settings → Privacy & data, or by emailing privacy@roambee.io. You can object to processing based on legitimate interest and withdraw consent at any time. You may lodge a complaint with the UK Information Commissioner’s Office (ico.org.uk) or your local supervisory authority.

8. 8. Children

   Roambee is not directed at children under 16 and we do not knowingly collect their data.

9. 9. Changes

   We will notify you in the app and by email at least 14 days before material changes take effect.