RoamlyRoamly

Privacy Policy

Last updated: 2 April 2026

1. About This Policy

This Privacy Policy explains how Harrison James Hreszczuk trading as Roamly (ABN 43 219 296 766) collects, uses, stores, and protects your personal information when you use our website at onroamly.com and any associated applications (the “Service”).

We are committed to handling your personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. Information We Collect

We collect the following information when you use our Service:

Account information

  • Name, email address, and phone number (if provided)
  • Authentication data from Google or Apple sign-in (if used)

Purchase information

  • Order details including eSIM plan selected, price paid, and order status
  • Payment information is processed by Stripe — we do not store your full card details

Usage information

  • eSIM data usage statistics as reported by our wholesale providers
  • eSIM status and lifecycle events (installation, activation, expiry)

Technical information

  • Device type, browser type, and operating system
  • IP address and general location (country level)
  • Pages visited and interactions with the Service

3. How We Use Your Information

We use your information to:

  • Create and manage your account
  • Process eSIM purchases and deliver your eSIM profiles
  • Send transactional emails (order confirmations, eSIM status updates, usage alerts)
  • Provide customer support
  • Monitor and improve the Service
  • Comply with legal obligations

We will not use your personal information for direct marketing without your consent.

4. How We Share Your Information

We share your information only with the following third parties, and only as necessary to provide the Service:

  • eSIM wholesale providers — to provision and manage your eSIM (e.g. eSIM Access)
  • Stripe — to process payments securely
  • Firebase (Google Cloud) — to host our backend, authenticate users, and store data
  • Resend — to deliver transactional emails
  • Vercel — to host our website

We do not sell your personal information to any third party.

5. Data Storage and Security

Your data is stored on Firebase (Google Cloud) servers. We use industry-standard security measures including encryption in transit (TLS), Firestore security rules to restrict access, and secure authentication via Firebase Auth.

While we take reasonable steps to protect your information, no method of transmission or storage is completely secure. We cannot guarantee absolute security.

6. Data Retention

We retain your account information and order history for as long as your account is active or as needed to provide the Service. If you delete your account, we will remove your personal information within 30 days, except where we are required to retain it for legal or regulatory purposes.

7. Cookies and Analytics

We use essential cookies for authentication and session management. We may use analytics tools to understand how the Service is used. We do not use third-party advertising cookies.

8. Your Rights

Under the Australian Privacy Act, you have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your account and personal data
  • Complain to the Office of the Australian Information Commissioner (OAIC) if you believe your privacy has been breached

To exercise any of these rights, contact us at the email below.

9. International Data Transfers

Your data may be processed and stored in countries outside Australia, including the United States (via Google Cloud, Stripe, and Vercel). We ensure these transfers are protected by appropriate safeguards in accordance with the APPs.

10. Children

The Service is not intended for children under 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. The “Last updated” date at the top indicates when the policy was last revised.

12. Contact

If you have questions or concerns about this Privacy Policy or how we handle your data, contact us at hello@notifications.onroamly.com.

Harrison James Hreszczuk trading as Roamly
ABN 43 219 296 766
Sydney, NSW, Australia