Policy

Privacy Policy

This Privacy Policy explains how Roaminix Shop (“Roaminix”, “we”, “us” or “our”) collects, uses, stores, shares and protects your personal data when you visit roaminix.shop, purchase an eSIM, or otherwise interact with our services. We are committed to protecting your privacy in line with applicable data-protection laws, including the EU General Data Protection Regulation (GDPR) and the Vietnam Personal Data Protection Decree (Decree 13/2023/ND-CP). By using our site you consent to the practices described below.

1. Information We Collect

a) Information you provide to us

• Identity & contact data: name, email address, phone number, and billing/shipping details provided at checkout.
• Order data: the eSIM plan(s) purchased, destination, data allowance, validity period, payment confirmation references and delivery details.
• Support data: any information you share with our support team when contacting us, including device model and issue descriptions.
• Account data: if you create an account, your chosen username, password (stored as a secure hash) and profile preferences.

b) Information collected automatically

• Device & usage data: IP address, browser type and version, device type, operating system, pages visited, time spent, and referring URLs, collected via cookies and similar technologies (see our Cookie Policy).
• Transaction data: payment status and reference information returned by our payment providers (we do not store full card numbers).
• Analytics data: aggregated, anonymised usage statistics used to improve our site and services.

2. How We Use Your Information

We use your personal data for the following purposes:

• To process and deliver your eSIM purchase, including sending your QR code and activation instructions.
• To manage your account, process payments and issue receipts and invoices.
• To provide customer support, respond to enquiries and resolve issues.
• To prevent, detect and investigate fraud, security incidents and abuse of our services.
• To improve our website, products and customer experience, including through analytics.
• To send service-related communications (order updates, delivery, important account notices).
• To send marketing communications only where you have given consent or where permitted by law; you can unsubscribe at any time.
• To comply with legal, regulatory and tax obligations.

3. Legal Bases for Processing (GDPR)

Where the GDPR applies, we process your personal data on the following legal bases:

• Performance of a contract — to fulfil your eSIM order and provide the services you requested.
• Legitimate interests — to operate our business securely, prevent fraud and improve our services, balanced against your rights and interests.
• Consent — for marketing communications and non-essential cookies, which you may withdraw at any time.
• Legal obligation — to meet tax, accounting and regulatory requirements.

4. Sharing & Disclosure

We do not sell your personal data. We share it only with trusted third parties who help us operate our services, and only to the extent necessary, including:

• Payment processors (e.g. card networks, PayPal) to process your payment.
• Connectivity partners / mobile network operators to provision and deliver the eSIM data service.
• Email & delivery providers to send your eSIM and transactional messages.
• Analytics & hosting providers to operate and improve our website.
• Professional advisers (legal, accounting) where required.
• Authorities where disclosure is required by law, court order or to protect our rights.

Each recipient is bound by confidentiality and data-protection obligations. We never share your data for purposes unrelated to those described in this Policy.

5. International Data Transfers

Because we serve customers worldwide and use global service providers, your personal data may be transferred to and processed in countries outside your own, including Vietnam and the European Economic Area. Where we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) adopted by the European Commission, to protect your data to an adequate standard.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this Policy, including to provide the services you purchased, comply with legal and tax obligations, resolve disputes and enforce our agreements. Order and transaction records are retained for the period required by applicable accounting and tax law. After the retention period, data is securely deleted or anonymised.

7. Data Security

We implement technical and organisational measures designed to protect your personal data against unauthorised access, alteration, disclosure or destruction, including encryption in transit (TLS/HTTPS), encryption of sensitive data at rest, access controls, and regular security reviews. For a detailed description of our security measures, see our Security Policy. No method of transmission over the internet is 100% secure, and while we strive to protect your data, we cannot guarantee absolute security.

8. Your Privacy Rights

Depending on your location and applicable law (including the GDPR), you may have the following rights:

• Access — obtain a copy of the personal data we hold about you.
• Rectification — have inaccurate or incomplete data corrected.
• Erasure — request deletion of your data in certain circumstances (“right to be forgotten”).
• Restriction — request limitation of how we process your data.
• Data portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests or to direct marketing.
• Withdraw consent — withdraw consent at any time where processing is based on consent.
• Complaint — lodge a complaint with your local data-protection authority.

To exercise any of these rights, contact us at [email protected]. We will respond within the timeframe required by applicable law (typically one month under the GDPR). We may need to verify your identity before fulfilling a request.

9. Cookies & Similar Technologies

We use cookies and similar technologies to operate our website, remember your preferences and understand how the site is used. For full details about the cookies we use and how to manage them, please read our Cookie Policy.

10. Children’s Privacy

Our services are intended for individuals aged 18 and over. We do not knowingly collect personal data from children under 18 without parental or guardian consent. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology or legal requirements. The “Last updated” date above shows when this Policy was last revised. Material changes will be highlighted on this page. Your continued use of the site after changes take effect constitutes acceptance of the revised Policy.

12. Contact / Data Protection Officer

For any privacy question, request or concern, please contact our Data Protection team at [email protected] or by post to: Roaminix Shop, 33B Do Xuan Hop, Binh Trung, Ho Chi Minh City, Vietnam. Phone: +84 903 749 682.

Last updated: September 2026