Privacy Policy

1. Introduction

At RoamGrow (“we”, “us”, or “our”), accessible via roamgrow.com (“Website”), we are fully committed to safeguarding the privacy and personal data of our users (“you”, “your”). This Privacy Policy outlines how we collect, use, disclose, and protect your information in accordance with applicable data protection laws, including the European Union’s General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). We adopt a privacy-first approach in all our operations, embedding the principles of transparency, accountability, and data minimization throughout our services.

2. Scope of Policy and Data Controller Role

This Privacy Policy applies to all personal data processed by RoamGrow through roamgrow.com and associated services. RoamGrow is the data controller as defined under GDPR and the business entity under CCPA for all personal data collected and processed in connection with the Website and related services.

If you have any concerns about how your data is processed, you can contact us at: [email protected].

3. Categories of Data Processed

We process various categories of data to provide our services effectively and securely:

a. Usage Data:
Includes information such as your IP address, browser type, time zone settings, language preferences, referring/exit pages, and information about how you interact with our Website.

b. Account Data:
Includes data you provide when creating an account or making an inquiry, such as your full name, residential or business address, email address, and phone number.

c. Profile Data:
Includes information gathered from your interactions with our services, such as preferences, purchase history, browsing behavior, and saved settings.

d. Communication Data:
Includes any correspondence you send to us, support requests, records of interactions with our contact forms or customer service platforms.

e. Technical Data:
Includes device-specific details such as device identifiers, operating systems, screen resolution, and system configuration details that help us optimize your experience.

f. Transaction Data:
Includes details of purchases and orders you have made, your payment information (limited to non-sensitive billing identifiers, as sensitive data is handled by secure third-party processors), and delivery addresses.

g. Preference Data:
Includes data related to your marketing preferences, opt-in states, areas of interest, and other consumer preference information voluntarily provided by you.

4. Legal Bases for Processing

We process your personal data pursuant to the following lawful bases:

– Consent: Where you have provided clear consent for us to process your personal data for a specific purpose.
– Contractual Necessity: To carry out our obligations arising from contracts entered between you and us, including account management or product delivery.
– Legitimate Interests: For administrative and operational purposes, including fraud prevention, Website security, and usability improvements, as long as our interests are not overridden by your data protection rights.
– Legal Obligation: Where processing is necessary for us to comply with legal and regulatory requirements.

5. Your Rights

You have a range of rights concerning your personal data under GDPR and CCPA. These include:

– Right of Access: You may request details of your personal data that we hold.
– Right to Rectification: You have the right to correct inaccurate or incomplete data.
– Right to Erasure: Under certain conditions, you may request the deletion of your data.
– Right to Restriction: You may request the limitation of processing when the accuracy of data is contested or processing is unlawful.
– Right to Data Portability: You may request a copy of your data in a structured, machine-readable format.
– Right to Object: You may object to processing based on legitimate interests or direct marketing.
– Right to Not Be Discriminated Against: Under CCPA, you are entitled to receive equal service and pricing even if you exercise your privacy rights.

To exercise any of these rights, please contact us at [email protected]. We may need to verify your identity before executing requests.

6. Security Measures

We adopt a multi-layered security approach to protect your personal data. These include:

– Encryption of personal data both in transit and at rest using industry-standard protocols.
– Access controls and authentication mechanisms to limit internal data access to authorized personnel only.
– Regular system and network monitoring, vulnerability scanning, and penetration testing.
– Staff training programs to ensure awareness of data protection responsibilities.
– Routine backups and disaster recovery systems to preserve data integrity.

7. International Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). Whenever such transfers occur, we implement appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission, and ensure compliance with local privacy regulations. We also verify that third parties involved in such transfers maintain adequate levels of data protection.

8. Data Retention

We retain personal data only as long as necessary for the purposes for which it was collected, including legal, accounting, and reporting obligations. Retention periods vary by data category:

– Account and Profile Data: Retained for the duration of your account and for up to 5 years following termination or inactivity, unless required for legal purposes.
– Transactional Data: Retained for a minimum of 7 years in accordance with tax and contractual records requirements.
– Technical and Usage Data: Retained for up to 24 months.
– Communication Data: Retained for up to 3 years following final contact.
– Marketing Consent and Preference Data: Retained until withdrawal of consent or for 24 months beyond last engagement.

9. Cookie Policy

We use cookies and similar tracking technologies to:

– Ensure Website functionality (essential cookies)
– Enhance user experience (functional cookies)
– Analyze performance and usage patterns (analytics cookies)
– Deliver targeted advertising and retargeting (performance cookies)

Cookies are small text files stored in your browser or device that help identify your session and preferences. Some cookies are necessary for core functionality, while others are optional and require your consent.

10. Cookie Management and Compliance

In compliance with GDPR and CCPA, we allow you to:

– Accept or reject non-essential cookies upon first visit to roamgrow.com.
– Modify your cookie preferences through our dedicated cookie management tool at any time.
– Disable cookies via your browser settings.

We honor Do Not Track (DNT) signals and Global Privacy Controls (GPC) where technically feasible.

11. Children’s Privacy

Our Website and services are not directed to children under the age of 13. We do not knowingly collect, use, or disclose personal data from individuals under 13 years of age. If we become aware of such data being collected, we will take prompt steps to delete it. If you believe we may have inadvertently collected such information, please contact us immediately at [email protected].

12. Policy Updates and User Notifications

We may update this Privacy Policy from time to time to reflect legal, technological, or operational changes. We will notify users through prominent notices on roamgrow.com and, where appropriate, via email. We encourage you to review this page periodically to stay informed about how we protect your data.

13. Contact Us

For questions, concerns, or requests related to this Privacy Policy or your personal data, please contact:

Data Protection Officer
RoamGrow
Email: [email protected]

We are committed to compliance with GDPR, CCPA, and all applicable privacy legislation. Your privacy matters — please don’t hesitate to reach out with any questions or concerns.