What we collect, why we collect it, and what your options are. We've kept it short and readable. If anything's unclear, email us.
What we collect depends on how you use the site.
Automatically when you visit:
gclid or Microsoft's msclkid) carried in the link, so a later purchase can be attributed to that adOnly if you take a specific action:
We don't collect payment information, passport details, or any sensitive personal data. There's no account to create.
| Data | Why we use it | Legal basis |
|---|---|---|
| Usage analytics (pages, device, location) via Google Analytics | Understand which destinations and features get used most so we can improve the site | Consent |
| First-party performance counts (affiliate-link clicks and eSIM landing-page views) | See which links, landing pages, and offers convert, using our own counts instead of a third party. Your IP is stored only as a one-way hash; the page-view counter holds no personal data. | Legitimate interest |
| Contact form submissions | Reply to your message | Contract / legitimate interest |
| Newsletter email address | Send you the newsletter you signed up for | Consent |
| Advertising measurement (ad click ids, conversion data via Google Ads & Microsoft Ads) | Measure which of our ads lead to a sale and reach similar travellers | Consent |
| Google Maps embeds | Show interactive maps on some destination and country pages | Consent |
| IP address | Security, fraud prevention, and routing through our CDN | Legitimate interest |
We don't make automated decisions about you, and we don't sell your data. We share data with the service providers needed to operate the site (listed below). The one case where data goes to a third party for its own purposes is advertising measurement: with your consent, Google and Microsoft receive ad-conversion data, which they may also use under their own policies. You can withhold or withdraw that consent at any time.
Where we rely on legitimate interest as a legal basis, that interest is limited to operating, securing, and improving the site in a way that doesn't override your privacy rights.
For site analytics we use Google Analytics 4, which sets the _ga cookies and runs only with your consent. We use it in aggregate to see which pages and destinations get used, not to profile you across the web, and we have IP anonymisation on. The cookies we set ourselves are strictly necessary for the site to function and need no consent.
Three things need consent and don't run until you allow them: analytics (Google Analytics), advertising measurement (Google Ads and Microsoft Ads, on our paid landing pages), and embedded Google Maps. We ask for that consent with a short banner shown to visitors in the EEA and UK; elsewhere these are on by default and can be switched off at any time. You can review or change your choices whenever you like via the control, here or in the footer. The full breakdown of every cookie set on this site and how each works is on the cookies page.
A small number of services help operate the site. Each one processes some of your data as a result.
| Service | What they process | Purpose |
|---|---|---|
| Cloudflare | IP address, HTTP request data, contact-form submissions in transit | DNS, CDN, DDoS protection, page hosting (Cloudflare Pages), and the Worker that forwards contact-form messages |
| EU-based hosting provider | Site content, contact-form submissions at rest, and standard server access logs | Server hosting (EU/Germany) |
| Google Analytics | Page views, device and browser type, and country-level location, tied to a random _ga id. Only with analytics consent. No name or email; IP anonymised. | Understanding how the site is used (consent required) |
| Google Maps | IP address and device/browser data, but only after you allow maps and an interactive map loads on a destination or country page. Google may set its own cookies under its privacy policy. | Interactive maps on some pages (consent required) |
| Google Ads | Ad click id (gclid) and conversion data, only with advertising consent. Google may also use this under its own policy. | Measuring which of our Google ads lead to a sale |
| Microsoft Advertising | Ad click id (msclkid) and conversion data, only with advertising consent. Microsoft may also use this under its own policy. | Measuring which of our Microsoft/Bing ads lead to a sale |
| Resend | Email content and recipient address for outbound messages from the site | Transactional email delivery (e.g. contact form replies) |
| Email service provider | Email address and signup details (newsletter subscribers only) | Newsletter delivery |
Beyond Google Analytics for aggregate usage measurement, we don't use a Facebook Pixel or social media tracking. The only advertising tools we use are the Google Ads and Microsoft Ads conversion measurement above, which run solely with your consent.
Some of these providers process data outside your country, including in the United States, using appropriate safeguards (such as the EU-US Data Privacy Framework, in which Google and Microsoft both participate).
Some links on RoamFX are affiliate links. When you click one and sign up or make a purchase, we may earn a commission. The current list of affiliate partners is on the advertiser disclosure page.
Clicking an affiliate link takes you to a third-party site. From that point, that site's own privacy policy applies, and they may use their own tracking. We don't share your personal data with affiliate partners ourselves, and we don't track which specific users click which affiliate links in any personally identifiable way on our end.
Affiliate relationships don't influence our editorial content or scoring data. The breakdown of how we keep the two separate is on the disclosure page.
If you sign up to the RoamFX newsletter, we collect your email address. We also record the time, your approximate country, and the IP address of your signup, which we keep as proof of your consent. This data is used only to send you the newsletter you signed up for.
Your email address is processed on our behalf by a third-party email service provider, under a data processing agreement, solely to deliver the newsletter you asked for.
Depending on where you're located, you may have the following rights regarding your personal data.
A note on the advertising data: the ad click ids we hold are pseudonymous (we hold no name or email tied to them), so we usually can't single out one person's records from a "delete my data" request. We address this instead by keeping that data only briefly (see retention below) and by letting you switch advertising off at any time. To exercise any of these rights, email privacy@roamfx.com. We aim to respond within 30 days.
If you're in the EU or UK and feel we haven't handled your request properly, you have the right to lodge a complaint with your local data protection authority.
gclid/msclkid we store against an ad click are automatically deleted after 90 days, once they've served the conversion-measurement window. Aggregate conversion data held by Google and Microsoft is governed by their own retention policies.RoamFX isn't directed at anyone under 18. The financial products and services we reference, including currency transfer providers, require users to be 18 or older. We don't knowingly collect personal data from anyone under 18. If you believe a minor has submitted data through our site, email privacy@roamfx.com and we'll delete it promptly.
We'll update this policy when our data practices change in a meaningful way. The "last updated" date at the top reflects the most recent revision. For significant changes, we'll post a notice on the site.
Continued use of RoamFX after a policy update means you accept the revised terms.
Questions about this policy or requests to exercise your data rights can go to: