Privacy Policy

Last updated: 05.10.2026

This data privacy policy explains how RebelRoam collects, uses, stores, and protects personal data when you visit our website or contact us. This policy is written under the EU General Data Protection Regulation (GDPR).

1. Introduction

Rebelroam OÜ (“we”, “our”, “us”) respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, and protect your personal data when you visit our website.

This policy is written under the EU General Data Protection Regulation (GDPR).

2. Data Controller

Company name: Rebelroam OÜ
Email: [email protected]
Registered address: Erika 14, Tallinn 10416
Country: Estonia

If you have any questions about this Privacy Policy or your personal data, you can contact us at the email above.

3. What Personal Data We Collect

We may collect and process the following personal data:

• Contact data: name, email address, phone number (when you contact us via forms or email)
• Technical data: IP address, browser type, operating system
• Usage data: pages visited, time spent on the website
• Communication data: messages sent via contact forms or email

We do not intentionally collect sensitive personal data.

4. How We Collect Your Data

We collect data when you:

• Visit our website
• Fill in a contact or inquiry form
• Contact us via email
• Accept cookies on our website

5. Legal Basis for Processing (GDPR Article 6)

We process personal data based on:

• Consent – to contact you by email about our products, when you tick the box asking for it, and for cookies you accept
• Legitimate interest – to operate, secure, and improve our website
• Contractual necessity –to send you documents you request from our website, such as product explainers, and to respond to service inquiries
• Legal obligation – where required by law

6. How We Use Your Data

We use your personal data to:

• Respond to inquiries and requests
• Send you documents you request from our website, such as product explainers
• Provide information about our services
• With your consent, contact you by email about RebelRoam products. You can withdraw consent at any time with the link in each email or by writing to [email protected].
• Improve website performance and user experience
• Ensure website security
• Comply with legal obligations

We do not sell your personal data.

7. Cookies

Our website uses cookies to improve functionality and analyze traffic.

Cookies may include:

• Essential cookies (required for the site to function)
• Analytics cookies (e.g. Google Analytics)

You can manage or withdraw your consent at any time via your browser settings or our cookie banner.

8. Data Sharing

We may share your data only with:

• IT and hosting service providers
• Analytics providers
• Our email delivery provider, which sends the documents you request
• Our website bot-protection provider, which checks that form submissions come from people
• Authorities, when legally required

Where our service providers process data on our behalf, they do so under written data processing agreements.

9. International Data Transfers

If personal data is transferred outside the EU/EEA, we ensure appropriate safeguards such as:

• EU Standard Contractual Clauses
• GDPR-approved frameworks

Our email delivery provider stores message data in the United States. This transfer relies on the European Commission’s adequacy decision for the EU-U.S. Data Privacy Framework (Implementing Decision (EU) 2023/1795), and on the EU Standard Contractual Clauses in the provider’s data processing agreement as a fallback.
Our hosting, bot-protection and cloud storage providers, which run our website and systems and hold our backups, may also process data in the United States or in other countries outside the EU/EEA. Transfers to the United States rely on the same adequacy decision, with the EU Standard Contractual Clauses in each provider’s data processing agreement as a fallback. Transfers to other countries rely on an adequacy decision or on the EU Standard Contractual Clauses. You can ask us for a copy of these clauses at [email protected].

10. Data Retention

We retain personal data only as long as necessary for the purposes described in this policy or as required by law. For the following purposes, these periods apply:

• Documents requested from our website: we delete your email address within 30 days of sending, unless you ticked the box to hear from us.
• Email contact with your consent: we keep your contact details until you withdraw consent or object, or until 24 months pass without contact from you, whichever comes first.
  If you opt out, mark our email as spam, or ask us to delete your address, we keep a one-way coded version of it, which cannot be read back as your address, so that we do not email you again. If you asked us to delete it, we also keep the date of your request and what we did about it, linked to that coded version, for 24 months after we close the request, to show that we handled it.

11. Your Rights Under GDPR

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion (“right to be forgotten”)
• Restrict or object to processing
• Object at any time to direct marketing
• Data portability
• Withdraw consent at any time
• Lodge a complaint with a supervisory authority

In Estonia, this is the Estonian Data Protection Inspectorate.

12. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or misuse.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website.

14. Contact

If you have questions about this Privacy Policy or your personal data, please contact:

Email: [email protected]
Company: Rebelroam OÜ