roomov♥a

Privacy Policy

Last updated: 5 July 2026

1. Who we are

Roomovaa is operated by BHANDARI GLOBAL LTD (Company No. 16947269), 128 City Road, London, EC1V 2NX. We are the data controller for personal data processed through https://roomovaa.co. Contact: privacy@roomovaa.co. We comply with the UK GDPR and Data Protection Act 2018.

2. What data we collect

From you (the sender): personalization data (names, messages, dates, photos), your name and email, payment confirmation from Stripe (never your card number), technical data (IP, device/browser), support communications.

About your recipient: the name and any photos you choose to include. You are responsible for having their permission. When they open a Gift we collect IP, device type, open time and their in-experience interactions.

3. Why we process it

  • Creating, hosting and delivering your Gift — Contract
  • Payment processing — Contract / legal obligation
  • Transactional emails — Contract
  • Fraud/abuse prevention — Legitimate interests
  • Analytics/advertising — Consent (via cookie banner)
  • Support — Legitimate interests / contract
  • Tax/accounting records — Legal obligation

4. Photos and messages

Uploaded content is stored securely and used only to display your Gift. Never used for advertising. Automatically deleted 12 months after purchase, or on request.

5. Processors

Stripe (payments), hosting/database providers, email delivery, and — only with consent — Google Analytics and Meta Pixel. We do not sell personal data.

6. International transfers

Some providers process data outside the UK. Transfers are protected by the UK IDTA, adequacy regulations, or equivalent safeguards.

7. Retention

  • Gift content: until 12-month expiry or earlier deletion request
  • Transaction records: 6 years (UK tax law)
  • Support emails: up to 2 years
  • Analytics: max 26 months in GA4

8. Your rights

Access, rectify, erase, restrict, object, portability, withdraw consent. Email privacy@roomovaa.co. You may complain to the ICO — ico.org.uk.

9. Children

Not intended for anyone under 16.

10. Security

HTTPS everywhere, encrypted storage, unguessable private Gift links.

11. Contact

privacy@roomovaa.co or Data Protection, BHANDARI GLOBAL LTD, 128 City Road, London, EC1V 2NX.

12. Changes

Updates posted here with a revised "Last updated" date.