Privacy Policy

Who is responsible

The data controller is Romoz Business Sweden, registered in Sweden and based in Gothenburg. The registration number and contact details are published on the partner page and at the bottom of this document.

What we collect when you apply

The partner application form stores exactly the fields it asks for:

• Your name, email address and phone or WhatsApp number
• The country and city you intend to operate in
• What describes you (business owner, sales or technical background, investor, and so on)
• Your experience in hospitality and the budget range you have available
• Anything you write in the free-text notes field
• Whether you agreed to receive email about the offer, and which language you were reading in

We also record which step of the process you have reached — registered, presentation watched, qualification completed, plan selected — against your email address, so a follow-up conversation starts from where you actually are.

What we collect when you simply visit

The site records page views and interaction events against a randomly generated session key. Alongside them it stores the IP address the request arrived from and the approximate location derived from it (country, region, city), the device type, operating system and browser, the page you arrived from, and any campaign parameters in the link you followed.

This is used to understand which pages and campaigns work. It is not sold, and it is not shared for advertising.

Why we are allowed to hold it

• Application data: to take steps at your request before entering into a contract, and on our legitimate interest in assessing partnership applications.
• Marketing email: your consent, given by the checkbox on the form. You can withdraw it at any time using the unsubscribe link in any message.
• Analytics: our legitimate interest in knowing whether the site works. If you would rather not be counted, tell us and we will exclude you.

Who else sees it

Only the services that make the site run:

• Supabase — the database and file storage the application data is written to.
• Vercel — the hosting that serves these pages.
• Our email provider — used to send the messages you asked for.
• Stripe — only if you reach the payment step, and only with what a payment requires. Card details never touch our systems.

Nothing is sold to anyone, and nothing is passed to a third party for their own marketing.

How long we keep it

Application data is kept while your application is open and afterwards for as long as we have a genuine business reason — a partnership discussion that may resume, or a record we are required to keep. Analytics records are kept in aggregate. You can ask us to delete your data at any point and we will, except where we are legally obliged to retain something.

Your rights

Under the GDPR you can ask for a copy of what we hold about you, ask us to correct it, ask us to delete it, ask us to restrict or stop processing it, and ask for it in a portable form. Write to hi@romoz.business and we will answer.

If you are not satisfied with how we handle it, you can complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, imy.se).

Cookies and local storage

The site stores a session key and your progress through the application in your own browser, so you can close the tab and come back to the right step. Nothing in that storage is shared with a third party, and clearing your browser data removes it.