Privacy policy
Last updated: 2026-05-19.
At Roocket we respect your privacy and process personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data (LOPDGDD). This policy describes what data we collect, why, for how long, and what rights you have.
1. Data controller
- Legal entity
- Roocket Consulting, S.L.
- Tax ID
- B01983113
- Registered address
- C/ San Vicente Mártir, 166 Bis, 46007 Valencia, Spain
- Commercial registry
- Registered with the Commercial Registry of Valencia on 30 September 2020: Volume 10871, Book 8149, Folio 71, Section 8, Sheet V-194388, Entry 1.
- Contact email
- hello@roocket.io
2. Data we process
We only process data you actively provide, in two contexts:
- Contact form: name, email, company (optional) and the message you send. We also collect your IP address for security and anti-spam verification (Cloudflare Turnstile).
- Booking a call: when you click «Book a call» you are redirected to Google Calendar, where Google collects your name, email and selected time slot. That data ends up in your account and in ours once the booking is confirmed.
3. Purposes and legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Responding to your enquiry or quote request sent through the form. | Art. 6(1)(b) — pre-contractual measures at your request. |
| Fraud and abuse prevention (anti-bot filtering of the form). | Art. 6(1)(f) — legitimate interest in protecting the service. |
| Tax and accounting obligations once we sign an engagement. | Art. 6(1)(c) — legal obligation. |
| Aggregate web analytics (Google Analytics 4): anonymous statistical modelling by default, full identifier-linked data after your consent. | Art. 6(1)(f) (legitimate interest) for anonymous cookieless modelling. Art. 6(1)(a) (consent) for full data linked to an identifier. |
4. Retention period
- Non-contracted enquiries: we keep the email for up to 12 months, unless you ask us to delete it sooner.
- Clients: for the duration of the engagement and, afterwards, for the legal periods that apply (up to 6 years under art. 30 of the Spanish Commercial Code; 4 years for tax purposes under the Spanish General Tax Law).
5. Recipients and data processors
We do not sell or share your data. We work with the following strictly necessary providers, all bound by a data processing agreement under art. 28 GDPR:
| Provider | Service | Location |
|---|---|---|
| Sinch Email (Mailjet) | Delivery of contact-form email. | EU (France) |
| Cloudflare, Inc. | Turnstile (anti-bot verification). | USA (with SCCs) |
| Google Ireland Ltd. | Call booking via Google Calendar; website analytics (Google Tag Manager + Google Analytics 4) with Consent Mode v2: anonymous aggregated signals by default, full data after consent. | EU / USA (with SCCs) |
| Hosting provider | Web hosting infrastructure. | EU |
6. International data transfers
Transfers to the United States (Cloudflare, Google) are made under the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses approved by the European Commission, providing adequate safeguards as required by art. 46 GDPR.
7. Your rights
As a data subject you can exercise the following rights at any time:
- Access, rectification and erasure.
- Restriction of and objection to processing.
- Data portability in a structured format.
- Withdrawal of consent at any time, without retroactive effects.
To exercise them, write to hello@roocket.io stating the right you wish to exercise and attaching a copy of an identifying document. We respond within one month.
If you believe processing does not comply with the law, you can file a complaint with the Spanish Data Protection Agency (AEPD), C/ Jorge Juan 6, 28001 Madrid — aepd.es.
8. Security
We apply reasonable technical and organisational measures to protect your data: TLS encryption in transit, credential segregation, access control on hosting and email infrastructure. No measure is infallible on the internet; in the event of an incident that may affect you, we will notify you in line with art. 33 GDPR.
9. Changes to this policy
We may update this policy to reflect legal or operational changes. The last-updated date always appears at the top. For material changes we will notify you through a reasonable channel.
Questions? Email hello@roocket.io or use the contact form.