Rosa Group Ltd
Privacy Policy
Last updated 12 September 2026
This policy explains, in plain language, what data we collect through rosagroupltd.com, what we use it for and what your rights are. The data controller is Rosa Group Ltd.
Rosa Group Ltd, registered in England & Wales under company number 09766720.
What we collect
When you send the contact form we keep what you fill in: name, email and message, plus company, phone, payment preference, the example that interested you and any optional project-brief details you provide. We also record the date and time, the page language, your IP address and browser, for security and abuse prevention.
Beyond the form, the site uses no tracking cookies and no advertising tools. The only cookie is the essential one that remembers your language and region choice.
What we use it for
To assess your enquiry and reply, including the confirmation email we send when your message arrives. The legal basis is your consent, given by ticking the box on the form, and our legitimate interest in responding to business-to-business contact.
Where the data lives and who we share it with
Data is stored on our own server hosted with Hetzner. We use Resend to deliver the notification and confirmation emails, and the site is served through Cloudflare. None of these services use your data for anything else, and we never sell or pass data to third parties.
How long we keep it
We keep contact data while the commercial conversation is live or while the law requires it. If you ask us to delete it, we will, except for anything we are legally required to keep.
Your rights
Under the UK GDPR and Brazil’s LGPD you can ask for access to, correction of, or deletion of your data, and you can withdraw consent at any time. To exercise any of these, send a message through the contact form and we will reply by email.
Changes to this policy
If this policy changes, the new version will be published on this page with a revised date.