Rosa Group Ltd

Privacy Policy

What we collect

When you send the contact form we keep what you fill in: name, email and message, plus company, phone, payment preference, the example that interested you and any optional project-brief details you provide. We also record the date and time, the page language, your IP address and browser, for security and abuse prevention.

Beyond the form, the site uses no tracking cookies and no advertising tools. The only cookie is the essential one that remembers your language and region choice.

What we use it for

To assess your enquiry and reply, including the confirmation email we send when your message arrives. The legal basis is your consent, given by ticking the box on the form, and our legitimate interest in responding to business-to-business contact.

Where the data lives and who we share it with

Data is stored on our own server hosted with Hetzner. We use Resend to deliver the notification and confirmation emails, and the site is served through Cloudflare. None of these services use your data for anything else, and we never sell or pass data to third parties.

How long we keep it

We keep contact data while the commercial conversation is live or while the law requires it. If you ask us to delete it, we will, except for anything we are legally required to keep.

Your rights

Under the UK GDPR and Brazil’s LGPD you can ask for access to, correction of, or deletion of your data, and you can withdraw consent at any time. To exercise any of these, send a message through the contact form and we will reply by email.

Changes to this policy

If this policy changes, the new version will be published on this page with a revised date.