Privacy Policy

1. Who We Are

WebGrid.AI is operated by Rocking Tech Ltd, a company registered in England and Wales (Company No. 12280796) with its registered address at 124 City Road, London, EC1V 2NX.

We are registered with the Information Commissioner's Office (ICO).

For data protection enquiries, contact us at: info@rockingtech.co.uk

2. What Data We Collect

When you join our waitlist or interact with our website, we may collect:

Information you provide directly: your first name, email address, and creative profession type.

Information collected automatically: IP address, browser user agent, referring URL, and UTM campaign parameters. These help us understand how visitors find us and improve our service.

Survey responses: if you participate in our market research survey, we collect the responses you provide. Survey responses are anonymous unless you voluntarily provide your email address for early access or prize draw entry.

3. Legal Basis for Processing

We process your personal data under the following lawful bases as defined by the UK General Data Protection Regulation (UK GDPR):

Consent (Article 6(1)(a)): when you voluntarily submit your details via our waitlist form or survey, you consent to us processing that data for the stated purposes.

Legitimate interests (Article 6(1)(f)): we may process certain technical data (such as IP address and referrer) to maintain the security of our website, prevent abuse, and understand aggregate usage patterns.

4. How We Use Your Data

We use your personal data to:

notify you when WebGrid.AI is available for early access; administer prize draws associated with our market research; analyse aggregate survey responses to inform product development; monitor and improve the security and performance of our website; and comply with legal obligations.

We will never sell, rent, or trade your personal data to third parties. We do not use your data for automated decision-making or profiling.

5. Data Security

All personal data (including your name, email address, IP address, and browser information) is encrypted at rest using AES-256 encryption before being stored in our database. Email addresses are additionally stored as irreversible cryptographic hashes to enable duplicate detection without decryption.

Our website is served over HTTPS with TLS encryption in transit. Access to personal data is restricted to the data controller and is not shared with employees, contractors, or third parties unless required by law.

6. Data Sharing

We may share your data only in the following limited circumstances:

Infrastructure providers: our website is hosted on servers that may process your data as part of delivering the service. These providers act as data processors under appropriate contractual terms.

Legal requirements: we may disclose personal data if required to do so by law, regulation, or legal process.

We do not share your personal data with marketing agencies, advertisers, or any other commercial third parties.

7. Data Retention

Waitlist data is retained until you unsubscribe or request deletion, or until 12 months after the public launch of WebGrid.AI, whichever is sooner.

Survey responses are retained in anonymised, aggregate form indefinitely for research purposes. Any personal data linked to survey responses (such as email addresses provided for early access or prize draws) is deleted within 6 months of the survey closing.

Server logs containing IP addresses are retained for a maximum of 90 days.

8. Your Rights

Under the UK GDPR, you have the right to:

Access the personal data we hold about you; rectify inaccurate or incomplete data; erase your personal data ("right to be forgotten"); restrict processing of your data in certain circumstances; object to processing based on legitimate interests; data portability — receive your data in a structured, machine-readable format; and withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, email info@rockingtech.co.uk. We will respond within 30 days.

9. Cookies

This website uses only essential cookies required for the functioning of the site (such as CSRF protection tokens and session management). We do not use analytics cookies, tracking cookies, or advertising cookies.

If this changes in the future, we will update this policy and implement appropriate consent mechanisms before deploying any non-essential cookies.

10. International Data Transfers

Your data is primarily stored and processed within the United Kingdom. If any data is transferred outside the UK, we will ensure that appropriate safeguards are in place in accordance with UK GDPR requirements, such as standard contractual clauses or adequacy decisions.

11. Children's Privacy

Our service is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a minor, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. If we make material changes that affect how we process your data, we will notify waitlist subscribers by email before the changes take effect.

13. Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).