Privacy Policy

Rosebud Cloud Solutions Ltd is a company registered in England and Wales (company number 14500087, VAT number 439 921 563). Our registered address is in Worthing, West Sussex, United Kingdom. When this policy refers to "we", "us", or "our", it means Rosebud Cloud Solutions Ltd. If you have any questions about how we handle your data, you can contact us at hello@rosebudcloudsolutions.co.uk.

We collect personal data only when you actively provide it through our website. This includes: • Contact form — your name, email address, company name (optional), the service you are enquiring about, and your message. • AI chatbot — the messages you send during a conversation. If you choose to share your name, email, or topic of interest with the chatbot, those details are also collected. • Security scan — when you run a free security scan, the domain you ask us to scan and the email address you provide to receive your results. We do not collect data passively through tracking cookies, analytics scripts, or advertising pixels. Our website does not use Google Analytics, Facebook Pixel, or any similar third-party tracking technology.

We use the data you provide for the following purposes: • To respond to your enquiry or request for consultation. • To understand the nature of your requirements so we can prepare for an initial conversation. • To operate the AI chatbot and provide helpful responses during your session. If you run a security scan or share your business email with us, we may contact you about security services relevant to your results. We rely on our legitimate interest in offering relevant services to organisations that have engaged with us, and you can opt out at any time using the unsubscribe link in any message, or by emailing us. Beyond that, we do not profile you, make automated decisions about you, or sell your personal data.

When you run a free security scan on our website, we collect the domain you ask us to scan and the email address you provide. We use these to run the scan, generate your security findings, and set up a free security dashboard where you can view them. We email you a one-time link to sign in to that dashboard, no password needed. The scan only inspects information that is already publicly visible about a domain, such as its public DNS records and its published email and web security settings. It does not access anything private, and it does not attempt to log in to any system. Our legal basis for this is legitimate interest: you have asked us to assess a domain and show you the results, and you provide your email so that we can deliver them. The dashboard is the default way we deliver your results; you can instead choose to have the report emailed to you, and you can ask us to delete your account and data at any time by emailing hello@rosebudcloudsolutions.co.uk.

Under UK GDPR, our legal basis for processing your personal data is legitimate interest — specifically, responding to a business enquiry that you have initiated. Where you provide your data through our contact form or chatbot, you are doing so voluntarily and with a reasonable expectation that we will use it to respond.

Your data passes through a small number of third-party services in order to reach us: • Web3Forms — our contact form and chatbot transcripts are delivered to our inbox via Web3Forms (web3forms.com), an email relay service. Web3Forms processes the data only to deliver it and does not store it long-term. • Anthropic (Claude API) — our AI chatbot uses the Claude language model to generate responses. Your messages are sent to Anthropic's API for processing. Anthropic's data handling is governed by their own privacy policy and API terms. • Cloudflare — our chatbot backend runs on Cloudflare Workers. Cloudflare processes requests in transit but does not store conversation data. We do not share your data with any other third parties, and we do not sell personal data under any circumstances.

Our website does not set tracking cookies or advertising cookies. We use a single localStorage entry (a timestamp) to control whether our introductory animation plays on repeat visits. This contains no personal information and is stored only in your browser. You can clear it at any time through your browser settings. No other cookies or local storage mechanisms are used.

Contact form submissions and chatbot transcripts are delivered to our email inbox and retained only as long as necessary to respond to your enquiry and for reasonable record-keeping. When you run a scan we store your results and, if created, your free dashboard account so you can return to them. If an account is inactive and has not become a customer, we delete it and its scan data after 24 months. If you become a customer, we keep your data for the duration of our relationship and the period our legal and accounting obligations require afterwards. You can ask us to delete your data at any time. Chatbot conversations are not stored on our servers. They exist in your browser session only and are discarded when you close or navigate away from the page. A transcript may be sent to our inbox for follow-up purposes.

Under UK GDPR, you have the right to: • Access the personal data we hold about you. • Request correction of inaccurate data. • Request deletion of your data. • Object to or restrict our processing of your data. • Request a copy of your data in a portable format. To exercise any of these rights, contact us at hello@rosebudcloudsolutions.co.uk. We will respond within 30 days.

Our services are aimed at businesses and professionals. We do not knowingly collect personal data from anyone under the age of 18.

We may update this policy from time to time. The date at the top of this page shows when it was last revised. We encourage you to review this page periodically.