ROCKAR TECH – PRIVACY POLICY

1. ABOUT THIS POLICY AND OUR ROLE

This Privacy Policy explains how Rockar Tech (“Rockar Tech”, “we”, “us” or “our”) collects, uses, stores and protects personal data.

This policy applies to the website www.rockartech.com (the “Site”), together with Rockar Tech’s platforms, applications and services.

Rockar Tech operates technology platforms and services for automotive manufacturers, retailers, partners and enterprise clients. Depending on the context, we act as:

• a data controller, where we determine how and why personal data is processed; or
• a data processor, where we process personal data on behalf of our customers under contract.

Registered office:
1 Monckton Court, South Newbald Road
Newbald, East Yorkshire, YO43 4RW
United Kingdom

2. WHEN AND WHAT PERSONAL INFORMATION WE COLLECT

Information We Collect Automatically

When you visit rockartech.com or interact with our platforms, we may collect technical and usage information including:

• IP address
• Device type, browser type and operating system
• Log files, timestamps and usage patterns
• Referring URLs

This information is used for security, analytics, performance monitoring and service improvement. Further details are provided in our Cookies Policy.

Information You Provide to Us

We may collect personal data when you:

• Contact us via the Site
• Request a demo or information
• Create a user account
• Enter into a contract with us
• Use Rockar Tech platforms as an authorised user
• Subscribe to communications or events

This may include:

• Name
• Business email address
• Job title and company name
• Login credentials
• Communication preferences

We only collect information that is necessary for legitimate business purposes.

Information We Obtain Indirectly

We may receive personal data from:

• Customers who authorise users on Rockar Tech platforms
• Technology partners, resellers or integrators
• Publicly available business sources

Such data is used strictly in line with this policy and any applicable contractual arrangements.

3. HOW WE USE PERSONAL INFORMATION

We use personal data to:

• Provide, operate and support Rockar Tech platforms
• Manage user access, authentication and permissions
• Respond to enquiries and service requests
• Deliver contracted services
• Improve our products and platform performance
• Maintain security, prevent fraud and misuse
• Manage billing, reporting and supplier relationships
• Comply with legal and regulatory obligations

We will not use personal data for unrelated purposes without a lawful basis and, where required, notification.

4. LAWFUL BASES FOR PROCESSING

We process personal data under one or more of the following lawful bases:

Contractual Necessity
Where processing is required to perform a contract or take steps prior to entering a contract.

Legal Obligation
Where processing is necessary to comply with applicable laws or regulations.

Legitimate Interests
Where processing is necessary for our legitimate business interests, provided those interests do not override your rights (for example, platform security, responding to enquiries, or service improvement).

Consent
Where you have explicitly consented, such as for certain marketing communications.

5. COMMUNICATIONS AND MARKETING

We may send you:

• Service-related communications
• Platform updates and operational notices
• Business-to-business marketing communications

You can opt out of marketing communications at any time by using the unsubscribe link or contacting us directly.

We may occasionally request feedback or participation in surveys. Participation is voluntary.

6. SHARING YOUR PERSONAL DATA

We do not sell personal data.

We may share personal data with:

• Rockar group companies
• Cloud hosting and infrastructure providers
• Analytics, monitoring and security providers
• Professional advisers (legal, audit, compliance)
• Regulators, courts or authorities where legally required

All third parties are required to process data securely, confidentially and in compliance with UK GDPR.

7. INTERNATIONAL TRANSFERS

Personal data is primarily stored and processed in the UK and EEA.

Where data is transferred outside the UK or EEA, we ensure appropriate safeguards are in place, including approved contractual clauses or equivalent protections required by UK data protection law.

8. KEEPING YOUR DATA SECURE

We take data security seriously and implement appropriate technical and organisational measures, including:

• Access controls and role-based permissions
• Encryption where appropriate
• Secure hosting environments
• Monitoring and incident response procedures

Access to personal data is restricted to authorised personnel only.

While we take reasonable precautions, no internet-based system can be guaranteed to be fully secure.

9. DATA RETENTION

We retain personal data only for as long as necessary to:

• Fulfil the purposes for which it was collected
• Meet contractual, legal or regulatory requirements

Where appropriate, data may be anonymised so it can no longer be linked to an individual.

10. YOUR RIGHTS

Under UK data protection law, you have the right to:

• Request access to your personal data
• Request correction of inaccurate or incomplete data
• Request erasure of your personal data
• Object to processing based on legitimate interests
• Request restriction of processing
• Request data portability

To exercise your rights, please contact us using the details below. We may request proof of identity to protect against unauthorised disclosure.

11. CONTACTING US OR THE ICO

If you have questions about this Privacy Policy or how we handle personal data, please contact us:

Email: [email protected]
Post: Rockar Tech Limited, 1 Monckton Court, South Newbald Road, Newbald, East Yorkshire, YO43 4RW

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
www.ico.org.uk | 0303 123 1113

12. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. Any changes will be published on rockartech.com.