Last updated 18 July 2026
Privacy Policy
ROCKMOUNTAI LTD (company number 17076705), registered office 20 Elveley Drive, West Ella, Hull, England, HU10 7RU, trading as Rockmount AI(“we”, “us”, “our”), is the data controller for personal data collected through rockmountai.com (the “site”). This policy explains what we collect, why, how long we keep it, and the rights you have over it, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who to contact
For any question about this policy or your data, contact sales@rockmountai.com. We aim to respond within one working day and, in any case, within one month as required by law.
2. What we collect and why
| When | What we collect | Why | Legal basis |
|---|---|---|---|
| You submit the “Enquire now” form | Name, email address, company (optional), the project details and timing you type, which page and button you used to open the form, your browser user agent, and an HMAC-hashed fingerprint of your IP address (the raw IP is never stored) | To read, assess and reply to your enquiry, and to stop automated abuse of the form | Taking steps at your request before entering a contract (Art. 6(1)(b)), and our legitimate interest in preventing spam/abuse (Art. 6(1)(f)) |
| You click a call-to-action button | The page and button clicked, and your browser user agent (no name, email or IP is attached to this record) | To understand which parts of the site generate genuine interest, so we can improve it | Legitimate interest (Art. 6(1)(f)) |
| You email us directly | Whatever you include in that email | To have the conversation you started | Legitimate interest / pre-contractual steps |
3. No cookies, no trackers, no ad pixels
The site does not set cookies and does not load any third-party analytics, advertising or tracking script. We do not use Google Analytics, Meta/Facebook Pixel, or any similar tool. If that ever changes, we will update this policy and add a cookie banner before any non-essential cookie is set, as required by the Privacy and Electronic Communications Regulations (PECR).
4. Where your data is stored
Enquiry and click data is stored in a Supabase database hosted in the UK (London, eu-west-2 region) and protected by row-level security with no public read or write access — only our server-side code, using a private service key, can read or write it. The site itself is hosted on Vercel, which may process requests through infrastructure outside the UK as part of standard web hosting; where that happens, Vercel provides appropriate safeguards (including the UK/EU Standard Contractual Clauses) for any such transfer.
5. Who we share it with
We do not sell, rent or share your data with third parties for their own marketing. We do not use a mailing list or CRM. The only organisations that can access enquiry data are:
- Supabase Inc. — database hosting (processor)
- Vercel Inc. — website hosting and delivery (processor)
- Rockmount AI staff/founders who need it to reply to your enquiry
We may also disclose data where required by law, for example to a court, regulator or law enforcement body.
6. How long we keep it
Enquiry records (name, email, company, message and related metadata) are retained for 12 months from the date of submission, then automatically deleted. CTA click records, which do not identify you, are retained for 12 months for the same reason. If we begin a paid engagement with you, information relevant to that contract is kept for as long as needed for accounting, tax and legal purposes (normally 6 years), under separate contractual documentation. You can ask us to delete your enquiry data sooner at any time — see Section 8.
7. Automated decisions
We do not use profiling or any automated system to make decisions about you. Every enquiry is read and actioned by a person.
8. Your rights
Under UK GDPR, you have the right to:
- Ask what personal data we hold about you and get a copy (access)
- Ask us to correct inaccurate data (rectification)
- Ask us to delete your data (erasure)
- Ask us to restrict how we use it (restriction)
- Ask us to hand it to you in a portable format (portability)
- Object to processing based on our legitimate interest (objection)
- Withdraw consent at any point where consent is the basis for processing
To exercise any of these, email sales@rockmountai.com. If you are unhappy with how we have handled your data, you can complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO), though we’d appreciate the chance to put it right first.
9. Children
This site and its services are aimed at businesses, not children. We do not knowingly collect data from anyone under 18.
10. Changes to this policy
We will update this page if what we collect or why changes, and update the date at the top. Significant changes will be highlighted on the site.