At Reelroostteamtons (operated by Reelroost Teamtons Studio Ltd), we treat the protection of your personal information with strict technical and organizational rigor. This policy outlines how we gather, store, and process personal data when you interact with our website, use our scorecard simulators, or correspond with our team.
1. Scope and Identity of Data Controller
For the purposes of the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018, the data controller is Reelroost Teamtons Studio Ltd, registered at 74 Clerkenwell Road, Farringdon, London EC1M 5QA, United Kingdom (Company Registration No: 12948301). Our designated Data Protection Officer (DPO) can be reached at [email protected].
2. Data Categories Collected
We strictly limit our data collection to categories necessary to deliver our educational content and respond to inbound founder inquiries:
- Directly Provided Information: When you submit our contact form, we collect your full name, email address, inquiry classification, and the free-text contents of your message.
- Client-Side Scorecard Inputs: Values entered into our interactive validation scorecards and simulators operate strictly within your local browser runtime. They are not transmitted to or stored on our servers.
- Technical and Device Metadata: Standard internet log records, including obfuscated IP addresses, browser vendor details, referral headers, and device viewport dimensions.
3. Lawful Basis and Purpose of Processing
We process personal information under the following recognized legal bases:
- Contractual Performance & Pre-Contractual Steps: Responding to client inquiries, scheduling training workshops, and answering technical questions.
- Legitimate Interests: Securing our web infrastructure against automated denial-of-service attempts and evaluating overall traffic patterns to maintain server stability.
- Explicit Consent: Setting optional analytical cookies via our cookie banner selection.
4. Third-Party Service Processors
We do not sell, rent, or trade your personal information. Where necessary, we rely on vetted sub-processors bound by strict Data Processing Agreements (DPAs):
- Infrastructure Hosting: Cloudflare Inc. (Edge CDN, SSL termination, and DDoS mitigation).
- Transactional Mail Delivery: Postmark / ActiveCampaign Inc. (Used exclusively to relay inbound contact queries).
5. International Transfers and Safeguards
When data is transferred outside the United Kingdom or the European Economic Area, we implement Standard Contractual Clauses (SCCs) as adopted by the European Commission, along with the UK International Data Transfer Addendum, ensuring an equivalent standard of protection.
6. Data Retention Protocols
Correspondence sent via our contact form is retained in our active mailbox for a maximum duration of 24 calendar months to maintain customer service records, after which it is permanently purged. Server diagnostic logs are automatically rotated and deleted after 30 calendar days.
7. Your Statutory Rights (GDPR / CCPA)
Depending on your jurisdiction, you retain the following statutory entitlements:
- Right of Access: You may request a copy of the specific personal data we hold about you.
- Right to Rectification: You may correct inaccurate or incomplete contact records.
- Right to Erasure ("Right to be Forgotten"): You may request that we delete your submitted records.
- Right to Restriction and Objection: You may restrict processing or object to processing based on legitimate interests.
- Right to Data Portability: You may request your data in a structured, commonly used, machine-readable format.
To exercise any of these protections, submit a signed request to [email protected]. We will respond within 30 calendar days without administrative charge. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO).