Rose
LearnJoin the waitlist

Privacy Policy

Last updated

This Privacy Policy explains how Oro Consultancy LTD (“Rose”, “we”, “us” or “our”) collects, uses, and protects personal data when you visit tryroseai.com(the “Site”) or join our waitlist. We are the data controller for the personal data described here.

We are committed to handling your data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

Rose is a product of Oro Consultancy LTD, a company registered in England & Wales. If you have any questions about this policy or your data, contact us at william@oro-cfo.com.

2. What data we collect

  • Waitlist details. When you join the waitlist, we collect the email address you submit and, where provided, related information such as the page or campaign you signed up from.
  • Usage and device data. When you browse the Site, we and our analytics provider automatically collect information such as your IP address (in truncated/anonymised form where supported), browser and device type, pages viewed, referring URLs, and interactions such as clicks and scrolls.
  • Cookies and similar technologies. See the Cookies section below.

We do not intentionally collect special category data, and we ask that you do not submit sensitive personal information through the Site.

3. How we use your data

  • To add you to the waitlist and notify you when Rose is available.
  • To send you product updates and marketing about Rose, where you have asked to hear from us. You can opt out at any time.
  • To understand how the Site is used, improve its content and performance, and diagnose problems.
  • To maintain the security and integrity of the Site.
  • To comply with our legal obligations.

4. Legal bases

We rely on the following legal bases under UK GDPR:

  • Consent — for non-essential analytics cookies and for sending you marketing emails. You may withdraw consent at any time.
  • Legitimate interests — to operate, secure, and improve the Site and our waitlist, where this is not overridden by your rights.
  • Legal obligation — where we must process data to comply with the law.

5. Cookies and analytics

We use cookies and similar technologies to make the Site work and to understand how it is used. Essential cookies are required for the Site to function. Analytics cookies are optional and set only in line with your choices in our cookie banner.

We use Microsoft Clarityto capture how visitors use the Site through metrics, heatmaps, and session replay. Clarity may record mouse movements, clicks, scrolls, and pages visited, and uses cookies and similar technologies for this purpose. This helps us improve the Site. Clarity data is processed by Microsoft; see Microsoft’s Privacy Statement for details. You can decline analytics in our cookie banner, and you can clear or block cookies in your browser settings at any time.

6. Who we share data with

We share personal data only with service providers who help us run Rose, under appropriate contracts. These include:

  • Supabase — database and storage for our waitlist.
  • Cloudflare — hosting, content delivery, and security.
  • Microsoft Clarity — website analytics and session replay.

We do not sell your personal data. Some providers may process data outside the UK; where they do, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or addendum and adequacy decisions.

7. How long we keep data

We keep waitlist data until Rose launches and for a reasonable period afterwards, or until you ask us to delete it. Analytics data is retained in line with our analytics provider’s standard retention periods.

8. Your rights

Under UK GDPR you have the right to:

  • Access the personal data we hold about you.
  • Ask us to correct inaccurate data.
  • Ask us to delete your data.
  • Object to or restrict certain processing.
  • Withdraw consent at any time.
  • Request a copy of your data in a portable format.

To exercise any of these rights, email william@oro-cfo.com. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.

9. Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date above. Significant changes will be notified where appropriate.