Privacy Policy

Who we are

Rocksteady Consulting, headquartered in Pennsylvania, operates rocksteadyconsulting.com. For the purposes of data protection law, including the GDPR where it applies, Rocksteady Consulting is the controller of the personal information described in this policy.

Questions about this policy or your data go to Apollo@rocksteadyconsulting.com. We answer.

What we collect

We collect three kinds of information, and only these:

• Contact form submissions. When you write to us through the site, we receive the name, email address, and message you provide. That is the point of the form: so we can reply.
• Playbook signups. If you request the Playbook, we collect the email address you give us so we can send it to you.
• First-party analytics. With your consent, we record basic usage signals on our own infrastructure: which pages you view, which sections of a page become visible, and which calls to action you click. This runs only after you accept analytics in the cookie notice. Decline it and we record nothing.

We do not collect anything else. No advertising trackers, no third-party analytics scripts, no profiles built from your browsing.

How we use it

• Contact messages are used to reply to you and nothing more.
• Playbook signup emails are used to send you the Playbook.
• Analytics data is used in aggregate to understand what visitors read and where the site falls short, so we can improve it.

The legal bases we rely on, where GDPR applies, are consent (for analytics and Playbook emails) and legitimate interest in responding to the messages you choose to send us.

What we never do

We do not sell your information. We do not share it for marketing. You wrote to us, and it stays with us.

Who processes it for us

Two service providers handle data on our behalf, under their own contractual and security commitments:

• Vercel hosts the site and serves its pages.
• Supabase stores form submissions, signup emails, and analytics events in access-controlled databases.

Both act as processors: they store and transmit data for us and are not permitted to use it for their own purposes.

How long we keep it

• Contact messages are kept for as long as the conversation is live, and no longer than two years after our last exchange.
• Playbook signup emails are kept until you ask us to remove them.
• Analytics events are kept for no more than two years.

Your rights

You can ask us what we hold about you, ask for a copy of it, ask us to correct it, or ask us to delete it. Email Apollo@rocksteadyconsulting.com and we will handle it within thirty days. If you are in the EU or UK, you also have the right to withdraw consent at any time and to lodge a complaint with your local supervisory authority.

Cookies

This site sets exactly two kinds of cookies:

• Consent cookie. Records your answer to the cookie notice so we do not ask you on every visit. Analytics runs only if this cookie says you agreed.
• Staging access cookie. While the site is in a pre-launch or staging state, a cookie keeps you signed in past the access gate. It identifies a browser session, not a person.

No advertising or cross-site tracking cookies. None.

Security

Data is encrypted in transit and at rest, and access is limited to the people who need it to respond to you.

Changes to this policy

If our practices change, this page changes first, and the date at the top changes with it. Meaningful changes will be noted plainly, not buried.