RondoTraceWho we are
RondoTrace LLC ("RondoTrace", "we", "us") is responsible for the personal data described in this notice.
RondoTrace LLC
30 N Gould St, Ste R, Sheridan, WY 82801, United States
Contact: adarsh@rondotrace.com
For any question about this notice or your personal data, write to adarsh@rondotrace.com.
What we collect, and why
We collect only the personal data you give us, plus limited technical data needed to run the site.
When you request an assessment or contact us
- What we collect: your name, work email, company, role, and anything you write in the form, including the supplier or site you ask about.
- Why: to reply to you, assess your request and discuss a possible engagement.
- Legal basis: steps taken at your request before entering into a contract, and our legitimate interest in responding to business enquiries (GDPR Art. 6(1)(b) and (f)).
When you subscribe to our newsletter or research updates
- What we collect: your email address, and your name if you provide it.
- Why: to send you our research and occasional updates.
- Legal basis: your consent (Art. 6(1)(a)). You can unsubscribe at any time using the link in every email.
When you file a dispute on the Public Ledger
- What we collect: your name, email, organisation, and the information you provide about the entry.
- Why: to review and respond to your dispute, and to correct the Ledger where appropriate.
- Legal basis: our legitimate interest in keeping the Ledger accurate (Art. 6(1)(f)).
When you visit the site
- What we collect: standard technical data such as IP address, browser type, pages visited and time of visit. This is processed by our hosting provider to deliver and secure the site.
- Legal basis: our legitimate interest in operating a secure website (Art. 6(1)(f)).
Analytics cookies
- With your consent, we use Google Analytics to understand how the site is used. It sets cookies and collects information such as the pages you visit, how long you stay, your browser and device, and your approximate location. We do not use it to identify you.
- Legal basis: your consent (Art. 6(1)(a)). Analytics cookies are only set if you accept them in the cookie banner. You can change your choice at any time using the "Cookie settings" link in the footer.
We do not sell personal data, and we do not use it for automated decisions that have legal or similarly significant effects on you.
Who we share it with
We use a small number of service providers who process data on our behalf, under contracts that require them to protect it:
| Provider | Purpose | Location |
|---|---|---|
| Vercel Inc. | Website hosting | United States / EU |
| Resend | Sending form submissions and replies by email | United States |
| Kit (ConvertKit) | Newsletter delivery | United States |
| Supabase | Database for the Ledger and site data | Ireland (EU) |
| Microsoft (Microsoft 365) | Business email | Ireland (EU) |
| Google (Google Analytics) | Website analytics, only with your consent | United States / EU |
We may also disclose personal data where required by law, or to protect our rights.
Transfers outside the European Economic Area
Some of our providers (Vercel, Resend, Kit and Google) are based in the United States. Where personal data is transferred outside the EEA, we rely on the EU–US Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses.
How long we keep it
- Assessment and contact enquiries: up to 24 months after our last exchange, unless we enter into a contract, in which case for the duration of the contract and any period required by law.
- Newsletter: until you unsubscribe.
- Ledger disputes: for as long as the related Ledger entry is published, plus 12 months.
- Hosting logs: as set by our hosting provider, typically no longer than 30 days.
Your rights
Under the GDPR you have the right to:
- access your personal data
- correct it
- have it erased
- restrict or object to its processing
- receive it in a portable format
- withdraw consent at any time, where processing is based on consent, without affecting processing already carried out
To exercise any of these rights, write to adarsh@rondotrace.com. We will reply within one month.
You also have the right to complain to a data protection supervisory authority. In Luxembourg this is the Commission nationale pour la protection des données (CNPD), cnpd.public.lu. You may also contact the authority in the EU country where you live or work.
Security
We use appropriate technical and organisational measures to protect personal data, including encrypted connections, access controls and reputable providers.
Children
This site is intended for business users. We do not knowingly collect data from anyone under 16.
Changes
We may update this notice. The date at the top shows when it was last changed.