Privacy Policy

1. Who we are

RocketWorks is production and packing software for makers and small production businesses. For personal information RocketWorks uses for its own purposes, RocketWorks is the data controller.

Operator: Softwarebox Solutions Ltd (company number 12205095), trading as RocketWorks
Office address: Pera Business Park, Nottingham Road, Melton Mowbray, England, LE13 0PB
Email:
If you cannot view the address image, use Contact RocketWorks.

2. Who this notice covers

This notice applies when you visit rocketworks.app, apply for founding access, contact us, create or use a RocketWorks account, connect a selling platform, import orders or otherwise use the RocketWorks service.

If a RocketWorks member imports information about their own customers, that member is normally the controller of that customer data and RocketWorks acts as the member’s processor. Section 6 explains this distinction.

3. Information we collect

Website visitors and founding applicants

We may collect:

• your first name and email address;
• your shop or website link, if you choose to provide it;
• where you sell, such as eBay, Etsy or Shopify;
• what you would like RocketWorks to help you improve;
• messages, feedback and other information you send us; and
• technical information such as IP address, browser type, device information, timestamps and security or server logs.

RocketWorks members

When you create or use an account, we may process:

• account and profile information, including your name, email address, role and workspace membership;
• authentication, session and security information;
• plan, usage, billing and subscription records when paid plans are introduced;
• the products, variations, images, making steps, packing checks, supplies, purchase links and other workshop information you add;
• support requests, feedback and communications; and
• audit, diagnostic, error and activity records needed to operate and protect the service.

Connected shops and imported orders

Depending on the features you use, RocketWorks may process:

• shop or seller identity and connection status;
• authorisation tokens or similar credentials needed to maintain an approved store connection;
• marketplace order references, listing identifiers, SKUs, product titles, variations, quantities, prices and order status;
• buyer names, usernames, delivery addresses and other fulfilment information contained in an order; and
• production progress, packing checks, parcel grouping, postage and dispatch records.

We use this information only to provide the operational features chosen by the member, keep the service secure, meet legal obligations and support or improve RocketWorks as described below.

4. How and why we use information

Where we rely on legitimate interests, those interests include operating a secure, reliable and useful service, preventing fraud or misuse, responding to members and improving RocketWorks. We consider the effect on the people concerned before relying on this basis.

5. Founding-access applications

The application form asks only for the information needed to understand who is applying and how RocketWorks may help. The shop link and workshop challenge are optional. Applications are stored in the website’s form system and sent to the monitored RocketWorks founding-team inbox.

We will not add you to general marketing merely because you applied. If we want to send optional marketing or research communications beyond the application and founding-member process, we will provide an appropriate choice.

6. A member’s customer and order data

When a maker imports or synchronises orders, they decide which customer data is placed into RocketWorks and why it is used. The maker is normally the data controller for that information. RocketWorks acts as a data processor and uses it only to provide and secure the service, follow the member’s documented instructions and meet applicable legal duties.

Members must have an appropriate lawful basis for placing customer information into RocketWorks and must give their customers any privacy information required by law. RocketWorks does not use a member’s customer list or order contents to market directly to those customers.

Marketing demonstrations: screenshots, sample workspaces and explainer videos are created with fictional demonstration accounts and dummy orders, products and customers. We do not use live member or marketplace-customer data in public marketing material unless the relevant people have separately and specifically agreed.

7. Who we share information with

We may share information only where necessary with:

• hosting, database, storage, backup, email and form-service providers that help us run RocketWorks;
• payment and billing providers when paid subscriptions are introduced;
• eBay, Etsy, Shopify or another platform when you ask RocketWorks to connect to or exchange data with that service;
• professional advisers, insurers, auditors or support specialists where reasonably necessary;
• a buyer, investor or successor if the RocketWorks business is reorganised or transferred, subject to suitable protections; and
• courts, regulators, law-enforcement bodies or other parties where disclosure is required by law or necessary to protect legal rights.

We do not sell personal information. Service providers may use information only to provide their contracted services or as otherwise permitted by law.

8. International transfers

Some service providers or ecommerce platforms may process information outside the United Kingdom. Where UK data-protection law requires it, we use an adequacy regulation, the UK International Data Transfer Agreement, the UK Addendum to approved contractual clauses or another lawful safeguard. You may contact us for more information about safeguards relevant to your data.

9. How long we keep information

We keep personal information only for as long as it is needed for the purpose collected, including to provide the service, protect accounts, resolve disputes and meet legal, tax or accounting duties.

• Founding applications: up to 12 months after the application is decided, unless the applicant joins RocketWorks, asks us to delete it sooner or we need to keep it for a legal reason.
• Member account and operational data: while the account is active and for a limited period afterwards to allow closure, recovery, disputes and compliance.
• Imported customer and order data: according to the service’s documented retention settings and the member’s instructions, subject to legal or security requirements.
• Billing and transaction records: for the period required by tax, accounting and legal rules.
• Security, diagnostic and backup records: for limited periods based on their purpose and technical rotation schedule.

When information is no longer required, we delete or anonymise it. Information may remain temporarily in protected backups until those backups rotate out of use.

10. Cookies and similar technology

The public website and member service may use cookies or similar storage for essential functions such as security, sessions, preferences and form operation. Non-essential analytics or marketing cookies will not be used without the choice required by law.

Our separate Cookies Policy will explain the cookies in use and how to manage them.

11. Security

We use appropriate technical and organisational measures designed to protect personal information. These include account-scoped access controls, secure authentication and session handling, restricted administrative access, validation of imported data and measures intended to prevent one workspace accessing another workspace’s records.

No online service can promise absolute security. If we become aware of a personal-data breach, we will assess it and notify affected people and the Information Commissioner’s Office where the law requires us to do so.

12. Your data-protection rights

Depending on the circumstances and the lawful basis used, you may have the right to:

• ask for a copy of your personal information;
• ask us to correct incomplete or inaccurate information;
• ask us to delete information;
• ask us to restrict how information is used;
• object to processing based on legitimate interests or to direct marketing;
• receive certain information in a portable format; and
• withdraw consent at any time where we rely on consent.

These rights are not absolute and exemptions may apply. To make a request, use the privacy contact details in section 1 or Contact RocketWorks. We may need to verify your identity before responding.

13. Automated decisions

RocketWorks may use rules to match listings, organise operational work or identify orders that may be grouped. These tools support a maker’s workflow. We do not currently make solely automated decisions about people that produce legal or similarly significant effects.

14. Children

RocketWorks is intended for businesses and working makers, not children. We do not knowingly invite children to create accounts or submit founding-access applications.

15. Questions and complaints

Please contact us first using the privacy contact details in section 1 or Contact RocketWorks so we can try to resolve any concern.

You also have the right to complain to the UK Information Commissioner’s Office. Visit ico.org.uk for current contact and complaint information.

16. Changes to this policy

We may update this policy as RocketWorks develops, service providers change or legal requirements evolve. We will publish the updated version here and change the date at the top. If a change materially affects how existing member data is used, we will provide additional notice where appropriate.