This notice covers visits to rosenstonlabs.com and information submitted through its project-enquiry form or by email. The site is intended for business-to-business enquiries and does not sell personal information.
01 / PRIVACY
Who is responsible
ROSENSTON LTD is responsible for the personal information described in this notice.
- Company
- ROSENSTON LTD · Company Number HE 496160
- Registered Office
- Georgiou Karaiskaki 11–13, CARISA SALONICA, Flat/Office 102, Pervolia 7560, Larnaca, Cyprus
- Privacy contact
- info@rosenstonlabs.com
02 / PRIVACY
Information the website handles
Website requests and server logs
When you request a page, hosting infrastructure may process the IP address, request time, requested URL, browser or device information, referring page and diagnostic or security details. This is standard operational information used to deliver and protect the site.
Project enquiries
The form asks for your name, work email, company, project type and project summary. You may also provide a timeframe and budget range. The same principle applies to information you choose to include in a direct email.
Form-protection information
The contact form uses a hidden honeypot field, timing checks, server-side validation and a short-lived rate-limit counter to identify likely automated or malformed submissions. The counter uses a keyed digest derived from the request’s IP address and browser identifier, expires after approximately 15 minutes, and does not retain the raw values. Before processing a submission, the application also checks a provider-supplied country code derived from the request IP against a configured exclusion list. The application does not add that country code to the enquiry email or store it. These controls do not create a marketing profile.
Please do not include confidential credentials, special-category personal information or other sensitive material in an initial project enquiry.
03 / PRIVACY
Why information is used
| Purpose | Information | Ground |
|---|---|---|
| Deliver, secure and troubleshoot the website | Request, diagnostic and form-protection data | Legitimate interests in operating a reliable and secure business website |
| Review and respond to an enquiry | Contact details and enquiry content | Steps requested before a possible contract and legitimate interests in responding to business enquiries |
| Maintain necessary records and address legal matters | Relevant communications and business records | Applicable legal obligations and legitimate interests in establishing or defending legal claims |
If information is needed to take steps toward a contract, choosing not to provide it may mean ROSENSTON cannot evaluate or respond to the proposed project.
04 / PRIVACY
Service providers
The website uses a limited number of infrastructure providers. They process information to provide their services, subject to their applicable terms and data-protection arrangements.
Vercel
Hosts and delivers the website. Its infrastructure processes web requests and may maintain server, diagnostic and security logs.
Resend
Delivers contact-form enquiries to ROSENSTON by email and processes the submitted contact details and project information for that purpose.
The website does not write contact-form submissions to an application database or the website repository. Successfully delivered enquiries are received and handled as email records.
Personal information may also be disclosed where required by law or where necessary to establish, exercise or defend legal claims. ROSENSTON does not sell project-enquiry information.
05 / PRIVACY
Analytics, cookies and advertising
No website analytics are currently enabled.
The current implementation does not include Vercel Web Analytics, Vercel Speed Insights, advertising pixels, behavioural tracking tools or third-party marketing cookies. The website does not currently set browser cookies. Contact-form content is not sent to analytics.
If analytics or other tracking is introduced later, this notice and any consent controls will need to be reviewed before those tools are enabled.
06 / PRIVACY
How long information is kept
Enquiry information is kept only for as long as reasonably needed to assess and respond to the enquiry, manage a resulting business relationship, maintain necessary records and meet legal or dispute requirements. The appropriate period depends on whether the enquiry develops into a project and whether information must be retained for a legal reason.
Operational server logs are retained according to the hosting provider’s service configuration and operational policies. Data that is no longer needed is deleted or anonymised where practicable.
07 / PRIVACY
International processing
Vercel and Resend provide services using international infrastructure. Depending on their service configuration, personal information may be processed outside Cyprus or the European Economic Area. Their own data-protection terms describe processing locations and the transfer arrangements they make available.
Where international-transfer rules apply, ROSENSTON will use the relevant provider arrangements and other safeguards intended to support those requirements.
08 / PRIVACY
Your data-protection rights
Depending on the circumstances and applicable law, you may have rights to:
- Ask for access to your personal information
- Ask for inaccurate information to be corrected
- Ask for information to be deleted
- Ask for processing to be restricted
- Object to certain processing
- Receive eligible information in a portable format
- Withdraw consent where processing relies on consent
- Complain to the relevant supervisory authority
To make a request, email info@rosenstonlabs.com. ROSENSTON may need enough information to verify the request and locate the relevant records.
09 / PRIVACY
Security
ROSENSTON uses technical and organisational measures intended to protect the limited personal information handled through this website. The form is validated on the server and includes basic anti-spam controls. No method of transmission or storage can be guaranteed completely secure, so sensitive material should not be sent through an initial enquiry.
10 / PRIVACY
Changes to this notice
This notice should be updated when the website’s processing changes—for example, if analytics are enabled, the form provider changes or new integrations are added. The updated date at the top of the page will show when the public notice was revised.