Who is responsible
RK Digital Studio is responsible for the website processing described here. A final legal entity name and direct privacy contact must be confirmed before production email delivery is enabled.
Until a direct contact is published, privacy questions can be raised through the Launch Plan form.
Information the website can collect
The Launch Plan form can collect your name, business name, email, optional telephone number and website, business stage, commercial goal, target customer, requested services, current digital problems, budget range, desired date, contact preference, referral source and contact consent.
The Scorecard keeps answers in the browser while you complete the assessment. If you choose to request an emailed result, the site can send your answers, score, email address and explicit consent.
Basic server logs may include technical request information used for security, reliability and fault diagnosis. Optional analytics only loads when configured and accepted.
Why it is used
- To respond to a requested Launch Plan or Scorecard result
- To assess fit, scope, timing and the appropriate next step
- To protect forms from spam, abuse and duplicate submissions
- To diagnose technical faults and maintain the service
- To measure website use when optional analytics consent is given
Depending on the request, processing may support steps you ask RK Digital Studio to take before a contract, the legitimate interest in responding to a business enquiry, or consent for optional analytics and emailed Scorecard detail.
Who can process it
Information may be handled by the website hosting provider and, for submitted forms, Supabase as the database provider. When configured, Zoho SMTP handles enquiry, acknowledgement and Scorecard emails. Optional Google analytics or tag management can be enabled only after consent.
A supplier should receive only the information needed for its service and remain subject to the relevant contractual and security controls.
Retention and security
Personal information should be kept only for as long as the business purpose, contractual record or legal obligation requires. RK Digital Studio should document, approve and periodically review its retention schedule. Information no longer needed should be deleted or anonymised where appropriate.
The site uses server-side validation, a honeypot, practical rate limits and duplicate detection. Submission tables use row-level security without anonymous access policies. Service credentials remain in private environment variables and are not exposed to the browser.
Your choices and rights
Depending on the circumstances, you may ask for access, correction, deletion, restriction, objection or portability. You can withdraw consent for optional processing without changing the lawfulness of earlier processing.
You can also raise a concern with the Information Commissioner's Office.
Cookies and local storage
The theme preference and analytics choice can be stored on your device. Nonessential analytics is disabled unless a tracking identifier is configured and you actively accept it. Rejecting analytics does not limit the website.
Changes to this notice
This notice should be reviewed when the contracting entity, suppliers, data uses or retention periods change. Material new uses should be explained before they begin.