How your information is handled.

Rosch Haden · Privacy and GDPR

Who we are

Rosch Haden provides remote executive support and executive partnership services for founders, senior leaders and businesses in the UK.

For the purpose of UK data protection law, the data controller is Birgit Rosch Haden trading as Rosch Haden.

Controller contact details

Data controller: Birgit Rosch Haden trading as Rosch Haden
Email: broschhaden@outlook.com
Website: www.roschhaden.com

Information we collect

We may collect personal information when you contact us, submit a website enquiry, discuss working together, become a client or communicate with us by email, phone or other business channels.

• Name and contact details, including email address and phone number.
• Company name and role, where provided.
• Information you choose to share about your support needs, projects, business priorities or preferred hours of support.
• Messages, enquiry details and correspondence.
• Basic website and technical information, such as browser type, device information and pages visited, where analytics or hosting logs are used.
• Billing, payment and contract information where you become a client.

How we use your information

Your information is used to respond to enquiries, understand whether Rosch Haden is the right fit for your needs, provide services, manage client relationships and run the business properly.

• To reply to messages submitted through the contact form.
• To arrange calls, discuss requirements and prepare proposals or retainers.
• To provide executive support services once agreed.
• To manage invoicing, payment records and business administration.
• To keep appropriate records for legal, tax and accounting purposes.
• To improve the website, enquiry process and client experience.

Lawful basis for processing

We only process personal information where there is a lawful basis to do so. Depending on the situation, this may include:

• Contract: where processing is needed to provide services or take steps before entering into a client agreement.
• Legitimate interests: where processing is needed to respond to enquiries, manage business relationships, improve services or protect the business, provided your rights and interests do not override those interests.
• Legal obligation: where information must be kept for tax, accounting, regulatory or legal reasons.
• Consent: where you have clearly agreed to a specific use of your information, such as optional marketing communications.

Who information may be shared with

We do not sell personal information. We may share information with trusted suppliers where needed to operate the website, manage communications, deliver services or meet legal obligations.

• Website hosting, email, form handling and security providers.
• Accounting, bookkeeping, payment or professional advisory providers.
• Legal, regulatory or public authorities where required by law.

Where suppliers process personal information on our behalf, they are expected to handle it securely and only for the agreed purpose.

International transfers

We do not knowingly transfer personal information outside the UK unless necessary to use trusted service providers, such as website hosting, email, form handling, payment, accounting or business administration platforms. Where a supplier processes information outside the UK, we expect appropriate safeguards to be in place.

How information is protected

We take reasonable technical and organisational steps to protect personal information, including limiting access to information, using secure business systems where appropriate, and keeping only the information needed for legitimate business purposes.

How long we keep information

We keep personal information only for as long as needed for the reason it was collected, including for business, legal, tax and accounting purposes.

• Enquiry information is usually kept for up to 24 months unless a working relationship begins or there is a clear reason to keep it longer.
• Client, contract, invoice and payment records may be kept for up to 7 years to meet tax and accounting requirements.
• General correspondence may be kept for as long as reasonably needed to manage the relationship and protect the business.

Cookies and analytics

The website may use essential hosting or security technologies that are needed for the site to work. If analytics, tracking pixels or non-essential cookies are added in future, this policy should be updated and an appropriate cookie notice should be used.

Your data protection rights

Under UK data protection law, you may have rights to access, correct, delete, restrict or object to the use of your personal information. You may also have the right to data portability and the right to withdraw consent where consent is the lawful basis being used.

You also have the right to complain to the Information Commissioner’s Office, the UK data protection regulator, if you are unhappy with how your information has been handled. You can find more information at www.ico.org.uk.

Rosch Haden will keep under review whether registration with the Information Commissioner’s Office and payment of the UK data protection fee is required.

Contact

To ask a privacy question or make a data protection request, contact Rosch Haden using the details below.

Email: broschhaden@outlook.com
Website: www.roschhaden.com