Skip to content

Privacy Policy

Last updated: 4 September 2026

This policy explains what personal data Rocketlink collects when you use this website, why we collect it, who we share it with, and the rights you have under the EU General Data Protection Regulation (GDPR).

1. Who we are

The data controller is Rocketlink Technologies Limited, registered in Malta. Full company details (address, registration number, VAT ID) are listed on our imprint.

For any question about your data or this policy, write to privacy@rocketlink.co.

2. What we collect, and why

We only collect personal data through four narrow paths.

  • Contact form. When you write to us through the contact form, we collect your name, email address, the role you selected, and the subject and body of your message. Legal basis: pre-contractual steps you requested (GDPR Art. 6(1)(b)) and our legitimate interest in answering inquiries (Art. 6(1)(f)).
  • Newsletter subscription. If you subscribe to our Insights newsletter we collect your email address and the page you subscribed from. We use double opt-in: nothing is added to the list until you click the confirmation link in the email we send. Every newsletter email includes a one-click unsubscribe link. Legal basis: your consent (Art. 6(1)(a)), which you can withdraw at any time.
  • Job applications. When you apply for an open role through the application tools on this site, we collect your name, email address, location, your motivation for the role, the projects and experience you describe, your salary expectation, the profile links you provide, and your CV. We use this data to assess your application and to contact you about it, and we send you a confirmation that we received it. Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
  • Server logs and abuse prevention. Our hosting infrastructure briefly records the IP address of incoming requests, and we use IP addresses for short-term rate limiting of forms and applications. Legal basis: legitimate interest in keeping the site available and free of abuse (Art. 6(1)(f)).

3. Who we share it with

We use a small number of service providers (processors) to run this site. They only process data on our instructions, under written data-processing agreements.

  • Sanity (Sanity.io) stores contact-form submissions and job applications, including CV files.
  • Resend (resend.com) delivers our transactional emails, such as confirmations and internal notifications.
  • Vercel Inc. (vercel.com) hosts this website and keeps short-lived server logs.
  • Upstash (upstash.com) provides the short-lived storage used for rate limiting.

We do not sell your data, and we do not share it for advertising. Where a processor transfers data outside the European Economic Area, the transfer is covered by the European Commission's standard contractual clauses.

4. How long we keep it

We keep contact-form submissions for as long as needed to resolve your inquiry, plus a reasonable archival period for our records and for legal claims. Server logs are retained for a short period for security and operational purposes, then deleted or anonymised.

We keep job applications for the duration of the recruitment process and for up to six months after the role closes, so that we can answer questions about our decision. If you agree to us keeping your application on file for future openings, we keep it for longer, and you can ask us to delete it at any time.

5. Your rights

Under the GDPR, you have the right to:

  • access the personal data we hold about you,
  • have inaccurate data corrected,
  • have your data deleted,
  • restrict or object to certain processing,
  • receive your data in a portable format,
  • withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, email privacy@rocketlink.co. You also have the right to lodge a complaint with a supervisory authority. In Malta, that is the Office of the Information and Data Protection Commissioner (idpc.org.mt). If you live elsewhere in the EU or EEA, you can contact your local supervisory authority instead.

6. Cookies

This site does not use analytics, advertising or tracking cookies. Because no consent-requiring cookies are set, we do not show a cookie banner.

7. Changes to this policy

We may update this policy from time to time. The date at the top of the page reflects the most recent revision.