Privacy Policy.

2. Who we are, and what this policy covers

Rockford Core LLC is a limited liability company formed in the United States. We are the party responsible for the information described here.

This policy covers the website at rockfordcore.com and nothing else. It does not cover other websites you may reach from a link, which have their own policies, and it does not cover any separate product, application, or agreement we may operate or enter into, each of which is governed by its own terms and its own privacy notice.

We do not publish our registered address or our state of formation on this page. Both are available on request through the contact form, and we provide them routinely during vendor verification.

3. What this website collects

Server logs. Our hosting provider automatically records standard technical information for each request: the IP address the request came from, the date and time, the page or file requested, the response status and size, the referring address if there is one, and the browser or client identifier your device sends. This happens for every visit and is how any website on the internet is delivered and defended.

The contact form. The form asks for your name, your company, your email address, a topic, and a message. Submissions are stored by the edge host that serves the site, together with a timestamp and the technical details above, so that we can read them and reply. You decide what to write in the message field, so please include only what is needed for your enquiry.

Nothing else. There are no accounts, no logins, and no payments on this site, so we do not collect passwords, credentials, or payment details of any kind.

4. Why we use this information, and our legal bases

We use server logs to deliver pages, keep the site available, diagnose faults, and detect and prevent abuse such as flooding, probing, or automated attacks. Where the GDPR or UK GDPR applies, the legal basis is our legitimate interest in running a secure and functioning website.

We use contact form submissions to read your message, reply to you, and keep a record of the exchange. The legal basis is our legitimate interest in responding to people who contact us, or, where your message concerns a possible agreement, taking steps at your request before entering into one.

We may also use information where we have to comply with a legal obligation, or to establish, exercise, or defend legal claims.

We do not use this information for advertising, for profiling, or for any automated decision-making that produces legal or similarly significant effects.

5. Cookies, analytics, and third-party content

This website sets no cookies. It runs no analytics, no advertising or conversion pixels, no tag manager, no session recording, and no A/B testing tool. It embeds no third-party fonts, scripts, videos, maps, chat widgets, or social buttons, and it ships no JavaScript at all.

Because nothing is stored on your device and nothing is loaded from anyone else, there is nothing here to consent to, which is why you will not see a cookie banner.

Our host may apply automated protections at the network level to block malicious traffic. If we ever add anything that stores information on your device or loads content from a third party, we will update this policy first and, where consent is required, ask for it before doing so.

6. Who we share information with

We do not sell, rent, or trade information about visitors, and we do not disclose it to advertising networks or data brokers.

We share it only with the following categories of recipient, and only as far as each needs it: our hosting and edge network provider, which serves the site and stores contact form submissions; our domain and DNS provider; the business communication tools we use to read and reply to messages; and our professional advisers, such as lawyers and accountants, who are bound by confidentiality.

We may also disclose information where the law requires it, in response to a valid legal request, or where it is necessary to protect our rights, safety, or property. If the business is sold or reorganised, information may pass to the successor, which would remain bound by this policy or a materially similar one.

7. International transfers

We are based in the United States and our service providers are principally based there. An edge network by design stores and serves content from locations around the world, so a request may be handled by a server outside your country.

If you are in the European Economic Area, the United Kingdom, or Switzerland, information you send us will be transferred to and processed in the United States, which has not received an adequacy decision covering all transfers.

Where a transfer safeguard is required, we rely on the European Commission's standard contractual clauses, the UK International Data Transfer Addendum, or another lawful mechanism offered by the provider concerned. You can ask through the contact form for details of the mechanism that applies.

8. How long we keep information

Server logs are short-lived. Our host retains them for a limited period, ordinarily no more than about thirty days, and we keep a copy longer only where we need it for a specific security investigation.

Contact form submissions are kept while we deal with your enquiry and for a limited period afterwards so that we have a record of the conversation, ordinarily no longer than twenty-four months. We keep something longer only where it is needed for a legal claim or a legal obligation.

You can ask us through the form to delete your submission sooner, and we will do so unless we are required to keep it.

9. Security

The site is served over HTTPS. We rely on the platform protections our host provides, and access to contact form submissions is limited to the small number of people who need it.

We hold no security certifications and we claim none. We are not SOC 2 audited and not ISO 27001 certified, we are not attested against any security framework, and nothing on this site should be read as a representation that we meet a particular standard.

No website or transmission over the internet is completely secure, and we cannot guarantee absolute security. Please do not send confidential material, credentials, or sensitive personal information through the contact form.

10. Your rights in the EEA, the UK, and Switzerland

If the GDPR or UK GDPR applies to you, you have the right to ask for a copy of the personal data we hold about you, to have inaccurate data corrected, to have data erased, to restrict how we use it, to receive it in a portable format, and to object to processing we carry out on the basis of legitimate interests. Where we rely on consent, you can withdraw it at any time without affecting what came before.

To exercise any of these rights, use the contact form and say which right you are relying on. We may need to ask a question or two to satisfy ourselves that the request is genuinely yours. We will respond within one month, and will tell you if we need longer. There is no charge unless a request is manifestly unfounded or excessive.

You also have the right to complain to your local supervisory authority, or to the Information Commissioner's Office in the United Kingdom.

11. Your rights under US state privacy laws

If you are a resident of California, or of another state with a comprehensive privacy law such as Virginia, Colorado, Connecticut, Utah, Texas, Oregon, or Montana, you may have rights to know what personal information we have collected, to receive a copy of it, to have it corrected, to have it deleted, and not to be treated differently for exercising those rights. Several states also give you the right to appeal if we refuse a request.

In the past twelve months we have collected, from you directly or automatically from your device, the categories described in section 3: identifiers such as name, email address, and IP address; professional or employment-related information such as your company; internet or network activity in the form of server logs; and the content of any message you send us. We use and disclose these for the purposes set out in section 4, and to the categories of recipient in section 6.

We do not sell personal information, and we do not share it for cross-context behavioural advertising, as those terms are defined in the CCPA and CPRA and in comparable state laws. We have never done so. We do not collect sensitive personal information for any purpose that would give you a right to limit its use, we do not use it for targeted advertising or profiling, and we do not knowingly sell or share the personal information of anyone under sixteen.

To make a request, use the contact form. An authorised agent may act for you with your written permission, and we may still need to verify the request with you directly.

12. Children, changes to this policy, and how to contact us

Children. This site is aimed at businesses and is not directed to children. We do not knowingly collect personal information from anyone under sixteen. If you believe a child has sent us information through the form, tell us and we will delete it.

Changes. We may update this policy as the site or the law changes. The current version is always the one posted here, and we will change the "last updated" date at the top of the page when we revise it. If a change is material, we will say so in plain terms rather than quietly rewriting the text.

Contact. The contact form on this site is the only route to us. We do not publish an email address, and messages sent to addresses that merely appear to belong to us may never reach anyone. Use the form for privacy requests, for questions about this policy, or to ask for our state of formation and registered address during vendor verification.