Privacy Policy | Community Rocket
Last updated: 6th September 2026
This Privacy Policy explains how Jonny Quirk, a sole trader trading as Community Rocket (“I”, “me”, “my” or “Community Rocket”) collects and uses personal data when you visit https://www.communityrocket.co/, contact me, enquire about or purchase a business service, or otherwise interact with Community Rocket.
Community Rocket provides business-to-business customer-led growth consultancy for SaaS, subscription and technology businesses. Its services include Customer-Led Growth Audit & Roadmap engagements, Fractional Head of Customer-Led Growth partnerships, Implementation Sprints and related discovery, strategy, workshop and implementation support.
This policy should be read alongside the Community Rocket Terms of Business and Cookie Policy.
1. Data controller
The data controller is:
Jonny Quirk, trading as Community Rocket
Business correspondence address: 28 Kingston, Heaton Moor, SK44SF
Email: hello@communityrocket.co
Community Rocket is operated as a sole-trader business. If the business is later operated by a limited company, this policy will be updated to identify the correct legal entity.
2. Who this policy applies to
This policy applies to:
Representatives of businesses that contact or engage Community Rocket.
People whose details are provided by a business in connection with an engagement.
Visitors to the Community Rocket website.
People who subscribe to business updates or request information.
Community Rocket provides services to businesses and organisations, not to consumers for personal, domestic or household purposes.
If you provide personal data about another person, you confirm that you are authorised to do so and that you have given them any information required by data-protection law.
3. Personal data collected
Depending on how you interact with Community Rocket, I may collect:
Name, job title, role, company name, company website and business contact details.
Email address, telephone number, business address and billing information.
Enquiry, proposal, booking, contract, invoice, payment and customer-service records.
Information about your organisation, customer lifecycle, retention, churn, advocacy, community, product, go-to-market activity and business objectives.
Information supplied during interviews, workshops, audits, meetings and implementation projects.
Documents, data, recordings, notes, feedback and other material provided for an engagement.
Technical information such as IP address, browser type, device type, operating system, referring page, pages viewed and approximate location.
Cookie, analytics and marketing-preference information.
Publicly available professional information where reasonably necessary for a legitimate business enquiry, relationship or partnership.
Please do not provide passwords or special-category personal data unless it is necessary for an agreed engagement and appropriate safeguards have been discussed.
4. How personal data is collected
I may collect personal data:
Directly from you through the Website, forms, email, calls, meetings, bookings, proposals, invoices and consultations.
From your employer, company or another business representative.
Automatically through the Website, hosting systems, server logs and cookies.
From payment, scheduling, email, video-conferencing, cloud-storage and other business service providers.
From publicly available professional sources, such as company websites and professional networking platforms, where relevant to a legitimate business purpose.
5. Purposes and lawful bases
I may use personal data to:
Purpose Lawful basis
Respond to an enquiry, assess requirements and prepare a proposal Pre-contract steps; legitimate interests
Deliver audits, roadmaps, fractional leadership, implementation sprints and related services Performance of a contract; pre-contract steps
Conduct stakeholder or customer interviews and workshops Performance of a contract; legitimate interests; consent where required for a recording or specific use
Manage bookings, communications, support and deliverables Performance of a contract; legitimate interests
Process payments, invoices, refunds and financial records Performance of a contract; legal obligation
Keep business records and comply with tax, accounting and legal obligations Legal obligation; legitimate interests
Protect the Website, systems and business from fraud, misuse and security threats Legitimate interests; legal obligation
Improve services, content, processes and Website performance Legitimate interests; consent where required for optional cookies
Send relevant business updates or marketing Consent where required; legitimate interests where lawful and appropriate
Establish, exercise or defend legal claims Legitimate interests; legal obligation
Where I rely on legitimate interests, those interests include operating and developing a specialist B2B consultancy, communicating with business contacts, improving services, maintaining security and protecting legal and commercial rights. I consider those interests against your privacy rights before relying on them.
6. Business marketing
I may send business updates, insights and marketing communications where lawful. You can unsubscribe at any time using the unsubscribe link in the message or by contacting hello@communityrocket.co.
You will continue to receive essential service communications, such as proposal, booking, payment, security or project messages, where necessary.
I do not sell personal data.
7. Cookies and similar technologies
The Website may use necessary cookies for security, form submission, session management and remembering privacy choices. It may also use optional preference, analytics or marketing cookies if those tools are installed and enabled.
Optional cookies will be used only in accordance with applicable consent requirements. The exact cookies depend on the live Website configuration and may include tools supplied by the website platform, analytics providers, booking providers, video platforms, payment providers or advertising platforms.
Please see the separate Community Rocket Cookie Policy for the current cookie categories, providers, purposes, retention periods and choices available to you.
8. Service providers and sharing
I may share personal data with carefully selected service providers that process it on my behalf, including providers of:
Website hosting and website-platform services.
Email, contact-form and customer-relationship tools.
Payment processing and invoicing.
Scheduling, video conferencing, webinars and events.
Cloud storage, document management and business productivity.
Analytics, cookie-management and security services.
Professional services, including accountants, solicitors, insurers and IT providers.
I may also disclose personal data:
Where required by law, court order or a regulator.
To prevent or investigate fraud, unlawful activity or security incidents.
To establish, exercise or defend legal claims.
In connection with a sale, restructuring or transfer of the business.
Where you or the relevant business has authorised the disclosure.
I require processors to act only on appropriate instructions and to use suitable confidentiality and security measures.
9. International transfers
Some service providers may process personal data outside the United Kingdom. Where this occurs, I will use a lawful transfer mechanism and appropriate safeguards, such as UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, or another mechanism permitted by applicable data-protection law.
You can contact me using the details above for further information about relevant safeguards.
10. Retention
I keep personal data only for as long as reasonably necessary for the purposes described in this policy.
Typical retention periods are:
Enquiry and business-contact records: normally up to 24 months after the last meaningful contact.
Proposal, contract, project and correspondence records: for the duration of the relationship and afterwards as reasonably necessary for legal, accounting, tax and dispute-resolution purposes.
Financial records: for the period required by applicable tax and accounting law.
Marketing records: until you unsubscribe or the information is no longer reasonably required.
Website and analytics data: according to the configuration and retention settings of the relevant provider.
Recordings and interview material: for the period stated in the relevant engagement or, if no period is stated, only as long as reasonably necessary for delivery, quality assurance and legal protection.
Data may be retained for longer where necessary to establish, exercise or defend legal claims or comply with law.
11. Security
I use reasonable technical and organisational measures to protect personal data against accidental loss, unauthorised access, alteration or disclosure.
No internet transmission or electronic storage system is completely secure. If I become aware of a personal-data breach requiring notification, I will respond in accordance with applicable law.
12. Your rights
Subject to legal conditions and exceptions, you may have the right to:
Request access to personal data.
Request correction of inaccurate or incomplete data.
Request erasure.
Request restriction of processing.
Object to processing based on legitimate interests.
Object to direct marketing.
Request data portability where the legal conditions apply.
Withdraw consent where processing is based on consent.
To exercise a right, contact hello@communityrocket.co. I may need to verify your identity before responding.
I will normally respond within one month of receiving a valid request, subject to any lawful extension for complex or multiple requests.
You may complain to the Information Commissioner’s Office at https://ico.org.uk/make-a-complaint/.
13. Third-party websites
The Website may link to third-party websites and services, including booking, professional-networking, payment or video platforms. I am not responsible for their privacy practices. You should review the privacy notice of each third party before submitting personal data.
14. Changes
I may update this policy from time to time. The latest version will be posted on this page with a revised “Last updated” date. Where required, I will provide additional notice of material changes.
15. Contact
Jonny Quirk, trading as Community Rocket
Business correspondence address: 28 Kingston, Heaton Moor, SK44SF
Email: hello@communityrocket.co