1. Who we are

RoadmapOne is a trading name of Divrsity Ltd, company No. 13822923, registered at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, UK (“we”, “us”, “our”).

For privacy questions, e-mail dpo @t roadmap dot one.

2. The data we collect

We do not collect advertising identifiers or sensitive personal data.

3. How we use your data

• Provide, secure, and improve the service
• Send essential notices (billing, security, product updates)
• Show aggregated, anonymous usage trends (never personal data)

4. Cookies & analytics

We set only essential session cookies. Analytics are cookieless via Simple Analytics. See our Cookie Policy for details.

5. Sharing & sub-processors

We share data only with trusted sub-processors:

• Stripe: payments
• AWS (eu-west-1): hosting
• Simple Analytics: usage insights (cookieless)

Each sub-processor is under contract to protect your data.

6. International transfers

All data is stored in the UK/EU. If we ever transfer data outside the UK/EU, we rely on Standard Contractual Clauses or the UK IDTA.

7. Retention

Active accounts: data kept for the life of the subscription.

Closed/dormant accounts: deleted 90 days after closure.

8. Your rights

Under UK GDPR / EU GDPR you can: access, correct, delete, or port your data; object or restrict processing. Email dpo a@ roadmap dot one.

California residents (CCPA) and Canadian residents (PIPEDA) have equivalent rights.

9. Security

We use TLS encryption in transit, AES-256 at rest, least-privilege access, and regular audits.

10. Complaints

UK users may complain to the ICO. EU users may complain to their local DPA. We'd appreciate a chance to resolve any issue first—email dpo @t roadmap dot one.

11. Changes

We'll notify you of any material changes at least 14 days before they take effect.