Welcome to Roccelh.com. This website and its associated subdomains are operated by ROCCELH LTD (“we”, “us”, “our”, or the “Company”), a private limited company incorporated in England and Wales under Company Registration Number 16729000.

We operate across retail sales via internet/mail order, business and domestic software development, and information technology consultancy. Because we process personal data across our primary site, e-commerce layers, multi-vendor marketplace configurations, and dedicated subdomain applications (including translation utilities and regional frameworks), we are deeply committed to protecting the privacy, security, and absolute integrity of the personal data belonging to our visitors, clients, vendors, and users (“you”, “your”, “user”).

This Privacy Policy explains in extensive detail what information we collect, how we process and store it, our legal bases for processing, how we utilize third-party cookies (specifically regarding Google AdSense monetization configurations), and your statutory legal rights under the UK GDPR, EU GDPR, CCPA, and associated global data privacy frameworks.

1. Scope of This Policy

This Privacy Policy applies unconditionally to all personal data collected or processed through:

1. Our primary corporate domain: roccelh.com
2. All current and future subdomains, including but not limited to fanyi.roccelh.com and china.roccelh.com
3. Any software, web applications, widgets, APIs, newsletter distributions, customer portals, and multi-vendor marketplace architectures operated by ROCCELH LTD.
4. Direct communications with our corporate team via email, digital contact forms, telephone, or instant messaging channels.

This policy does not extend to third-party websites, applications, or external integrations that we link to or reference, which maintain their own separate, autonomous privacy standards.

2. The Legal Bases for Data Processing

Under the UK/EU General Data Protection Regulation (GDPR), we must maintain a valid, clearly defined legal basis to process your personal data. We rely on one or more of the following legal grounds depending on the nature of your interaction with our platforms:

• Consent: You have given clear, unambiguous, and explicit consent for us to process your personal data for a specific, defined purpose (e.g., subscribing to a newsletter module, completing a contact inquiry form, or accepting performance/marketing cookies).
• Performance of a Contract: The processing of data is strictly necessary to fulfill a contract we have entered with you, or to execute pre-contractual steps (e.g., delivering web development structures, IT consulting provisions, or executing e-commerce marketplace transactions across our platforms).
• Legal Obligation: The processing is necessary for us to achieve absolute compliance with statutory laws, including corporate, tax, audit, anti-fraud, and regulatory reporting mandates in the United Kingdom.
• Legitimate Interests: The processing is vital for our legitimate business interests, provided those interests do not override your fundamental data rights and liberties. This encompasses optimizing our responsive layout, evaluating site traffic flows, shielding against fraudulent actions, and delivering tailored ad monetization metrics via Google AdSense.

3. Comprehensive Breakdown of Data We Collect

We gather data through three distinct vectors: information you provide voluntarily, information harvested automatically through technical channels, and data received from trusted third parties.

A. Personal Data You Voluntarily Provide to Us

• Contact Information: Legal name, electronic mail address, physical shipping address, billing coordinates, and telephone numbers. This data is collected when you populate forms, request comprehensive support, or engage in administrative correspondence.
• Account Credentials: Usernames, display profiles, passwords, and security verification strings established during registration on our e-commerce multi-vendor platform or language tools.
• Transaction and Financial Information: If you procure digital assets or consultancy services, we process payment parameters. We do not store raw credit card credentials on our hardware infrastructure; all transactions are routed via PCI-DSS-compliant third-party gateways (e.g., Stripe, PayPal).
• User-Generated Content: Any textual data, electronic files, or media layers uploaded to our subdomains (such as inputs processed via translation interfaces like fanyi.roccelh.com).

B. Technical and Analytical Data Collected Automatically

As you navigate across our primary directories and subdomains, our servers and integrated analytics systems automatically log metadata layers:

• Device and Browser Specifications: Anonymized Internet Protocol (IP) address, browser version matrix, operating system parameters, active device signatures, localization language matrices, and responsive pixel resolutions.
• Navigation & Interaction Profiles: Referrer URLs, pages viewed across Roccelh.com, subdomains accessed, timestamps of entries/exits, duration metrics, clickstream vectors, and interactive link engagements.
• Cookies and Local Storage: Small text tokens deployed to your device memory to preserve operational preferences, track marketing metrics, and generate aggregate statistical tables.

C. Information Received from Third Parties

We may acquire data from downstream partners, including social authentication brokers (Google/Facebook login APIs), analytical infrastructure providers (Google Analytics), and ad network performance feeds (Google AdSense).

4. Google AdSense, Third-Party Advertising, and Cookie Disclosures

This digital platform is monetized utilizing dynamic advertisements served by Google AdSense. To achieve absolute compliance with Google Publisher Policies, we maintain the following legally binding tracking disclosures:

B. User Autonomy and Opt-Out Protocols

You retain an unconditional, permanent right to terminate personalized ad targeting. To revoke or modify how your interaction profile is processed for marketing:

• Google Ad Targeting Revocation: Users can easily disable personalized advertising configurations by adjusting settings on the official Google Ad Settings Portal.
• Global Network Opt-Out Frameworks: You can choose to systematically opt out of a large percentage of third-party cookie-based tracking platforms by visiting the Network Advertising Initiative (NAI) Opt-Out Platform or via the Digital Advertising Alliance (DAA) Choice Utility.
• European & UK Compliance Rules: Visitors stemming from the EEA or the United Kingdom can granularly accept, reject, or modify tracking cookie initializations via our on-site Interactive Consent Management Banner prior to non-essential script execution.

5. Detailed Cookie Policy

Beyond advertising operations, Roccelh.com utilizes cookies split across distinct conceptual categories to assure responsive execution:

6. Explicit Intent and Purposes of Data Processing

ROCCELH LTD will handle, process, and direct personal data strictly for transparent, documented business utilities:

• To provision client workspaces, organize multi-vendor marketplace configurations, deliver digital design modules, and manage system architectures.
• To manage secure profile layers, maintain password encryption walls, and provide vendor dashboards.
• To fuel real-time automation scripts on language tools like fanyi.roccelh.com. Text sent to public translation boxes is executed instantly in-memory and is not archived persistently on our databases unless saved to an authenticated user account.
• To send platform transactional notices, terms updates, support feedback, and promotional newsletters (where consent was explicitly granted).
• To evaluate raw network server logs to block malicious bot traffic, mitigate brute-force attempts, filter comment spam, and suppress Distributed Denial of Service (DDoS) vectors.
• To archive corporate financial files, tax balances, invoice declarations, and statutory bookkeeping data under UK HM Revenue and Customs (HMRC) oversight.

7. Data Sharing and Third-Party Disclosures

We strictly prohibit the sale, rental, leasing, or commercial trading of your personal data to third-party entities for independent marketing or promotional campaigns. Data sharing is limited to the following secure parameters:

• Core Infrastructure Processors: Data may be securely handled by cloud storage systems (AWS, DigitalOcean), professional enterprise mail platforms, and automated invoice tools. All operate under strict Data Processing Agreements (DPAs).
• Monetization Analytics: Aggregated, non-identifiable parameters are shared with Google AdSense to audit revenue metrics and ad volume impressions.
• Structural Corporate Adjustments: In the event that ROCCELH LTD navigates a merger, corporate acquisition, or complete asset transfer, user data archives may migrate as an enterprise asset under this exact Privacy Policy framework.
• Legal Mandates: Data files may be rendered to judicial benches, law enforcement bodies, or corporate legal counsel if required by UK statutory laws, or to defend the properties, rights, and user safety of ROCCELH LTD.

8. International Data Transfers

Because ROCCELH LTD serves audiences globally, data processing may cross borders outside your country of origin. Whenever personal data is transferred outside the borders of the United Kingdom or the European Economic Area (EEA) to destinations lacking an “adequacy status” from data regulators, we guarantee safety through the deployment of the European Commission’s Standard Contractual Clauses (SCCs) coupled with the UK International Data Transfer Agreement (IDTA).

9. System Data Retention Lifespans

We preserve personal data profiles only for durations required to execute the objectives outlined in this Policy document:

• User Profile Accounts: Preserved during the active operational duration of your account profile layer.
• Financial & Invoice Records: Retained for a mandatory baseline of 6 fiscal years to fully align with UK corporate laws and HMRC tax auditing regulations.
• System Analytical Logs: Automated server log strings are truncated, wiped, or systematically anonymized within a 30 to 90-day window.

10. Statutory Data Rights Under UK and EU GDPR

If you connect from the United Kingdom or the EEA, you hold comprehensive legal protections over your personal data profiles. You may invoke the following rights at any juncture without financial fees:

• Right of Access (Subject Access Request): The right to demand a clean, digital copy of all personal data profiles currently curated by us.
• Right of Rectification: The right to force immediate updates to inaccurate, outdated, or broken data files.
• Right of Erasure (“Right to be Forgotten”): The right to command the total removal of your data files from active database lists, subject to legal storage overrides.
• Right to Restrict Processing: The right to lock the processing of data while investigations or verifications occur.
• Right to Data Portability: The right to request your personal data structured in a clean, machine-readable format for transfer to external providers.
• Right to Object: The right to protest data processing driven by “Legitimate Interests” or direct marketing outreach.
• Right to Revoke Consent: The right to terminate processing access instantly where consent served as the sole validation background.

To exercise your statutory entitlements, please dispatch an email to our compliance desk: privacy@roccelh.com. We will complete your request within a maximum of 30 calendar days.

11. United States Regional Protections (CCPA / CPRA)

For visitors from California or matching state frameworks, specific parameters apply under the California Consumer Privacy Act (CCPA):

• Right to Know & Disclosure: The right to review what categories of data we aggregate, the origin sources, our corporate motives, and downstream disclosure profiles.
• Right to Stop Sharing/Selling: While we never trade records for money, our use of third-party analytical and advertising trackers (Google AdSense) can represent “sharing” under CCPA definitions. You can deactivate tracking via our consent interface.
• Right to Non-Discrimination: We strictly prohibit any degradation of digital services, pricing structures, or support response speeds if you exercise your CCPA rights.

12. Security Architecture and Breach Controls

We enforce strict technological safety blocks to shield personal data layers from interception, manipulation, or structural loss. This features complete, site-wide HTTPS/SSL cryptographic tunnels across all domains and subdomains (including roccelh.com, fanyi.roccelh.com, etc.), reinforced by enterprise-level web application firewalls (WAF).

In an exceptional scenario involving a structural data breach, we adhere to a rapid action layout. We will report incidents to the UK Information Commissioner’s Office (ICO) and email affected users within a 72-hour window if a data security compromise poses a high privacy risk.

13. Children’s Privacy Mandates

Our business consultancy, translation tools, and e-commerce layers are not designed for or intentionally targeted at children under the age of 13 (or under 16 across localized EU zones). We do not knowingly compile or store profiles on children. If a parent or authorized guardian discovers that a minor has submitted personal files to our infrastructure without confirmation, notify us instantly, and we will purge the target records from our servers.

14. Policy Modifications

We reserve the right to modify this Privacy Policy at any milestone to reflect system edits, subdomain changes, or evolving international data regulatory updates. Revised policies operate dynamically upon being uploaded to this URI directory, updated via the tracking timestamp located at the header of this document.

15. Contact Details & Regulatory Supervisory Channels

For any clarifying questions concerning data management frameworks, contact the executive directors of ROCCELH LTD via:

• Registered Identity: ROCCELH LTD (UK Company Number 16729000)
• Physical Mail Address: 128 City Road, London, United Kingdom, EC1V 2NX
• Data Compliance Mailbox: contact@roccelh.com