Privacy Policy

1. Who We Are

Rumbling (rumbling.ai) is a digital agency specializing in AI-powered strategy, technology, and transformation. We act as the data controller for personal data collected through this website.

Questions? Email us at hello@rumbling.ai

2. Information We Collect

We collect only what we need to serve you:

• Identity & Contact: Name, Email Address, Phone Number — provided when you fill in a form or contact us.
• Technical Data: IP address, browser type, device type, and pages visited — collected automatically via cookies and server logs.
• Professional Data: Business challenges, company size, industry — shared when you inquire about our services.
• Marketing Preferences: Your opt-in choices and communication history.

We do not collect sensitive personal data (health, race, religion, etc.) unless you voluntarily share it and explicitly consent.

3. How We Use Your Data

We use your data to respond to inquiries, deliver and improve our services, send marketing (where you've opted in), analyze website performance, and comply with legal obligations. We rely on consent, contract performance, legitimate interest, and legal obligation as our lawful bases under the GDPR.

4. Data Sharing

We never sell or rent your data. We share it only with:

• Trusted service providers (cloud hosting, CRM, email platforms) who are contractually bound to protect your data.
• Professional advisers (lawyers, accountants) under confidentiality obligations.
• Regulators or law enforcement where required by law.
• Acquirers in the event of a business merger or sale (you will be notified).

5. International Transfers

As a global agency, your data may be processed outside the EEA. When this happens, we ensure adequate protection through EU Standard Contractual Clauses (SCCs), UK IDTAs, or transfers to countries with an adequacy decision.

6. Data Retention

We keep your data only as long as necessary. As a guide: inquiry data is held for 3 years, client/contract records for 7 years (legal obligation), marketing opt-in records until consent is withdrawn, and website analytics data for 26 months.

7. Your Rights

Under the GDPR (and equivalent law), you have the right to access, correct, delete, or restrict your data, the right to data portability, to object to processing based on legitimate interest, and to withdraw consent at any time. You also have the right to lodge a complaint with your local data protection authority.

To exercise any right, contact us at hello@rumbling.ai

We respond within 30 days.

8. Security

We use TLS encryption in transit, encryption at rest, role-based access controls, and regular security assessments to protect your data. In the event of a breach likely to affect your rights, we will notify you and the relevant authority within 72 hours.

9. Other Information

• Children: Our site is not directed at children under 16. We do not knowingly collect their data.
• Third-party links: Links to external sites are provided for convenience. We are not responsible for their privacy practices.
• Marketing emails: You can unsubscribe at any time via the link in any email or by contacting us directly.

Changes & Contact

We may update this policy occasionally. The "Last updated" date at the top will always reflect the latest version. Continued use of the site after changes constitutes acceptance.

For any privacy-related questions or requests, reach us at hello@rumbling.ai

EU/EEA residents may also lodge a complaint with their national data protection authority.