Privacy Notice

Last updated 6 August 2026.

1. Who controls your information

Tiki-Taka Limited is the controller of personal information handled for Rondo. We are registered in England and Wales under company number 07650923. Our registered office is 167-169 Great Portland Street, 5th Floor, London, England, W1W 5PF.

Privacy enquiries can be sent to support@rondorondo.studio.

2. Information we handle

• Purchase and entitlement information: email address, Stripe Checkout and payment identifiers, amount, currency, payment status, refund or dispute status, and your access entitlement.
• Marketing choice: whether you actively opted in to future-drop emails, the wording version, source and time of that choice.
• Support information: messages you send, the email address used and information needed to resolve the request.
• Security and delivery information: requested path, response status, timestamp, IP address and browser or device details contained in infrastructure and security logs, plus transactional-email recipient, provider message identifier, delivery outcome and failure reason.
• Aggregate site measurements: page views and selected link or download events collected through Simple Analytics without analytics cookies, stored IP addresses or persistent visitor identifiers.

We receive information directly from you, from Stripe when it confirms a payment event, and from the systems used to operate and secure Rondo. We do not receive or store full payment-card details.

3. Why we use it

• Contract: to verify payment, deliver and recover access, provide downloads, support the purchase and process a requested refund.
• Legal obligations: to keep accounting and VAT records, respond to lawful requests and meet consumer-protection duties.
• Legitimate interests: to secure the service, prevent fraud and abuse, diagnose failures, answer support requests and understand aggregate site use. We use only what is reasonably necessary and do not build advertising profiles.
• Consent: to send optional future-drop marketing. A purchase is not consent, the option is not preselected and consent can be withdrawn at any time.

4. Who receives it

• Stripe: checkout, payment, tax and refund processing.
• Amazon Web Services: hosting, entitlement storage, security logs and transactional email delivery.
• Google Workspace: monitored support and business email.
• Simple Analytics: aggregate, cookie-free website measurements that are not used to identify individual visitors.
• A future email provider: only if you opt in and when Rondo begins sending future-drop marketing, with unsubscribe handling.

We may also disclose information to professional advisers, payment-dispute participants, regulators or law-enforcement authorities where reasonably necessary or legally required. We do not sell personal information.

5. International transfers

Rondo is based in the United Kingdom and uses providers that may process information in the UK, European Economic Area, United States or other locations. Where UK personal information is transferred internationally, we rely on applicable adequacy regulations or contractual and organisational safeguards supplied by the provider.

6. How long we keep it

• Purchase, payment and VAT records are generally retained for at least six years to meet accounting and tax obligations.
• Entitlement records are kept while hosted access is provided and afterwards only where needed for legal, refund, dispute or security purposes.
• Application logs are normally retained for 30 days and CloudFront access logs for no more than 90 days.
• Transactional-email delivery records are normally retained for no more than 90 days, except where a failure must be retained longer to resolve an access or support problem.
• Support correspondence is kept only as long as needed to resolve the request and handle related legal or operational issues.
• Marketing consent is kept until it is withdrawn. We may retain the minimum information necessary to ensure an opt-out remains respected.

7. Cookies, storage and analytics

Rondo does not use advertising cookies and Simple Analytics does not set analytics cookies. No analytics runs on personal access or recovery pages, or inside the offline edition.

• CloudFront-Policy, CloudFront-Signature and CloudFront-Key-Pair-Id: three strictly necessary, secure, HTTP-only cookies that authorise the private product. They are session cookies and their access policy expires after up to 24 hours.
• rondo_download_notice_ack_poster and rondo_download_notice_ack_bundle: session cookies, with corresponding session-storage entries, that separately remember whether you accepted the poster download notice and the library or offline-edition download notice. They expire at the end of the browser session.
• rondo-theme: local browser storage used only after you choose a light or dark theme. It remains until you change it or clear browser storage.

Because these mechanisms provide requested access, remember a choice you make, or measure traffic without cookies or visitor profiles, Rondo does not present a consent banner. You can clear cookies and site storage through your browser, although clearing the signed cookies will require you to refresh product access.

8. Your rights

Depending on the circumstances and where you live, you may have rights to access, correct, erase, restrict or receive your personal information, and to object to certain uses. You can withdraw marketing consent at any time without affecting earlier lawful processing.

To exercise a right, email support@rondorondo.studio. We may need to verify that the request relates to your email or purchase. These rights are not absolute where information must be retained for legal obligations or the establishment, exercise or defence of legal claims.

You can complain first to us so we have an opportunity to resolve the issue. You also have the right to complain to the UK Information Commissioner’s Office or the data-protection authority where you live.

9. Security

Rondo uses restricted access, encryption in transit and at rest, hashed access tokens, short-lived signed access cookies and operational monitoring. No online system can be guaranteed completely secure, so never send payment-card details or your personal access token by email.

10. Changes and contact

We may update this notice when Rondo’s services or providers change. The current version and update date will remain on this page.

Contact: support@rondorondo.studio.