Privacy Policy

1. Who we are and who controls the data

RogalMail is operated by Rogal Marketing Agency in British Columbia, Canada. We provide an email-marketing platform. For account and website information we collect for our own purposes, we act as the organization responsible for that information. For subscriber lists and campaign recipient data customers upload, the customer generally determines the purposes of processing and we process it to provide the service. Customers remain responsible for their own permission records, lawful notices, and privacy compliance.

2. Data we collect

When you create an account, we collect your name, email address, password credentials in hashed form, account and organization details, role, service settings, and plan status. When you send a contact-form inquiry, we collect your name, email address, subject, message, and submission timestamp. From customer-managed lists we process subscriber email addresses, optional names, tags, list memberships, consent or subscription status, suppression records, and related campaign information. For sending security and reporting, we may process delivery identifiers, timestamps, bounce and complaint events, unsubscribe events, and operational logs. We also receive basic technical data such as IP addresses, browser details, authentication logs, and cookies needed for sessions and security.

3. What we use data for

We use personal information to create and secure accounts; provide sending, list, and automation tools; manage plans and caps; respond to inquiries; investigate abuse; maintain deliverability; troubleshoot incidents; meet legal obligations; and communicate service notices. We do not sell contact lists or use customers' recipient lists to market RogalMail to those recipients. Optional marketing from us, if introduced, will follow applicable consent rules.

4. Consent and legal bases

Customers must obtain appropriate consent to collect and email their subscribers, including confirmed opt-in evidence where required by RogalMail's policies. We process account and customer data where needed to deliver contracted services, satisfy legal obligations, maintain system security, or with consent where required. You may withdraw consent where applicable, but some data may be needed to administer an active account or comply with law.

5. Service providers and transfers

We use service providers to host and operate the platform, databases, queues, support tooling, and email transport, including Amazon SES for outbound mail when enabled. Those providers may process information outside British Columbia or Canada, including in the United States or other countries where they operate. We require appropriate protections and limit service-provider access to the purposes needed to operate RogalMail. We may disclose information where lawfully compelled, to address abuse or safety threats, or as part of a legitimate business transaction subject to applicable safeguards.

6. Cookies and security

We use essential cookies and session technology to keep accounts signed in, protect forms, and prevent abuse. We do not need advertising-tracking cookies for the website described here. We use security measures such as access controls, password hashing, encrypted transport when configured with HTTPS, account scoping, and activity monitoring. No online service can promise absolute security.

7. Retention and deletion

We keep account and campaign information for as long as reasonably necessary to provide the service and meet legal, security, and accounting requirements. Contact inquiries are retained for follow-up and support and may be deleted when no longer needed. Customers may request deletion or account closure, subject to legal and operational obligations. Unsubscribe, bounce, and complaint suppression records may need to be retained indefinitely to respect opt-outs and prevent renewed sending to those addresses. Backup copies may persist temporarily under ordinary backup retention schedules.

8. Your choices and rights

Depending on applicable law, you may request access to your personal information, correction of inaccurate details, withdrawal of consent, or deletion of eligible records. You may ask questions about how information is used, request information about service providers, and complain to a privacy regulator. For marketing messages sent by a RogalMail customer, use the unsubscribe link in that message or contact the sender; the sender controls the underlying subscriber relationship. For RogalMail account or website information, contact us using our contact form. We may verify your identity before acting on a request.

9. Children

RogalMail is intended for people capable of entering business agreements, not children. Do not knowingly provide children's personal information without a valid legal basis and any required parental authorization.

10. Data incidents and changes

We investigate suspected data incidents and give notices when required by applicable law. We may update this policy as our services evolve. Material changes will be disclosed with an updated effective date and other notice where legally required.

11. Contact

Privacy inquiries and requests can be sent through our contact page. RogalMail is operated by Rogal Marketing Agency, British Columbia, Canada.