Privacy policy

Last updated 1 September 2026

I am Rocky Bello, trading as CEO ROCK’S. This policy covers ceorocks.co.uk and the emails I send from it.

The short version: I collect what you type into a form, I use it to reply to you or send you what you asked for, I do not sell it to anybody, and you can tell me to delete it at any time by emailing info@ceorocks.co.uk.

1. What I collect, and when

I only collect information you give me. Nothing on this site tracks you, profiles you, or follows you to other websites.

• Enquiry forms. Your name, email, social handle, follower count, and whatever you write in the message box.
• The brand brief form. Your name, company, email, website, budget range, market, category, deadline, deliverables, usage requirements and the brief itself.
• The newsletter and the free guide. Your email address, and nothing else.
• The creator community form. Your name, email, social handles, which platform you post on, a follower band, your category, your country or city, whether you have done a paid brand deal before, and the rate you charge for one in-feed post. On this form you pick from bands rather than typing a figure, so none of it is exact. I ask for the rate because it is how I work out which brand briefs are worth putting you forward for.
• The gifting interest form. Your name, email and social handles, your follower count and your average views as exact figures rather than bands, your category, your country and city, the sizes you gave if you filled that in, which kinds of product you would accept, what you would post in return, your minimum product value, and anything you told me you will not promote. I do not ask for a delivery address here. If a gifting opportunity is confirmed, the brand asks you for that directly.
• Server logs. My host records IP addresses and browser types for security and traffic figures. That’s standard for any website, and I do not use those logs to identify anyone.

I do not collect payment card details on this site. If you buy something, payment is handled by a payment provider and your card details never reach me.

2. Why I am allowed to hold it

Under UK and EU data protection law I need a lawful basis for processing your information. Mine are:

• Legitimate interests. Replying to an enquiry you sent me. You contacted me. Answering you is the obvious expectation.
• Consent. For the newsletter. You tick to join, and you can leave from any email.
• Contract. If you become a client, I need your details to do the work and invoice you.
• Legal obligation. Tax and accounting records. I have to keep those whether either of us wants to or not.

3. Who else sees it

A small number of services process data on my behalf. I have chosen ones that are straightforward about what they do.

• Netlify. Hosts this website, receives what you send through a form and passes it to my inbox, and keeps the server logs described above.
• Cal.com. Only if you book the free call. Your name, email, and the handle and answers you type on the booking page, plus your phone number if you choose a phone call rather than a video one. Nothing on this site loads from cal.com, so if you never click through to book, they never hear of you.
• My email provider. Where your message lands and stays.
• An email marketing platform. If you joined the newsletter, your address sits there so I can send it.

Payhip handles checkout and, when a sale completes, tells my email platform which product you bought so the right follow-up reaches you. That is the entire list. I do not sell your data, I do not rent it, I do not trade it, and I do not hand it to advertisers. There is no advertising on this site.

The typefaces are served from this website itself rather than from Google Fonts, so no third party sees your IP address simply because you loaded a page here. There are no embedded videos, no chat widgets and no social media pixels either.

Your rate is the exception. If you put a rate on the community form it goes no further than me. I do not quote it to a brand and I do not put your number in front of anybody without asking you first and getting a yes. When I pitch you for a brief, what I send is you: your handle, your work, and why you fit it. Never your price list.

4. Cookies

This site sets no cookies of its own. There is no analytics, no advertising pixel, no Meta pixel, no session tracking, and nothing stored in your browser between visits.

That’s unusual, and it’s deliberate. It also means there is no cookie banner, because there is nothing to consent to.

If I add analytics later I will say so here and put a proper consent banner in front of it before anything starts collecting.

Checkout is handled by Payhip, on their site, not mine. If you buy something I can see that the sale happened and which advert it came from. That is measured on Payhip’s checkout, under Payhip’s privacy policy, and none of it happens on this site.

5. How long I keep things

• Enquiries that go nowhere. Deleted after twelve months.
• Newsletter subscribers. Kept until you unsubscribe, then removed within thirty days.
• Client records. Kept for the duration of our work together and then for six years after, because tax law requires it.
• Audit and campaign material you sent me. Deleted twelve months after delivery unless you ask me to keep it.

Community sign-ups I keep until you ask me to take you off, because the point of the list is that it is still there when a brief lands eighteen months later. One email removes you from both the mailing list and the roster, and I will write back to confirm it is done.

6. Your rights

If you are in the UK or the EU you have the right to ask me for a copy of what I hold on you, to correct it, to delete it, to restrict what I do with it, to object to it, and to receive it in a portable format. You also have the right to withdraw consent at any time.

Email info@ceorocks.co.uk and I will action it within thirty days. There is no charge and you do not have to give a reason.

If I get it wrong you can complain to the Information Commissioner’s Office at ico.org.uk. I would rather you told me first so I can fix it.

7. Where your data goes

Some of the services above are based in the United States. Where information is transferred outside the UK or EEA it is covered by the standard contractual clauses and adequacy arrangements those providers operate under.

8. Changes, and how to reach me

If this policy changes materially I will update the date at the top and, if you are on the list, say so in an email rather than hoping you notice.

Questions, corrections and deletion requests all go to info@ceorocks.co.uk.