Rosebud Global Ltd (company number 16623472, trading as “Rosebud Solutions”, “Rosebud Global”, “Rosebud”, “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information of individuals (“you,” “your,” or “user”) who interact with us. This Privacy Policy (“Policy”) applies to information we collect on our website (rosebud.global), our digital platforms, and other channels owned or controlled by Rosebud (collectively, the “Website”).
This Policy describes the categories of personal information we obtain, the ways in which we use such information, the legal bases on which we rely, the circumstances under which we may share it, and the rights available to you under applicable law.
Rosebud may collect personal information in the following categories:
We may also obtain data from third-party sources such as analytics providers, trading platforms, business partners, and public records, and combine it with the information we collect directly.
We may process personal information for the following purposes:
Controller — our own account, site and payment data. We are the controller of personal data about our account holders, their users, our website visitors, and people who inquire about Rosebud. The rest of this Privacy Policy governs that data.
Processor — data the operated service handles. When you are a client, the Service processes personal data about your leads, inquirers and customers (“Contact Data”) on your behalf and on your documented instructions. For that data you are the controller and we are your processor, under a data processing agreement. An individual whose data sits in a client’s system should exercise their rights with that client as controller; we assist the client as that agreement requires.
As processor, and only to provide the Service on the client’s instructions, we:
Categories of data subject: the client’s leads, inquirers, prospects and customers. Categories of data: contact identifiers, inquiry content and channel, qualification fields and status, appointment and engagement events, and — where the client provides it — an expected or actual value. We do not enrich Contact Data with third-party or sourced data as part of the Service.
Payments are processed by Stripe as our payment processor. We do not receive or store full card numbers; we receive confirmation of payment and limited transaction metadata to manage billing. Stripe processes payment data as its own controller under its terms.
For clients on the attribution add-on, we produce a lead-outcome signal from Contact Data the Service already holds and deliver it to the client’s media team for the client to upload to its advertising platform. Only first-party records carrying a valid consent to advertising-platform use are ever included; third-party, sourced, purchased or enriched data is never used for this purpose or uploaded to an advertising platform. We deliver a file only; we do not access or operate any advertising account, and the controller relationship with the advertising platform sits with the client.
To provide the Service we use third-party AI model providers as subprocessors to qualify records and generate response and follow-up content. Contact Data and account data may be processed by these providers for that purpose, under contract and on our instructions.
We use subprocessors across these categories to operate the Service: hosting and database infrastructure; the client’s CRM and calendar; messaging delivery (email, SMS, WhatsApp and Instagram); AI model providers; payment processing; security and bot detection; and product and website analytics. A named subprocessor register — provider, purpose, data categories and processing region — is maintained and available to clients on request.
Contact Data held within the Service is retained for as long as needed to provide the Service and in line with the client’s instructions and the data processing agreement. On termination, records are made available for export within the export window and then deleted or anonymised, save where retention is required by law. Data already written into the client’s own CRM is unaffected and remains under the client’s control.
When you apply for a role at Rosebud Solutions via our website (including the Sales Development Representative application form), we collect and process the personal information you submit for the purpose of assessing your application and contacting you about it.
What we collect. Information you provide through the application form, including your name, email address, country and city of residence, LinkedIn profile (if shared), relevant sales / SDR / setter experience, industry experience, commission-role history, equipment confirmation, available hours, earliest start date, and the consents you provide on the form. We also automatically log the browser user-agent string at submission for support and abuse-prevention purposes.
How we use it. To review your application against the requirements of the role, to compare candidates fairly, to contact you with interview slots or follow-up questions, and to keep your details on file for future relevant openings during the retention period. We do not use applicant information for marketing without separate consent.
Where it is stored. Applications are stored in a private Supabase database hosted in the European Union, with access restricted to authorised members of the Rosebud Solutions team via our internal dashboard. A short notification containing only the applicant’s name is sent to an internal team channel on submission so we know to review the application — the full application body is never sent over that channel.
Lawful basis. We process applicant data on the basis of your consent (given when you submit the form) and our legitimate interest in assessing candidates for open roles. Where we rely on consent, you may withdraw it at any time by emailing the contact below — withdrawing consent will not affect any processing that has already taken place but will result in your application being deleted from our systems.
Retention. Unsuccessful applications are kept for up to 12 months from submission so we can consider you for future openings, after which they are deleted. If you ask us to delete your application sooner, we will do so promptly. Successful applicants’ data may be retained for longer as part of standard onboarding and employment records.
Your rights. You retain all of the rights set out in the “Your Rights Under UK GDPR” section below over your application data, including the right to access, correct, or delete it. To exercise any of these, contact us at contact@rosebud.global.
We use cookies, tracking pixels, and analytics tools to collect technical and usage data. This helps us:
We use both first-party and third-party cookies. Third-party providers include (but are not limited to): Google Analytics, Klaviyo, ManyChat, FX Blue, MyFXBook, Telegram, and Vantage.
On your first visit to our Website, you will be presented with a cookie consent banner. This allows you to accept or reject non-essential cookies in accordance with the UK GDPR and the Privacy and Electronic Communications Regulations (PECR). You can update your preferences at any time.
If you disable cookies, some Website features may not function properly.
We use PostHog, a product analytics platform, to understand how visitors interact with our Website and improve our services. PostHog acts as a data processor on our behalf and is operated by PostHog Inc. (United States) and its subsidiaries, including PostHog GmbH in Germany.
We use PostHog’s EU Cloud, meaning the personal data PostHog processes on our behalf — including IP address, device and browser data, pages viewed, click and navigation events, and session metadata — is stored on infrastructure located in Germany, within the EU.
We also use PostHog’s session replay feature, which records interactions with our Website such as mouse movements, clicks, scrolls, and page navigation, so we can diagnose usability issues and improve the experience. Input fields, payment details, and other sensitive information are masked by default and are not captured.
PostHog uses first-party cookies only and does not run third-party tracking or retargeting through our Website. Analytics and session replay are loaded only after you accept non-essential cookies through our cookie banner.
PostHog’s privacy notice is available at https://posthog.com/privacy.
When you book a consultation with us, scheduling is handled through Cal.com — specifically the EU-hosted instance at cal.eu — operated by Cal.com, Inc. To process your booking, Cal.com collects the information you provide on the booking form, including your name, email address, time zone, scheduling preferences, and any responses to questions we ask before the meeting.
Cal.com acts as a data controller in respect of its own platform and as a service provider to us for the purpose of facilitating your booking. Bookings made through cal.eu are processed and stored within the European Union.
Cal.com’s privacy notice is available at https://cal.com/privacy.
Under the UK GDPR, our lawful bases for processing include:
If you provide your mobile number and opt in to receive SMS communications from Rosebud Global Ltd (trading as Rosebud Solutions), we may send you text messages relating to your inquiry, consultations, appointment reminders, service-related updates, and (where separately consented) marketing communications. Message frequency varies depending on your interaction with us. Message and data rates may apply. You may opt out of SMS communications at any time by replying STOP to any message received. For assistance, reply HELP or contact us at contact@rosebud.global.
Consent to receive SMS communications is not a condition of purchase or service. Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties. We retain records of SMS opt-in consent as required for compliance and audit purposes.
Some of our partners and service providers (e.g., Google, Klaviyo, Telegram, Vantage) are based outside the UK/EEA. Where personal data is transferred internationally, we ensure appropriate safeguards are in place, including adequacy decisions or the UK International Data Transfer Agreement (IDTA) / Standard Contractual Clauses (SCCs), as applicable.
We may use performance monitoring and analytics tools to assess trading behavior and engagement within our community. These processes are used for research, education, and system development only. We do not rely on automated decision-making that produces legal or similarly significant effects on individuals.
We do not sell personal data. We may disclose it in the following circumstances:
Third parties are contractually required to process data in compliance with applicable law.
We retain personal information only for as long as necessary to fulfil the purposes outlined in this Policy, or as required by law. When no longer needed, information will be securely deleted or anonymised.
We maintain appropriate administrative, technical, and physical safeguards to protect personal data against unauthorised access, disclosure, alteration, or destruction.
Our services are not directed to, and are not intended for, individuals under the age of 18. We do not knowingly collect personal information from children.
You have the right to:
To exercise these rights, please contact us at contact@rosebud.global. We may need to verify your identity before fulfilling your request.
We encourage you to contact us first so we can address your concerns but if you are dissatisfied with how your data has been handled, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO):
Our Website may include links to third-party websites, apps, or plug-ins. These are operated independently and governed by their own privacy policies. Rosebud is not responsible for the content or practices of third-party providers.
We may update this Policy from time to time to reflect changes in practices, law, or technology. Updates will be posted here with a revised effective date.
If you have any questions or concerns about this Privacy Policy, please contact: