GDPR

GDPR Compliance

Last updated: January 1, 2025

GDPR Compliant

RoleReady is committed to protecting the privacy rights of individuals in the European Union. This page explains how we comply with the General Data Protection Regulation (GDPR).

Data Controller

RoleReady Inc.
San Francisco, CA
Email: privacy@roleready.me
DPO: dpo@roleready.me

Your Rights Under GDPR

Right of Access

Request a copy of all personal data we hold about you.

Right to Portability

Receive your data in a machine-readable format.

Right to Rectification

Correct inaccurate or incomplete personal data.

Right to Erasure

Request deletion of your personal data ("right to be forgotten").

To exercise any of these rights, contact us at privacy@roleready.me. We will respond within 30 days.

Lawful Basis for Processing

  • Contract performance: Processing necessary to provide the RoleReady service you've signed up for.
  • Legitimate interests: Improving the platform, security monitoring, and fraud prevention.
  • Legal obligation: Compliance with applicable laws and regulations.
  • Consent: Optional analytics and marketing communications (you can withdraw consent at any time).

Data Retention

We retain personal data for as long as your account is active. Account data is deleted within 30 days of account deletion. Backup copies are purged within 90 days. Some data may be retained longer where required by law.

International Transfers

Data may be transferred to and processed in the United States and other countries. We use Standard Contractual Clauses (SCCs) and Data Processing Agreements (DPAs) approved by the European Commission to ensure adequate protection.

Cookie Policy

  • Essential cookies: Required for the platform to function. Cannot be disabled.
  • Analytics cookies: Used to understand platform usage. Can be disabled in your account settings.
  • Preference cookies: Remember your settings (like dark/light mode). Can be disabled in your browser.

Complaints

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with your local data protection authority.