Privacy Policy

This privacy policy explains how Gruppo Media Limited(“Rouleur”, “we”, “us”) collects and processes your personal data when you use our website, subscribe to our magazine, sign up to our newsletter, buy from our shop, or book a trip with us. We are an independent publisher, retailer, and events provider, and we try to do things the right way.

Our services are not directed at children — see Children below.

1. Who we are

Rouleur is operated by Gruppo Media Limited, a company registered in England and Wales under company number 8411318, with its registered office at Somerset House, New Wing, Strand, London, WC2R 1LA. We are the “controller” responsible for your personal data under the UK GDPR and the Data Protection Act 2018.

For any privacy or data-protection question, contact us at dev@rouleur.cc. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority (ico.org.uk) — but please contact us first and we will do our best to resolve your concern.

2. What data we collect

Personal data means any information from which you can be identified. It does not include anonymised data. We collect the following categories:

• Account data — your name, email address, and the sign-in credentials managed by our authentication provider.
• Subscription & transaction data — your billing and delivery address, the plans and products you have purchased, and details of payments and invoices. We do not store full card numbers; card details are handled by our payments provider.
• Behavioural & technical data — your IP address, browser type and version, device and operating system, time zone, and information about how you use our site (pages viewed, articles read, and similar usage).
• Marketing & communications data — your preferences for receiving marketing from us, and your engagement with our emails (such as opens and clicks).

We do not collect special-category data (such as data revealing race or ethnicity, political opinions, religious beliefs, or health).

3. Why we collect it

We only use your personal data when the law allows us to. The lawful bases we rely on are:

• Performance of a contract — to fulfil your subscription, deliver the magazine, process shop orders, and provide the account and services you have signed up for.
• Legitimate interests — to run, secure, and improve our business, understand how our content is read, and prevent fraud, where your interests and rights do not override those interests.
• Consent — for optional marketing communications and for analytics and marketing cookies. You can withdraw consent at any time (see Your rights and our cookies policy).
• Legal obligation — to comply with tax, accounting, and other legal requirements.

4. Who we share it with

We do not sell your personal data. We share it only with the service providers (processors) that run our platform, and only for the purposes set out below. Each is bound by contract to protect your data and use it solely on our instructions.

We may also share data with professional advisers (lawyers, auditors, insurers), with HM Revenue & Customs and other authorities where the law requires it, and with a buyer or successor if we sell or restructure our business — in which case the new owner may only use your data as described here.

5. How long we keep it

We keep your personal data only for as long as we need it for the purposes we collected it for, including to meet legal, accounting, and reporting requirements.

• Subscription invoices and payment records — retained for six years after you cease being a customer, as required by UK tax law.
• Everything else — when you delete your account, your profile is anonymised in place and the personal data we hold is pseudonymised or removed across our systems and third-party services within a short period, leaving only the records we are legally required to keep.

In some circumstances we may anonymise your data for research or statistical purposes, in which case we may keep it indefinitely without further notice to you, because it can no longer identify you.

6. Your rights

Under data-protection law you have the right to:

• Access — receive a copy of the personal data we hold about you.
• Rectification — have inaccurate or incomplete data corrected.
• Erasure — ask us to delete your personal data where there is no good reason for us to keep processing it.
• Restriction — ask us to suspend processing of your data in certain circumstances.
• Portability — receive the data you provided to us in a structured, commonly used, machine-readable format, or have it sent to another provider.
• Objection — object to processing based on legitimate interests, and to direct marketing at any time.
• Rights relating to automated decision-making — we do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.
• Withdraw consent — where we rely on consent, you can withdraw it at any time without affecting processing already carried out.

You will not usually have to pay a fee, and we aim to respond to all legitimate requests within one month. We may need to verify your identity before acting on a request.

7. How to exercise your rights

Many of these rights are self-service. Visit your account preferences to:

• Export your data — download a machine-readable copy of the personal data we hold about you (Article 20 portability).
• Delete your account — erase your account and anonymise your personal data (Article 17 erasure).
• Manage your marketing preferences — opt in or out of newsletters and marketing email.

For any other request — access, rectification, restriction, or objection — email us at dev@rouleur.cc.

8. International transfers

Your account and profile data is stored in the United Kingdom (London). Some of our service providers are based outside the UK and European Economic Area (EEA) — chiefly in the United States — so using them involves transferring your data internationally.

Whenever we transfer personal data out of the UK or EEA, we make sure a similar level of protection applies by relying on an approved safeguard: either a transfer to a country the UK or European Commission has deemed adequate, or contractual protections such as the UK International Data Transfer Agreement (IDTA) or the European Commission’s Standard Contractual Clauses (SCCs).

9. Data security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way. We limit access to those who have a business need to know, and they are subject to a duty of confidentiality. We have procedures to deal with any suspected data breach and will notify you and any applicable regulator where we are legally required to do so.

10. Children

Our services are not directed at children, and we do not knowingly collect personal data from anyone under the age of 16. If you believe a child has provided us with personal data, please contact us at dev@rouleur.cc and we will delete it.

11. Cookies

We use cookies and similar technologies to run the site, remember your preferences, and — with your consent — to measure how our content is read. For full details of the cookies we set and how to change your choices, see our cookies policy.

12. Changes to this policy

We may update this policy from time to time as our services or the law change. If we make a material change that affects how we use your data, we will let you know in advance by email. Please check this page periodically for the latest version.

13. Contact

For privacy queries, email dev@rouleur.cc, or write to us at:

Gruppo Media Limited
Somerset House, New Wing, Strand, London, WC2R 1LA