This Privacy Policy explains what personal data OneRoof Launchpad ("ORL", "we", "us") collects, why, and what rights you have over it. We are established in the Netherlands and act as the data controller for the personal data described below, processed in accordance with the EU General Data Protection Regulation (GDPR).

1. Who we are

OneRoof Launchpad
The Hague, Netherlands
KvK 98837567
VAT number NL005357013B30
Contact: core@onerooflaunchpad.com

2. What personal data we collect

a. Contact form submissions — name, email address, company, and any message content you provide.

b. Launch Radar signups and use — email address, and any project, company, or market details you submit when creating an account or using Launch Radar.

c. Briefing subscribers — email address, for the purpose of sending our corridor briefing.

d. Engagement-related data — where you become a Client, business contact details of you and your team, and any personal data shared with us in the course of an Engagement (as further governed by our General Terms and Conditions and, where applicable, a separate Data Processing Agreement).

e. Website analytics — usage data such as pages visited, general location, and device type, collected only where you have given cookie consent.

3. Why we process your data, and our legal basis

Responding to your enquiry - Legitimate interest, or steps taken prior to entering a contract
Providing Launch Radar access - Performance of a contract, or consent
Sending the briefing - Consent (opt-in, revocable at any time)
Delivering a paid Engagement - Performance of a contract
Website analytics - Consent (cookie banner)

4. How long we retain your data

a. Contact and enquiry data is retained for as long as needed to respond to you, and is deleted after [12 months] if no further engagement follows.

b. Where a Client relationship is established, engagement-related data is retained for the duration of that Engagement plus [5 years], in line with Dutch statutory retention requirements for administrative and tax records.

c. Briefing subscriber data is retained until you unsubscribe.

d. You may request earlier deletion at any time, subject to our legal obligation to retain certain records (see Article 6).

5. International transfers

a. Some of the personal data we process is shared with, or accessible to, our Partners in India — where necessary to deliver an Engagement, or with other recipients located outside the European Economic Area (EEA).

b. As India does not currently benefit from an adequacy decision from the European Commission, any such transfer is carried out on the basis of an appropriate safeguard, in particular the European Commission's Standard Contractual Clauses (SCCs), entered into with the relevant recipient. A copy of the relevant safeguard can be requested at [core@onerooflaunchpad.com].

c. Where personal data is processed in India in connection with an Engagement, we take reasonable steps to ensure this is handled consistently with both the GDPR and India's Digital Personal Data Protection Act (DPDP), 2023.

6. Who we share your data with

We do not sell personal data. We may share it with:

a. Processors who support our operations, including our website hosting provider, email delivery service, and analytics provider, each bound by a data processing agreement where required.

b. Partners (ORT, SVR, and other network partners), only where necessary to deliver a specific Engagement you have agreed to, and only the data relevant to that Engagement.

c. Authorities, where disclosure is required by law.

7. Your rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you

• Correct inaccurate data

• Request deletion of your data

• Restrict or object to certain processing

• Request a copy of your data in a portable format

• Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal

To exercise any of these rights, contact us at [core@onerooflaunchpad.com]. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), or the data protection authority of your own EU member state.

8. Cookies

This website only uses a cookie-free analytics tool by Framer.

9. Data security

We take appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or misuse. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant authorities and, where required, affected individuals, in accordance with the GDPR.

10. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The date below reflects the last update.

Last updated: 16th September 2026