Privacy Policy

1. Commitment to Family Privacy

At Rockett Genealogy, we treat your personal information and family heritage with the highest degree of respect, discretion, and confidentiality. This Privacy Policy outlines how we collect, handle, protect, and process data in full compliance with the European General Data Protection Regulation (GDPR) and the Irish Data Protection Acts 1988–2018.

2. Zero-Credential Policy (No Passwords Ever)

We operate a strict Zero-Credential architecture:

• We never ask for, accept, store, or process your account passwords, PINs, or two-factor authentication codes.
• All tree collaboration is performed via read-only "Guest" or "Viewer" permissions directly inside Ancestry.com, or through user-exported GEDCOM files.
• You retain 100% control over your accounts and can revoke our viewer access with one click at any time.

3. Payment Information & Stripe Processing

Payment transactions are processed entirely through Stripe Inc. using 256-bit SSL encryption. Rockett Genealogy never receives, views, or stores your credit card number, expiration date, or CVV security code. Stripe securely provides us with your name, billing email, and transaction receipt for order fulfillment.

4. Information We Collect & How It Is Used

We only collect information necessary to perform the genealogical investigation you commission:

• Contact Details: Your name and email address for order confirmation, delivery of deliverables, and follow-up consultation.
• Genealogical Data: Ancestor names, approximate birth/marriage/death dates, locations, family trees, or notes you provide.

We never sell, rent, or monetize your family data. We do not provide your family trees or personal data to advertisers, third-party data brokers, or public registries.

5. Protection of Living Relatives

Genealogical ethics and privacy laws mandate that living individuals must be shielded from unauthorized public disclosure. In all exported client deliverables and GEDCOM files, living persons have their personal details, exact birthdates, and locations redacted or marked private as standard practice.

6. Data Isolation, Storage & Retention

Each commissioned research project is processed in an isolated client workspace. We retain project working files for 90 days after deliverable delivery to facilitate any follow-up questions, supplementary document requests, or consultations you may desire. Following this period, raw research working files can be permanently erased upon your written request.

7. Your Rights Under GDPR

As an individual in the European Union or worldwide, you enjoy comprehensive data rights:

• Right of Access: Request a copy of all personal data held concerning you.
• Right of Rectification: Request correction of inaccurate personal data.
• Right of Erasure: Request the deletion of your personal data ("Right to be Forgotten").
• Right to Data Portability: Receive your genealogical deliverables in a clean, standard format (PDF and GEDCOM).