Privacy policy
Steve Kraitt trading as Rocket Lab London (we, us or our) is the controller of personal information handled for our website, enquiries and business administration. This policy explains what we collect, why we use it, who receives it and your rights. Separate client processing arrangements are explained below.
Last updated 19th October 2026
INFORMATION WE COLLECT
You may provide your name, business name, role, email address, telephone number, project requirements, budget, correspondence, billing details and materials or references relevant to a proposed commission. We receive this information through our enquiry form, email, telephone, meetings and project correspondence.
Project materials may contain personal information, such as names, photographs or likenesses of identifiable people. We may also receive business contact details and relevant correspondence from the client, an agency, a colleague or a referrer. We do not ask you to send sensitive personal information through the general enquiry form.
Our website and service providers may collect technical information such as IP address, browser and device details, pages visited, referring pages, approximate location, security logs and cookie preferences. The information collected depends on the services enabled and your choices.
HOW WE USE INFORMATION AND OUR LAWFUL BASIS
We use enquiry and project information to respond, discuss requirements, prepare quotations, plan production, communicate, deliver agreed services and administer payments. Where you are personally contracting with us, this is necessary to take steps at your request or perform our contract. For contacts acting for a business, agency or employer, we rely on our legitimate interests in managing those business relationships and delivering commissioned work, subject to your rights and interests.
We keep appropriate invoices, accounts and other records to meet legal obligations. We also use relevant correspondence and project records for our legitimate interests in keeping accurate business records and establishing, exercising or defending legal claims.
We use technical information to operate and secure the website, prevent abuse and diagnose problems, relying on our legitimate interests in running a secure service. Where analytics or other optional technologies require consent, we rely on your consent. Where consent is our basis, you can withdraw it without affecting the lawfulness of earlier processing.
Information required to assess an enquiry or fulfil a contract must be provided if you want us to perform that task. Other details are optional. Without the necessary contact or project information, we may be unable to respond, quote or deliver the requested service. We do not sell personal information.
AI ASSISTED PRODUCTION AND CLIENT MATERIALS
Rocket Lab London uses professionally directed AI-assisted tools alongside compositing and retouching to create visual assets. Product and brand references are not always personal data, but images, names and likenesses of identifiable people may be.
We do not treat an enquiry or acceptance of our standard terms as permission to submit personal information or confidential material to generative AI services. Any such use requires prior written project authorisation, a defined purpose and appropriate safeguards. Relevant provider terms, account settings, retention and training arrangements must be assessed before an authorised upload.
Where a client determines why and how personal information is used and we process it only on that client’s instructions, the client is the controller and we act as a processor under separate written processing terms. Those terms govern the project processing, including approved subprocessors, international transfers and deletion or return. Please direct requests about that processing to the commissioning client; we will assist it as required.
We act as controller for our own enquiries, business contacts, invoicing and administration. We do not use client materials to train or fine-tune general-purpose AI models or create work for unrelated clients without separate written permission. Our creative tools are not used to make solely automated decisions about people with legal or similarly significant effects.
WEBSITE COOKIES AND ANALYTICS
Our website is hosted on Wix. Cookies and similar technologies support functions such as security, reliable operation and remembering privacy choices. Optional analytics, advertising tools or embedded services may collect additional information if enabled.
Where consent is required, we enable those technologies only after you choose to accept them. You can accept, reject or change optional choices through the website’s cookie settings. Details of the technologies in use, their purposes, providers and durations are available in the cookie notice and settings. Browser settings also allow you to manage cookies, although blocking essential functions may affect the website.
SHARING INFORMATION
We share information only where necessary for the purposes described here. Recipients may include Wix and website-service providers; email, communications, cloud-storage and file-delivery providers; invoicing, accounting and payment providers; IT support; and professional advisers.
Where needed for an agreed production, authorised assistants, retouchers and other production suppliers may receive relevant information under appropriate confidentiality and data-protection arrangements. An AI production provider receives personal information only within the separately authorised arrangements described above.
We may disclose information where required by law, a court or regulator, or where necessary to establish, exercise or defend legal claims. Service providers may act as processors or as independent controllers for their own services; their applicable notices explain their separate processing.
INTERNATIONAL TRANSFERS
Some service providers may store or access information outside the UK. Where a restricted transfer occurs, we must use a lawful transfer arrangement, such as applicable UK adequacy regulations or approved contractual safeguards, with additional measures where needed. You can contact us for information about the relevant safeguards and how to obtain a copy, subject to appropriate redactions.
Any transfer of personal information handled on a client’s behalf must also comply with that client’s agreed processing terms. We do not assume that a provider’s availability in the UK means all of its processing takes place here.
SECURITY
We use reasonable technical and organisational measures appropriate to the information and risk, including restricting access to those who need it and using suitable account and storage protections. No online service or electronic transmission can be guaranteed completely secure. Please contact us before sending sensitive personal information or confidential project materials so that suitable arrangements can be agreed.
RETENTION
We keep personal information only for as long as reasonably needed for the purpose for which it was collected. Enquiry records are reviewed according to whether the discussion remains active, the likelihood of follow-up and any need to keep a record of advice, quotations or commitments.
For clients, retention takes account of the project and business relationship, payment and tax obligations, applicable limitation periods, disputes and any agreed storage arrangement. Production references and working files are reviewed against project needs and confidentiality commitments. Where we act as a processor, return or deletion follows the written client instructions and agreed processing terms.
Information may remain in restricted backup copies until the relevant backup cycle expires. Records subject to a legal obligation or dispute may need to be retained longer. A licence to use delivered imagery does not include indefinite storage of production files by the Studio.
YOUR RIGHTS
Depending on the circumstances and applicable law, you may ask to access, correct or erase your personal information, restrict its use or receive certain information in a portable form. Where we rely on legitimate interests, you may object to that processing for reasons relating to your situation. You can object to direct marketing at any time. Where we rely on consent, you may withdraw it at any time.
Contact info@rocketlab.london to make a request. We may need to verify your identity or clarify the request. Some rights are subject to conditions or lawful exemptions; we will explain any applicable restriction. Where we process information for a client, we will refer or assist with your request as appropriate.
You can complain to the Information Commissioner’s Office at ico.org.uk. You are welcome to contact us first so that we can try to resolve the issue, but you do not have to do so before contacting the ICO.
LINKS TO OTHER WEBSITES
Our website may link to other websites or services. Their operators are responsible for their own privacy practices. Please read their privacy information before providing personal information.
BUSINESS CHANGES
If our business is reorganised or transferred, relevant personal information may be shared with advisers and a proposed successor where lawful, necessary and subject to appropriate confidentiality and safeguards. We will provide further information where required.
CHANGES TO THIS POLICY
We may update this policy to reflect changes to our services, processing or legal requirements. The current version and update date will appear on the website. Where required, we will tell you about material changes before using your information for a new purpose.
BUSINESS DETAILS
Rocket Lab London is the trading name of Steve Kraitt.
Business address: 1 Barnfield Shaw, Wisborough Green, Billingshurst, West Sussex RH14 0GJ, UK.
Email: info@rocketlab.london
Telephone: +44 (0) 7779 299 058