Privacy Policy

// 1. Who we are

Roderick Consulting Inc. ("RCI", "we", "us", or "our") is a corporation organized under the laws of the State of Texas, United States, with its registered office at 10800 Gosling Drive, #103189, The Woodlands, Texas 77381. RCI builds and operates production-data platforms, business-intelligence tools, and field-hardened electronics for energy and industrial operators.

This Privacy Policy explains what information we collect when you visit our websites at roderickc.com and its subdomains, or use the platforms and services we operate for our clients, and how we use, share, protect, and retain that information. It also describes the rights you have over your personal data and how to exercise them.

If you access an RCI platform through your employer or another organization, that organization is the controller of your account data and its own privacy notice governs your use; this policy then describes how RCI processes that data on their behalf.

// 2. Information we collect

Information you provide to us.

Contact details — your name, email address, phone number, company, and role when you submit a contact form, request a demo, or correspond with us.
Account credentials — the email address and the identity data returned by your single-sign-on provider (Google or Microsoft) when you create or access an account on one of our platforms. We never receive or store your provider password.
Communications — the content of messages, support requests, and feedback you send us, together with any files you choose to attach.

Information we collect automatically.

Usage data — pages viewed, features used, time spent, and navigation paths within our sites and platforms.
Device and connection data — IP address, browser type and version, operating system, device type, language, and screen characteristics.
Log data — access timestamps, referring URLs, and diagnostic events generated by our servers and security systems.
Cookies and similar technologies — as described in our Cookies Policy.

Operational data within client platforms. When we operate a platform for a client (for example a drilling-operations or business-intelligence system), that platform processes the client's own operational records. RCI handles this data strictly as a processor, under the client's instructions and our contract with them, and does not use it for its own purposes.

We do not intentionally collect special categories of personal data (such as health, biometric, or financial-account data) through our public websites.

// 3. How we use your information

We use personal data only for defined purposes:

to provide, maintain, secure, and improve our websites, platforms, and services;
to respond to your inquiries, demos, and support requests;
to create and administer your account and authenticate your access;
to send operational notifications you have opted into, through our FARO notification service;
to monitor performance, diagnose faults, and prevent fraud, abuse, and unauthorized access;
to meet our legal, tax, and regulatory obligations; and
to establish, exercise, or defend legal claims.

We do not sell your personal information, and we do not use it for third-party advertising.

// 4. Legal bases for processing

Where the General Data Protection Regulation (GDPR) or a comparable law applies, we rely on the following legal bases:

Contract — to provide a service you or your organization has requested.
Legitimate interests — to secure our systems, understand how our services are used, and operate our business, balanced against your rights.
Consent — for optional communications and non-essential cookies; you may withdraw consent at any time.
Legal obligation — where processing is required to comply with applicable law.

We share personal data only as described here:

Service providers — infrastructure, hosting, and security vendors who process data on our behalf under written agreements that restrict them to our instructions.
Identity providers — Google and Microsoft, solely to authenticate your sign-in.
Our clients — where you access a platform that an RCI client administers, the relevant data is made available to that client as the controller of your account.
Legal and safety — where disclosure is required by law, legal process, or to protect the rights, property, or safety of RCI, our clients, or the public.
Corporate transactions — in connection with a merger, acquisition, or sale of assets, subject to the protections of this policy.

// 6. International transfers

RCI is based in the United States and may process data in the United States and other countries where we or our service providers operate. Where we transfer personal data out of a jurisdiction that restricts such transfers, we rely on an appropriate safeguard — such as the European Commission's Standard Contractual Clauses — to protect it.

// 7. Data security

We apply technical and organizational measures appropriate to the risk, including:

encryption of data in transit (HTTPS/TLS) and encryption at rest for credentials and sensitive data;
token-based authentication using secure, HttpOnly session cookies, with secrets held in a dedicated vault;
role-based access controls, least-privilege access, and audit logging of sensitive actions;
network isolation, monitoring, and regular security assessment of our systems.

No method of transmission or storage is perfectly secure, but we work to protect your data and to respond promptly to any incident that affects it.

// 8. Data retention

We keep personal data only for as long as it is needed for the purposes set out in this policy, or for as long as the law requires. Account data is retained while your account is active and for a reasonable period afterward; contact and correspondence data is retained while it remains relevant to our relationship; and server and security logs are retained on a rolling basis consistent with our security needs. When data is no longer required, we delete or anonymize it.

// 9. Your rights

Subject to applicable law, you have the right to:

access the personal data we hold about you;
correct inaccurate or incomplete data;
delete your data ("right to erasure");
restrict or object to certain processing;
port your data to another provider in a structured, machine-readable format;
withdraw consent at any time, without affecting prior processing; and
lodge a complaint with your local data-protection authority.

If you are a California resident, you also have the rights to know, delete, and correct your personal information and to be free from discrimination for exercising those rights; RCI does not sell or share personal information as those terms are defined under California law.

To exercise any right, contact us at privacy@roderickc.com. We will verify your request and respond within the time required by applicable law.

// 10. Children's privacy

Our websites and services are intended for businesses and professionals and are not directed to individuals under 18. We do not knowingly collect personal data from children. If you believe a child has provided us data, please contact us and we will delete it.

// 11. Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, provide a more prominent notice. Your continued use of our sites and services after an update takes effect constitutes acceptance of the revised policy.

// 12. Contact us

For any privacy question or request:

Email — privacy@roderickc.com
Mail — Roderick Consulting Inc., 10800 Gosling Drive, #103189, The Woodlands, Texas 77381, United States
Phone — +1 (936) 666-1363