Privacy Policy

Who is responsible

ROLLY K LIMITED (“Playbookly”, “we”, “us”) is the data controller for the personal data processed through rollykuku.shop. We operate an online-only digital SOP and operations-manual studio.

You can reach us at support@rollykuku.shop or +44 7197018876, or by post at 8 Burn Bridge Drive, Scotland, ML10 6UP, United Kingdom.

What we collect

• Account data: name, email address, password (stored hashed) and plan.
• Subscription & billing data: plan, billing status, and the last four digits and card brand relayed by our payment processor. We never receive or store your full card number.
• Studio inputs: the task descriptions and process details you type to generate SOPs, checklists and diagrams.
• Generated content: the SOPs, checklists, RACI matrices, diagrams and walkthroughs produced from your inputs.
• Support data: messages you send us through the contact form, email or phone.
• Technical data: IP address, device and browser type, and basic usage events needed to run and secure the service.

Collection sources

We collect personal data from the following collection sources:

• Directly from you — when you create an account, type into the studio, subscribe, or contact support.
• Automatically from your device — technical and usage data generated as you use the site.
• From our payment processor — billing status and limited card metadata after you pay.
• From service providers acting on our behalf — hosting, database, email and, where connected, an AI provider that returns your generated result.

Why we use it and our legal bases

• To provide the studio (generate and store your documents, run your account) — performance of a contract.
• To take payment and manage subscriptions — performance of a contract.
• To provide support — legitimate interests and performance of a contract.
• To secure the service and prevent abuse — legitimate interests and legal obligation.
• To send essential service messages (receipts, security notices) — performance of a contract; marketing email only with your consent.

AI data processing: user input, generated output and uploaded files

User input:the task descriptions, process details and any sample data or files you submit (“user input”) are processed only to produce the document you asked for. User input is stored in your account so you can reopen and edit it, and is transmitted over encrypted connections.

Generated output:the SOPs, checklists, RACI matrices, diagrams and training walkthroughs the studio creates (“generated output”) are stored in your account and made available to you to export. Generated output is derived from your user input and belongs to you.

Uploaded and sample data: any file or example data you upload is used solely to generate your result and is retained with your account until you delete it.

Retention & deletion: you may delete any single document, or request deletion of your account together with all user input and generated output, at any time by emailing support@rollykuku.shop. On deletion, content is removed from active systems and purged from backups within 30 days.

No model training: we do not use your user input or generated output to train, fine-tune or improve AI models, and we do not build training datasets from your content. When an AI provider is connected to refine wording, only the minimum text needed for that single request is sent, solely to return your result. Do not submit confidential, secret or third-party proprietary information into the studio.

Payments and the payment-provider boundary

Card payments are handled by a PCI-DSS compliant payment processor. Card details are entered on the processor's secure checkout, not on our servers. We receive confirmation of payment and limited billing metadata (such as card brand and last four digits) but never the full card number, CVC or PIN.

Who we share it with

We share data only with processors that help us run the service, under contract and only as needed:

• Hosting & infrastructure — to serve the application and store data.
• Payment processing — to take subscription payments and handle refunds and disputes.
• Database & storage — to hold your account, documents and support records.
• Email delivery — to send receipts and service notices.
• AI provider (if connected) — to process the minimum text needed to refine a result.

We do not sell your personal data. We may disclose data where required by law.

International transfers

Our processors may store or process data outside the UK and EEA. Where they do, we rely on appropriate safeguards such as UK/EU adequacy decisions or Standard Contractual Clauses to protect your data.

How long we keep it

• Account & generated content: while your account is active, and up to 30 days after deletion in backups before permanent removal.
• Billing records: as required by tax and accounting law (generally up to 6–7 years).
• Support messages: up to 24 months.
• Technical/security logs: typically up to 12 months.

Security

We use encryption in transit, hashed passwords, access controls and least-privilege practices. No system is perfectly secure, but we work to protect your data and will notify you and the relevant authority of a qualifying breach as required by law.

Your rights (UK GDPR, EU GDPR, CCPA)

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your data (“right to be forgotten”).
• Restrict or object to certain processing.
• Data portability.
• Withdraw consent at any time.
• For California residents: know, delete, correct, and opt out of “sale” or “sharing” of personal information, and not be discriminated against for exercising these rights.

To exercise any right, email support@rollykuku.shop. We respond within the timeframe the law requires.

Do Not Sell or Share

We do not sell your personal information and we do not share it for cross-context behavioural advertising. If this ever changes, we will provide a clear opt-out mechanism first.

Cookies and analytics

We use essential cookies to keep you signed in and to secure the service, and limited privacy-respecting usage measurement to improve it. See our Cookie Policy for details and choices.

Automated decisions and children

We do not make legal or similarly significant decisions about you by automated means. The service is not for children under 13, and users aged 13–17 must have parent or guardian consent. We do not knowingly collect data from children under 13; contact us if you believe we have.

Complaints and contact

Contact us first at support@rollykuku.shopand we'll try to resolve your concern. You may also complain to your local data protection authority — in the UK, the Information Commissioner's Office (ICO).