Data Processing Register
This register documents all processing activities carried out by RapidLaunch as required by GDPR Article 30 (Record of Processing Activities). Each entry describes what data is processed, why, on what legal basis, and where it is stored.
See our Sub-Processors Register for detailed information on third-party processors listed below.
| System | Data Collected | Purpose | Legal Basis | Retention | Storage Location | Sub-Processors |
|---|---|---|---|---|---|---|
| Contact Form | Name, email, company, phone, message, IP, consent preferences | Respond to sales and support inquiries | Legitimate interest / Consent | 2 years after last contact | Ireland | None |
| Account Registration | Name, email, password (hashed), billing address, phone | Create and manage client accounts | Contract performance | Duration of account + 2 years | Ireland | None |
| Website Hosting | Client website files, databases, email accounts | Provide website hosting services | Contract performance | Duration of account + 30 days | Ireland | HostArmada |
| Support System | Name, email, ticket messages, file attachments, IP | Provide technical support and track issues | Contract performance / Legitimate interest | Duration of account + 1 year | Ireland | None |
| Billing / Payments | Name, email, billing address, payment card token (via Stripe) | Process subscription payments and invoices | Contract performance / Legal obligation | 6 years (Revenue requirements) | Ireland / US | Stripe |
| Server Logging | IP address, browser user-agent, request URI, timestamp, HTTP status | Monitor server health, detect attacks, debug issues | Legitimate interest | 30 days | Ireland | HostArmada |
| Cookie Consent | Consent choice (yes/no), timestamp, IP address | Record and honour cookie consent preferences | Legal obligation | 3 years | Ireland | None |
| Email Communications | Email address, name, message content, delivery status | Send service emails, invoices, marketing (with consent) | Contract performance / Consent | Duration of account + 2 years | Ireland | None |
| Site Deployments | Git commit metadata, deploy timestamps, deployer IP | Track and log deployments to client sites | Contract performance | 2 years | Ireland | GitHub, HostArmada |
| Backup and Archival | Full copies of all client site files, databases, and logs | Disaster recovery, business continuity, compliance archival | Contract performance / Legal obligation | 30 days (active backups) / 7 years (archived logs for payment records) | Ireland | HostArmada |
| Forge Website Generation Engine | Client configuration, site name, domain, tier selection, theme preferences | Automated website generation and deployment | Contract performance | Duration of account + 30 days | Ireland | GitHub, HostArmada |
| Logging and Analytics System | IP address, session ID, request URI, user agent, page views, feature interactions, error events | Service monitoring, usage analytics, error tracking, security incident detection | Legitimate interest | 7–365 days per data category | Ireland | None |
| Development and Test Environment | Replica of production database (anonymised where practical) | Software development, testing, and quality assurance | Legitimate interest | Duration of development cycle + 30 days | Ireland | None |
| Magic Link Authentication | Email address, one-time token, access timestamps, IP address, user agent | Passwordless client portal login | Contract performance / Security | Token: 24 hours / Access logs: 12 months | Ireland | None |
| Staging Preview Portal | Magic URL token, access timestamps, IP address, feedback text, page URL | Client preview of websites before launch, feedback collection | Contract performance | Duration of staging period + 90 days | Ireland | None |
Data Controller
RapidLaunch acts as a data controller for its own customer and visitor data (contact form, account registration, billing). We act as a data processor for client website content hosted on our infrastructure.
Data Protection Officer
dpo@rapidlaunch.ie — Please use subject line "Data Protection Inquiry" for all data processing register inquiries.