Privacy
Policy

1. Who We Are

RedRock Strategies ("we", "us", "our") is a boutique advisory firm registered in the Republic of Armenia, providing corporate finance and Owner's Office advisory services. Our principal place of business is 45 Orbeli Street, Area 211, Yerevan 0028, Republic of Armenia. For all privacy-related matters, you may contact us via our contact page.

2. What Information We Collect

We collect personal information only when you voluntarily provide it to us, specifically:

• Contact form submissions: full name, company name, email address, phone number, and the content of your enquiry message
• Direct email correspondence: any information you include when contacting us via the contact form on our website
• Client engagement: business and financial information provided in the course of an advisory engagement, governed separately by our engagement letter and confidentiality agreement

We do not collect sensitive personal data (health, political opinions, religious beliefs, biometric data) through this website. We do not collect payment card details through this website.

3. How We Use Your Information

Information submitted through our contact form or by email is used exclusively to:

• Respond to your enquiry and assess whether an engagement is mutually appropriate
• Contact you with follow-up questions relevant to your stated situation
• Fulfil contractual obligations once an engagement is agreed

We do not use your personal information for marketing purposes without your explicit consent. We do not add you to mailing lists. We do not send unsolicited communications.

4. Legal Basis for Processing

We process your personal data on the following legal bases:

• Legitimate interest: responding to your enquiry and managing our business relationship with you
• Contractual necessity: fulfilling the terms of an advisory engagement
• Consent: where you have explicitly opted in to receive communications from us
• Legal obligation: where processing is required under applicable Armenian law

5. How We Share Your Information

We treat all client and prospective client information as strictly confidential. We do not sell, rent, or trade your personal information to any third party.

We may share your information only in the following limited circumstances:

• With professional advisors (legal counsel, accountants) where necessary to provide our services to you, and only under equivalent confidentiality obligations
• Where required by law, regulation, or a lawful order of a competent Armenian or other relevant authority
• With your explicit prior written consent

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected:

• Enquiries that did not lead to an engagement: deleted or anonymised within 12 months of the last communication
• Completed engagements: retained for 7 years following the end of the engagement, in accordance with applicable Armenian business record-keeping requirements
• Ongoing engagements: retained for the duration of the engagement and for 7 years thereafter

7. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration, or destruction. These measures include restricted access controls, encrypted communications, and secure document handling protocols.

While we take the security of your data seriously, no method of transmission over the internet is completely secure. If you have concerns about sharing sensitive information via this website, please reach out via our contact page to discuss secure alternatives.

8. Cookies and Website Analytics

This website does not currently use cookies for tracking, advertising, or analytics purposes. If we introduce analytics tools in the future, we will update this policy and seek appropriate consent where required.

9. Your Rights

Subject to applicable Armenian data protection law, you have the right to:

• Access: request a copy of the personal data we hold about you
• Rectification: request correction of inaccurate or incomplete personal data
• Erasure: request deletion of your personal data, subject to our legal retention obligations
• Restriction: request that we restrict processing of your personal data in certain circumstances
• Objection: object to processing based on legitimate interest
• Portability: request your data in a structured, commonly used, machine-readable format

To exercise any of these rights, please contact us via our contact page. We will respond within 30 days of receiving your request.

10. Third-Party Links

This website may contain links to external websites. We are not responsible for the privacy practices or content of those websites and encourage you to review their privacy policies independently.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The most current version will always be available on this page with the date of the last update clearly indicated. We encourage you to review this policy periodically.

12. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the Republic of Armenia. Any disputes arising in connection with this policy shall be subject to the exclusive jurisdiction of the competent courts of the Republic of Armenia.