This page explains what we do with the information you give us through this website. It is written to be readable rather than to be long. If anything here is unclear, ask us and we will answer plainly.
1. Who we are
RockCAM is a 3-axis CNC programming add-in for Siemens NX. It is developed and published by Suzhou Tongshang Software Technology Co., Ltd. (“we”, “us”, “our”), a software company registered in Suzhou, Jiangsu, China, founded in 2014.
For the purposes of the EU and UK General Data Protection Regulation (GDPR), we are the data controller for personal data collected through this website, rockcamonline.com.
2. What we collect
Two kinds of personal data reach us from this site. We collect nothing else — no phone number, no postal address, no payment details, and no behavioural profile.
Information you send us
Our contact form asks for your first name, last name, email address, a subject line and whatever you choose to write in the message. Anything you type into the message box is kept — so please don’t send us part drawings or customer names unless you want us to have them. You can also email us directly at the address in section 11.
Technical information recorded by the server
Like every web server, ours records the IP address that made each request, the browser identification string, the page requested and the time. These entries exist so we can keep the site up, spot attacks and abuse, and work out why something broke. We do not use them to track individuals.
We do not buy, rent, scrape or sell personal data, and we do not run advertising trackers on this site.
3. Why we use it
- To answer your enquiry. If you write to us about an evaluation, a licence or a technical question, we use what you sent to reply and, if it leads somewhere, to supply and support you. Legal basis under GDPR Article 6(1)(b) — steps taken at your request before entering a contract — and Article 6(1)(f), our legitimate interest in answering business enquiries.
- To keep the site running and secure. Server logs are used to detect attacks, abuse and faults. Legal basis: Article 6(1)(f), our legitimate interest in protecting our own service.
That is the whole list. We do not use your data for automated decision-making or profiling, we do not add you to a newsletter you did not ask for, and we do not use your enquiry to build a marketing profile of you.
4. Cookies
A cookie is a small file a website asks your browser to store. This site sets no advertising cookies and no third-party analytics cookies. We do not track you across other websites and we do not run retargeting.
The cookies that can exist here are strictly functional:
- WordPress session cookies (
wordpress_test_cookie,wordpress_sec_*,wp-settings-*) — these exist only for a logged-in administrator’s editing session. Ordinary visitors to this site never receive them. pll_language— remembers which language you are reading if the site is offered in more than one.- A consent-record cookie — if a cookie notice is shown, this records the choice you made so you are not asked again. It contains no personal data.
If we later add an analytics or advertising service, it will not load before you actively agree to it, and it will be named on this page. You can also block or delete cookies in your browser at any time without losing access to anything on this site.
5. Who else sees your data
We keep the list of companies that touch our data deliberately short. All of them act on our written instructions as processors, and all of them are bound by contract to protect what they handle.
- DigitalOcean, LLC — hosts this website, its database and any files stored with it. Servers are located in London, United Kingdom.
- Google — provides the mailboxes we use to read and answer your enquiry. Messages that reach us are stored on Google’s infrastructure in the European Union and the United States.
If we bring in a further service that handles your data — for example a transactional email provider to deliver the internal notification that a form was submitted — we will name it here and update the date at the foot of this page.
We may also disclose personal data where we are legally required to, or where we need to in order to establish or defend a legal claim. We never sell personal data.
6. Where your data is held
Our engineering and sales team is in Suzhou, China, so information you send us through the contact form is transferred to and read in China. Our website is hosted in the United Kingdom and our mailboxes are hosted by Google in the EU and the United States.
Where we transfer personal data out of the European Economic Area or the United Kingdom, we rely on the European Commission’s Standard Contractual Clauses, or on an equivalent safeguard offered by the provider concerned, together with technical measures such as encryption in transit. You are welcome to ask us for details of the safeguard that applies to your data.
7. How long we keep it
- Contact form enquiries and the email thread that follows — for as long as we are in touch about your enquiry, and afterwards for as long as we need the record of a business relationship, which may include licence and support history. Enquiries that come to nothing are deleted.
- Server logs — short-lived. They rotate automatically and are not kept long-term.
- Consent records — 12 months, after which we ask again.
8. Your rights
If you are in the European Union, the European Economic Area, the United Kingdom or Switzerland, you have the right to:
- ask for a copy of the personal data we hold about you;
- have inaccurate data corrected;
- ask us to erase your data;
- restrict or object to how we use it;
- receive your data in a portable format, or have it sent to another provider;
- withdraw consent at any time, where consent is the basis on which we are using it;
- lodge a complaint with your national data-protection authority.
If you are a California resident, the CCPA/CPRA gives you the right to know what personal information we collect, to have it deleted or corrected, and to opt out of any sale or sharing of it. We do not sell or share personal information, and we do not use or disclose sensitive personal information for any purpose beyond providing our services.
To exercise any of these rights, email us using the address in section 11. We answer within 30 days, and we will not charge you or treat you differently for asking.
9. Security
This site is served over HTTPS with a valid certificate, and the administration area is access-controlled and not publicly discoverable. Form submissions are stored on our own server and in our mailbox, both of which are password-protected with two-factor authentication where the provider supports it.
No method of transmission or storage is perfectly secure. Our approach is to keep the surface small — we collect as little as we can, and we keep it for as short a time as we can — rather than to claim a guarantee we cannot make.
10. Children
This site is aimed at businesses and engineers. It is not directed at children, and we do not knowingly collect personal data from anyone under 16. If you believe a child has sent us information, tell us and we will delete it.
11. Contact
Questions about this policy, or any request about your data:
Email: noahgenius@gmail.com
Post: Suzhou Tongshang Software Technology Co., Ltd., Suzhou, Jiangsu, China
Web: rockcamonline.com/contact
12. Changes to this policy
If we change how we handle personal data we will update this page and the date below. If the change is significant — for example, adding an analytics service — we will say so plainly here rather than relying on you to notice.
Last updated: 8 October 2026