Privacy
How Rook Digital handles personal information and review-related data when you use the platform.
Last updated: 22 September 2026
This platform is used to share, review, comment on and approve campaign creative. This page explains the information required to provide that service and how it is handled.
Information we collect
When you use the platform, we may process information that is necessary to create and operate your client account and provide access to campaign reviews.
This may include your name, email address, date of birth, gender, account status, login activity and campaign access assigned to your account.
We also store information you submit while reviewing work, such as approvals, requests for changes, comments, replies and pinned feedback.
How we use your information
Information processed through the platform is used to authenticate users, provide access to assigned campaigns and creatives, record review decisions, maintain review history and support the creative approval process.
We may also use technical and security information to protect accounts, prevent unauthorised access, investigate platform issues and maintain the security and reliability of the service.
Campaign and review data
Campaign information, creative assets, storyboard content and review activity may be stored where necessary to provide the review service.
Access is intended to be limited to authorised staff and authorised clients who have been granted access to the relevant campaign or review.
Passwords and account security
Passwords are not stored in readable plain text. Passwords are transformed into secure password hashes before being stored.
Password reset functionality replaces the existing password with a new secure hash. Existing authenticated sessions may also be invalidated following a password reset.
Cookies and login sessions
Necessary authentication cookies are used to keep users securely signed in and to support account setup.
These cookies are required for core platform functionality. They are not intended for advertising or cross-site marketing tracking.
If analytics, advertising or other non-essential tracking technologies are introduced in the future, this privacy information will need to be updated accordingly.
Data storage
Account information, permissions, review activity and other structured platform information may be stored in Rook Digital's application database.
Uploaded creative files and related assets may be stored separately using secure file-storage services. Application secrets and authentication credentials are stored separately from normal campaign and user records.
Who can access your information
Personal and campaign information should only be made available where access is required for legitimate platform, campaign, operational or security purposes.
Rook Digital may also rely on service providers that support the hosting, storage, authentication, infrastructure or operation of the platform where necessary to deliver the service.
Protection of Personal Information
Rook Digital aims to process personal information in accordance with applicable South African data protection requirements, including the Protection of Personal Information Act, 2013 (POPIA).
Personal information should only be processed for appropriate purposes, protected against unauthorised access and retained only for as long as reasonably necessary for the purpose for which it was collected, subject to applicable legal and operational requirements.
Your privacy rights
Subject to applicable law, you may be entitled to ask whether Rook Digital holds personal information about you and to request access to or correction of certain personal information.
You may also contact Rook Digital regarding concerns about how your personal information is being handled or to request further information about privacy and data protection.
Data retention and deletion
Personal information and review records may be retained for as long as they are reasonably required for account administration, campaign review history, operational requirements, security, dispute handling or applicable legal obligations.
Where information is no longer required and there is no lawful or operational reason to retain it, it should be securely deleted or otherwise appropriately handled.
Security
The platform is designed with security controls around authentication, authorisation, validation, session handling, account access and infrastructure.
No online system can guarantee absolute security. Rook Digital may update technical and organisational safeguards as the platform develops and as security requirements change.
Changes to this privacy information
This privacy information may be updated as the platform changes, new features are introduced or legal, operational or security requirements change.
The date shown at the top of this page indicates when this version was last updated.
Contact Rook Digital
For privacy-related questions or requests concerning the platform, contact Rook Digital through its official contact channels.
© Rook Digital
Return to sign in